Proxifier 4[.]12 Portable[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Proxifier 4.12 Portable.rar
Size

2.5MB
MD5

a4d062769ec64b64d8a55f89df379e3c
SHA1

209a3cf76c8519a82aeb1114fdaf240e4c225779
SHA256

93968c82cc89eaab5504e90ef7ab9ff372303aeb233fd9b033a6d1ca0a3cb8a2
SHA512

d47ddd7a9f14e633d2c82b05b7d37428f2baaa6363fb52945bc4f9aaacf8b068538e9b792f7a39d29a5594060e89c7332296b6372d81716fc036a6efa97c58e2
SSDEEP

49152:oaH3Kxxsp7jmV32TfDKMUrfVoEppioeGnIaPKfJpd1AoAnEaLJDq6W56:oe6xipfGc7K3jVoOpIDfZRiEUq65

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Proxifier 4.12 Portable/Proxifier Portable.exe

Files

Proxifier 4.12 Portable.rar
.rar
Proxifier 4.12 Portable/App/AppInfo/Launcher/Custom.nsh
Proxifier 4.12 Portable/App/AppInfo/Launcher/Proxifier Portable.ini
Proxifier 4.12 Portable/App/AppInfo/appicon.ico
Proxifier 4.12 Portable/App/AppInfo/appinfo.ini
Proxifier 4.12 Portable/App/Proxifier/Helper64.exe
.exe windows:6 windows x64

f22ee416ba57a8b1132b3e0b4c91fa97

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19/09/2018, 00:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:da:67:ef:71:64:15:cd:f1:36:98:fb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

27/07/2023, 14:53

Not After

27/07/2026, 14:53

Subject

SERIALNUMBER=000237148,CN=VENTOBYTE SL,O=VENTOBYTE SL,STREET=C/ Los Prados 166,L=Gijón,ST=Asturias,C=ES,1.2.840.113549.1.9.1=#0c12696e666f4076656e746f627974652e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13024553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

c9:ac:bd:b2:21:42:06:ee:7b:db:e3:0b:e2:04:10:72:14:ff:e9:26:bb:bc:cb:23:53:ea:11:77:18:20:50:dd
Signer

Actual PE Digest

c9:ac:bd:b2:21:42:06:ee:7b:db:e3:0b:e2:04:10:72:14:ff:e9:26:bb:bc:cb:23:53:ea:11:77:18:20:50:dd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ReleaseSemaphore
GetModuleFileNameW
WaitForMultipleObjects
OpenProcess
GetLastError
OpenSemaphoreW
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
WriteConsoleW
CreateFileW
SetFilePointerEx
GetConsoleMode
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP

user32

UnhookWindowsHookEx
wsprintfW
RegisterWindowMessageW
MessageBoxW
PostMessageW

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Proxifier 4.12 Portable/App/Proxifier/Profiles/Default.ppx
.xml
Proxifier 4.12 Portable/App/Proxifier/Proxifier.exe
.exe windows:6 windows x86

3c4966fab36b7ba4b517f21650fc6af8

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19/09/2018, 00:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:da:67:ef:71:64:15:cd:f1:36:98:fb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

27/07/2023, 14:53

Not After

27/07/2026, 14:53

Subject

SERIALNUMBER=000237148,CN=VENTOBYTE SL,O=VENTOBYTE SL,STREET=C/ Los Prados 166,L=Gijón,ST=Asturias,C=ES,1.2.840.113549.1.9.1=#0c12696e666f4076656e746f627974652e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13024553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

fb:e9:9f:c9:ed:d4:e7:6c:09:35:57:05:49:43:01:32:7b:06:63:4a:fa:0c:17:37:8b:fa:a9:ac:33:d4:c7:62
Signer

Actual PE Digest

fb:e9:9f:c9:ed:d4:e7:6c:09:35:57:05:49:43:01:32:7b:06:63:4a:fa:0c:17:37:8b:fa:a9:ac:33:d4:c7:62

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetStdHandle
GetFileType
SetStdHandle
HeapQueryInformation
GetCommandLineW
GetCommandLineA
VirtualQuery
VirtualAlloc
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
SetConsoleCtrlHandler
CreateTimerQueue
InterlockedPushEntrySList
ReadConsoleW
GetCPInfo
LCMapStringW
QueryPerformanceFrequency
GetStringTypeW
MoveFileExW
RemoveDirectoryW
FindFirstFileExW
GetExitCodeThread
SwitchToThread
TryEnterCriticalSection
OutputDebugStringW
GetDriveTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SignalObjectAndWait
GetThreadPriority
SetFilePointerEx
IsValidCodePage
GetACP
RtlUnwind
GetOEMCP
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
VirtualFree
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
GetStartupInfoW
IsDebuggerPresent
GetSystemTimeAsFileTime
QueryPerformanceCounter
InitializeSListHead
WaitForSingleObjectEx
IsProcessorFeaturePresent
UnhandledExceptionFilter
FindResourceExW
GetWindowsDirectoryW
SetErrorMode
GetUserDefaultLCID
GetTempFileNameW
SearchPathW
GetProfileIntW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
WriteConsoleW
GlobalFlags
LocalReAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FindNextFileW
FileTimeToLocalFileTime
CompareStringA
GetVersionExW
lstrcmpA
GetThreadLocale
GetStringTypeExW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
GlobalReAlloc
GetFileSize
GetCurrentDirectoryW
GlobalGetAtomNameW
lstrcmpiW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcpyW
SuspendThread
SetThreadPriority
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LocalAlloc
InitializeCriticalSectionAndSpinCount
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
EncodePointer
GetModuleHandleA
OutputDebugStringA
CopyFileW
CloseHandle
MulDiv
GlobalSize
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
OpenMutexW
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
ExpandEnvironmentStringsW
GetCurrentThread
MapViewOfFile
CreateFileMappingW
CreateDirectoryW
GetPrivateProfileSectionW
ResetEvent
GetComputerNameW
GetCurrentThreadId
GetTempPathW
ExitProcess
SetUnhandledExceptionFilter
ConnectNamedPipe
CreateNamedPipeW
ResumeThread
GetCurrentProcess
GetSystemInfo
CreateIoCompletionPort
GetQueuedCompletionStatus
GetSystemDirectoryA
LoadLibraryA
CreateMutexW
ReleaseSemaphore
WaitForMultipleObjects
CreateSemaphoreW
GetCurrentProcessId
FreeLibrary
LoadLibraryW
GetExitCodeProcess
CreateProcessW
VerSetConditionMask
VerifyVersionInfoW
GetTickCount64
WideCharToMultiByte
LocalFree
FormatMessageW
TerminateProcess
GetSystemTime
WriteFile
ReadFile
OpenProcess
Sleep
WaitForSingleObject
SetEvent
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
MultiByteToWideChar
GetPrivateProfileStringW
GetFileAttributesW
GetTickCount
GetComputerNameA
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
CreateFileW
GetOverlappedResult
DeviceIoControl
GetLastError
CreateEventW
InterlockedFlushSList

user32

GetMessageW
SendDlgItemMessageA
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
IsDialogMessageW
SetWindowTextW
CheckDlgButton
SetDlgItemTextW
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
MapWindowPoints
GetMenuItemInfoW
CreatePopupMenu
SetParent
DrawEdge
EnableWindow
GetDC
SendMessageW
GetClientRect
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsMenu
CreateWindowExW
DrawStateW
DrawFocusRect
DrawIconEx
SetLayeredWindowAttributes
EnumDisplayMonitors
CountClipboardFormats
IsClipboardFormatAvailable
GetMenuDefaultItem
DestroyAcceleratorTable
LoadAcceleratorsW
TranslateAcceleratorW
UnpackDDElParam
ReuseDDElParam
CopyImage
GetIconInfo
TrackMouseEvent
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
IsZoomed
CharUpperW
GetAsyncKeyState
SetWindowRgn
SetCursor
IntersectRect
NotifyWinEvent
GetKeyNameTextW
MapVirtualKeyW
PostMessageW
GetParent
GetSysColor
SetRectEmpty
SetTimer
GetUpdateRect
InflateRect
InvalidateRect
UpdateWindow
LoadMenuW
GetSubMenu
CopyRect
GetSystemMetrics
DrawFrameControl
IsRectEmpty
OffsetRect
ScreenToClient
PtInRect
ClientToScreen
GetCursorPos
wsprintfW
UnhookWindowsHookEx
RegisterWindowMessageW
LoadIconW
DestroyIcon
RedrawWindow
SystemParametersInfoW
GetKeyState
LoadImageW
ReleaseDC
CreateIconIndirect
GetDesktopWindow
DeleteMenu
InsertMenuItemW
AppendMenuW
SetMenuDefaultItem
SetForegroundWindow
IsIconic
BringWindowToTop
IsChild
GetFocus
MessageBeep
GetSystemMenu
EnableMenuItem
MessageBoxW
FillRect
IsWindowVisible
KillTimer
UnregisterClassW
DefWindowProcW
LoadCursorW
FindWindowW
ShowWindow
GetLastActivePopup
SetMenuItemInfoW
EqualRect
SetCapture
WindowFromPoint
ReleaseCapture
HideCaret
GetMenuStringW
GetMenuState
GetMenuItemID
GetMenuItemCount
InsertMenuW
RemoveMenu
IsWindowEnabled
GetWindowLongW
GetWindowThreadProcessId
UpdateLayeredWindow
EnableScrollBar
MonitorFromPoint
OpenClipboard
IsWindow
DestroyWindow
CloseClipboard
SetClipboardData
EmptyClipboard
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
DrawTextW
LockWindowUpdate
DrawTextExW
TranslateMessage
SetRect
UnionRect
GetSysColorBrush
SetClassLongW
ModifyMenuW
RegisterClipboardFormatW
PostQuitMessage
SetWindowContextHelpId
MapDialogRect
PostThreadMessageW
WaitMessage
ShowOwnedPopups
RealChildWindowFromPoint
GetTabbedTextExtentW
CharUpperBuffW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
CopyAcceleratorTableW
SetCursorPos
CopyIcon
FrameRect
SubtractRect
EnumChildWindows
GetDoubleClickTime
SendNotifyMessageW
DestroyCursor
DrawIcon
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
GetComboBoxInfo
CharNextW
InvalidateRgn
GetNextDlgGroupItem
InvertRect
IsCharLowerW
MapVirtualKeyExW
CreateMenu
GetWindowRgn
GetWindowRect
DestroyMenu

gdi32

SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetTextAlign
StartDocW
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
CreateEllipticRgn
Ellipse
SelectPalette
CreatePolygonRgn
Polyline
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetDIBits
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
RoundRect
GetCharWidthW
GetRgnBox
OffsetRgn
GetWindowOrgEx
GetViewportOrgEx
LPtoDP
CreatePalette
GetPaletteEntries
EnumFontFamiliesExW
GetNearestPaletteIndex
GetSystemPaletteEntries
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextFaceW
SetPixelV
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateDCW
GetStockObject
GetDeviceCaps
CreateFontW
CreateFontIndirectW
GetTextExtentPoint32W
CreateCompatibleDC
CreateBitmap
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
DeleteDC
GetTextMetricsW
GetTextColor
Polygon
ExtCreatePen
CreateSolidBrush
Rectangle
GetObjectW
CreateDIBSection
GetBkColor
CreateRoundRectRgn
CopyMetaFileW

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW
GetJobW

advapi32

RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
IsValidSid
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetLengthSid
CopySid
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
FreeSid
LookupAccountSidW
EqualSid
SetServiceStatus
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteKeyW
RegSetValueW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW

shell32

SHGetMalloc
SHGetFileInfoW
SHAppBarMessage
DragFinish
DragQueryFileW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
Shell_NotifyIconW
ShellExecuteW
DragAcceptFiles
ExtractIconExW
SHGetDesktopFolder
SHAddToRecentDocs
ShellExecuteExW

comctl32

ImageList_ReplaceIcon
ImageList_GetImageCount
ord381
ImageList_GetIconSize
ImageList_Draw
ImageList_AddMasked
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DragLeave
ImageList_EndDrag

shlwapi

UrlUnescapeW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

DrawThemeParentBackground
IsAppThemed
GetThemeSysColor
GetWindowTheme
DrawThemeText
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
GetThemePartSize
CloseThemeData
GetCurrentThemeName
GetThemeColor
OpenThemeData

ole32

OleTranslateAccelerator
IsAccelerator
OleSetMenuDescriptor
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleGetIconOfClass
OleLockRunning
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
CreateItemMoniker
CreateGenericComposite
GetHGlobalFromILockBytes
WriteClassStm
StgCreateDocfileOnILockBytes
CreateFileMoniker
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CoDisconnectObject
CoInitializeEx
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoUninitialize
CoInitialize
CoCreateInstance
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemAlloc
StringFromCLSID
CreateStreamOnHGlobal
CoTaskMemFree
CoGetClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop

oleaut32

VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
OleCreateFontIndirect
VarBstrFromDate
LoadTypeLi
SafeArrayDestroy
SysStringLen

oledlg

OleUIInsertObjectW
OleUIPasteSpecialW
OleUIBusyW
OleUIObjectPropertiesW

gdiplus

GdipDeleteGraphics
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectI
GdiplusStartup
GdiplusShutdown
GdipSetSmoothingMode
GdipCreatePen1
GdipDeletePen
GdipSetPenLineCap197819
GdipDrawLinesI
GdipCreateSolidFill
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipCreateHBITMAPFromBitmap
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromStream
GdipFillEllipseI
GdipAlloc
GdipFree
GdipDeleteBrush

secur32

DeleteSecurityContext
CompleteAuthToken
InitializeSecurityContextA
FreeContextBuffer
QuerySecurityPackageInfoA
FreeCredentialsHandle
AcquireCredentialsHandleA

crypt32

CryptUnprotectData
CryptProtectData

iphlpapi

CancelMibChangeNotify2
NotifyIpInterfaceChange
NotifyAddrChange
GetAdaptersAddresses

rasapi32

RasGetEntryPropertiesW
RasEnumEntriesW

dnsapi

DnsQueryConfig

version

VerQueryValueW

ws2_32

WSAIoctl
ioctlsocket
__WSAFDIsSet
WSACreateEvent
WSAGetLastError
ntohs
closesocket
send
recv
socket
htons
bind
listen
accept
htonl
ntohl
WSASetLastError
inet_ntoa
gethostbyaddr
getservbyport
gethostbyname
inet_addr
getservbyname
connect
setsockopt
WSARecv
WSASend
WSAStartup
inet_pton
inet_ntop
WSASocketW
WSAEnumProtocolsW
shutdown
getsockopt
getsockname
select
WSAAccept
recvfrom
sendto

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

wininet

InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetOpenUrlW
HttpQueryInfoW
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetCloseHandle

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 590KB - Virtual size: 589KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Proxifier 4.12 Portable/App/Proxifier/ProxyChecker.exe
.exe windows:6 windows x86

887ba0016b3be391b14c4d201e15278b

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19/09/2018, 00:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:da:67:ef:71:64:15:cd:f1:36:98:fb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

27/07/2023, 14:53

Not After

27/07/2026, 14:53

Subject

SERIALNUMBER=000237148,CN=VENTOBYTE SL,O=VENTOBYTE SL,STREET=C/ Los Prados 166,L=Gijón,ST=Asturias,C=ES,1.2.840.113549.1.9.1=#0c12696e666f4076656e746f627974652e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13024553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

16:03:54:fe:12:c7:4b:ed:48:41:b3:b8:c0:72:8d:58:50:79:71:49:6c:7b:8b:b9:17:93:25:52:ad:99:91:a1
Signer

Actual PE Digest

16:03:54:fe:12:c7:4b:ed:48:41:b3:b8:c0:72:8d:58:50:79:71:49:6c:7b:8b:b9:17:93:25:52:ad:99:91:a1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
LockResource
WriteConsoleW
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
LCMapStringW
GetTimeFormatW
GetDateFormatW
ExitProcess
GetStdHandle
VirtualAlloc
GetSystemInfo
GetFileType
SetStdHandle
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
RtlUnwind
LoadLibraryExA
ExpandEnvironmentStringsA
OutputDebugStringW
LoadResource
FindResourceW
SetLastError
GetComputerNameA
GetVersionExW
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GlobalFree
LoadLibraryW
GetModuleFileNameW
MapViewOfFile
VirtualQuery
GetCurrentThreadId
SetErrorMode
GetLastError
HeapFree
InitializeCriticalSectionEx
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
ResumeThread
GetACP
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
GetModuleHandleW
FreeResource
GlobalLock
GlobalUnlock
MulDiv
EncodePointer
GetSystemDirectoryW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LocalFree
FormatMessageW
GetCurrentThread
lstrcmpA
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCurrentProcessId
CloseHandle
SetEvent
WaitForSingleObject
CreateEventW
SetThreadPriority
SuspendThread
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GlobalFlags
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
VirtualProtect
GetThreadLocale
DeleteFileW
CreateFileW
FindClose
FindFirstFileW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
GetCurrentProcess
FileTimeToLocalFileTime
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
GetFileTime
FindNextFileW
SizeofResource

user32

MoveWindow
ShowWindow
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
EqualRect
CopyRect
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
GetScrollPos
ValidateRect
SetForegroundWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetCursorPos
SetWindowPos
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
EnableWindow
LoadIconW
GetSystemMenu
AppendMenuW
SendMessageW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
CheckRadioButton
IsDlgButtonChecked
BeginPaint
ReleaseDC
SetWindowTextW
IsDialogMessageW
PostQuitMessage
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
GetMessageW
GetForegroundWindow
GetClientRect
GetDC
SetTimer
IsIconic
GetSystemMetrics
DrawIcon
GetWindowRect
PtInRect
LoadMenuW
GetSubMenu
RedrawWindow
GetSysColorBrush
SetCursor
LoadCursorW
UnregisterClassW
SendDlgItemMessageA
SetRectEmpty
OffsetRect
GetParent
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongW
GetDesktopWindow
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
DestroyMenu
TranslateMessage
RealChildWindowFromPoint
IntersectRect
SetCapture
ReleaseCapture
PostThreadMessageW
RegisterClipboardFormatW
CharUpperW
MessageBeep
GetNextDlgGroupItem
IsRectEmpty
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
InvalidateRect
KillTimer

gdi32

GetRgnBox
GetTextColor
GetBkColor
GetMapMode
CreateRectRgnIndirect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
GetObjectW
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
ExtSelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetClipBox
Escape
DeleteObject
DeleteDC
CreateBitmap
CreateFontW
GetDeviceCaps
GetStockObject

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

UrlUnescapeW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW

ole32

CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoInitialize
CLSIDFromProgID
CoFreeUnusedLibraries
OleInitialize
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CLSIDFromString
CoCreateInstance
OleUninitialize

oleaut32

SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
VariantCopy
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
OleCreateFontIndirect

oledlg

OleUIBusyW

ws2_32

inet_addr
htons
socket
gethostbyname
closesocket
WSAStartup
send
WSAGetLastError
recv
inet_ntoa
connect

oleacc

LresultFromObject
CreateStdAccessibleObject

wininet

HttpQueryInfoW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetOpenW
InternetCloseHandle
InternetOpenUrlW
InternetReadFile
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable
InternetQueryOptionW
InternetGetLastResponseInfoW
InternetSetStatusCallbackW

Sections

.text
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Proxifier 4.12 Portable/App/Proxifier/PrxDrvPE.dll
.dll windows:6 windows x86

36bc40606197d54443c9780e79de3b57

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19/09/2018, 00:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:da:67:ef:71:64:15:cd:f1:36:98:fb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

27/07/2023, 14:53

Not After

27/07/2026, 14:53

Subject

SERIALNUMBER=000237148,CN=VENTOBYTE SL,O=VENTOBYTE SL,STREET=C/ Los Prados 166,L=Gijón,ST=Asturias,C=ES,1.2.840.113549.1.9.1=#0c12696e666f4076656e746f627974652e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13024553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

2b:9b:3a:d4:96:42:29:ea:89:7f:f6:1c:cf:79:d8:5f:dd:f9:4a:6e:d9:2e:ff:e7:d7:11:9b:b8:10:35:f9:c1
Signer

Actual PE Digest

2b:9b:3a:d4:96:42:29:ea:89:7f:f6:1c:cf:79:d8:5f:dd:f9:4a:6e:d9:2e:ff:e7:d7:11:9b:b8:10:35:f9:c1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
VerifyVersionInfoW
VerSetConditionMask
GetProcAddress
ExpandEnvironmentStringsW
FreeLibrary
CreateToolhelp32Snapshot
GetCurrentProcessId
Module32FirstW
Module32NextW
CloseHandle
VirtualProtect
GetModuleFileNameW
GetCurrentThread
LoadLibraryW
GetCurrentProcess
CallNamedPipeW
OpenMutexW
HeapCreate
HeapAlloc
HeapFree
GetModuleHandleExW
CreateThread
CreateFileW
DecodePointer
GetConsoleMode
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibraryAndExitThread
GetLastError
Sleep
GetConsoleCP
WriteFile
FlushFileBuffers
HeapReAlloc
HeapSize
SetStdHandle
GetStringTypeW
SetFilePointerEx
GetProcessHeap
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW

user32

CallNextHookEx
wsprintfW
MessageBoxW
SetWindowsHookExW

advapi32

GetLengthSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
CopySid

ws2_32

WSALookupServiceEnd
WSALookupServiceNextW
WSALookupServiceBeginW
WSAIoctl
WSASendTo
WSCGetProviderPath
getsockname
connect
WSAConnect
closesocket
WSASocketW
htons
WSCEnumProtocols
WSAStartup
WSASetLastError
WSAGetLastError
ntohs
getpeername

Exports

Exports

InitFilter3

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Proxifier 4.12 Portable/App/Proxifier/PrxDrvPE64.dll
.dll windows:6 windows x64

4da1b552c0ca130642c3a8af201bc61d

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19/09/2018, 00:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:da:67:ef:71:64:15:cd:f1:36:98:fb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

27/07/2023, 14:53

Not After

27/07/2026, 14:53

Subject

SERIALNUMBER=000237148,CN=VENTOBYTE SL,O=VENTOBYTE SL,STREET=C/ Los Prados 166,L=Gijón,ST=Asturias,C=ES,1.2.840.113549.1.9.1=#0c12696e666f4076656e746f627974652e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13024553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

76:8d:b3:64:28:7f:cd:63:73:74:b6:fb:62:3b:0a:fa:98:33:c4:f8:37:69:b1:6e:a2:24:44:74:bb:e7:7e:31
Signer

Actual PE Digest

76:8d:b3:64:28:7f:cd:63:73:74:b6:fb:62:3b:0a:fa:98:33:c4:f8:37:69:b1:6e:a2:24:44:74:bb:e7:7e:31

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
VerifyVersionInfoW
VerSetConditionMask
GetProcAddress
ExpandEnvironmentStringsW
FreeLibrary
CreateToolhelp32Snapshot
GetCurrentProcessId
Module32FirstW
Module32NextW
CloseHandle
VirtualProtect
GetModuleFileNameW
GetCurrentThread
LoadLibraryW
GetCurrentProcess
CallNamedPipeW
OpenMutexW
HeapCreate
HeapAlloc
HeapFree
GetModuleHandleExW
CreateThread
WriteConsoleW
CreateFileW
GetConsoleMode
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibraryAndExitThread
GetLastError
Sleep
GetConsoleCP
WriteFile
FlushFileBuffers
HeapReAlloc
HeapSize
SetStdHandle
GetStringTypeW
SetFilePointerEx
GetProcessHeap
LCMapStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW

user32

CallNextHookEx
wsprintfW
MessageBoxW
SetWindowsHookExW

advapi32

GetLengthSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
CopySid

ws2_32

WSALookupServiceEnd
WSALookupServiceNextW
WSALookupServiceBeginW
WSAIoctl
WSASendTo
WSCGetProviderPath
getsockname
connect
WSAConnect
closesocket
WSASocketW
htons
WSCEnumProtocols
WSAStartup
WSASetLastError
WSAGetLastError
ntohs
getpeername

Exports

Exports

InitFilter3

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Proxifier 4.12 Portable/App/Proxifier/Settings.ini
Proxifier 4.12 Portable/Proxifier Portable.exe
.exe windows:4 windows x86

61259b55b8912888e90f516ca08dc514

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

user32

GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu

gdi32

SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject

kernel32

GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f22ee416ba57a8b1132b3e0b4c91fa97

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6aCertificate

Key Usages

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

5f:da:67:ef:71:64:15:cd:f1:36:98:fbCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

c9:ac:bd:b2:21:42:06:ee:7b:db:e3:0b:e2:04:10:72:14:ff:e9:26:bb:bc:cb:23:53:ea:11:77:18:20:50:ddSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 43KB - Virtual size: 43KB

.rdata Size: 36KB - Virtual size: 36KB

.data Size: 3KB - Virtual size: 7KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

3c4966fab36b7ba4b517f21650fc6af8

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6aCertificate

Key Usages

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

5f:da:67:ef:71:64:15:cd:f1:36:98:fbCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

fb:e9:9f:c9:ed:d4:e7:6c:09:35:57:05:49:43:01:32:7b:06:63:4a:fa:0c:17:37:8b:fa:a9:ac:33:d4:c7:62Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

secur32

crypt32

iphlpapi

rasapi32

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

5f:da:67:ef:71:64:15:cd:f1:36:98:fb
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

c9:ac:bd:b2:21:42:06:ee:7b:db:e3:0b:e2:04:10:72:14:ff:e9:26:bb:bc:cb:23:53:ea:11:77:18:20:50:dd
Signer

.text
Size: 43KB - Virtual size: 43KB

.rdata
Size: 36KB - Virtual size: 36KB

.data
Size: 3KB - Virtual size: 7KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

5f:da:67:ef:71:64:15:cd:f1:36:98:fb
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

fb:e9:9f:c9:ed:d4:e7:6c:09:35:57:05:49:43:01:32:7b:06:63:4a:fa:0c:17:37:8b:fa:a9:ac:33:d4:c7:62
Signer

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 590KB - Virtual size: 589KB

.data
Size: 34KB - Virtual size: 91KB

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

.reloc
Size: 206KB - Virtual size: 205KB

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

5f:da:67:ef:71:64:15:cd:f1:36:98:fb
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

16:03:54:fe:12:c7:4b:ed:48:41:b3:b8:c0:72:8d:58:50:79:71:49:6c:7b:8b:b9:17:93:25:52:ad:99:91:a1
Signer

.text
Size: 368KB - Virtual size: 367KB

.rdata
Size: 109KB - Virtual size: 108KB

.data
Size: 10KB - Virtual size: 21KB

.rsrc
Size: 296KB - Virtual size: 296KB

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

5f:da:67:ef:71:64:15:cd:f1:36:98:fb
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate