allergy[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

allergy.zip
Size

46.0MB
MD5

262c99814382779ebcc2e0ccb456a79e
SHA1

76a9023cf25b90e430638acfb82a7de350adb9b0
SHA256

b7dc530ab06bd304bf9895678e1371959375399e8458c8dc62a4964cf77031e9
SHA512

8a893fcf392da76293119d3ed22969ed00e47aa4951e15917ffb342189974eb9898f303441fc010833d8dd79e965835769e1ea9abe065dcc9372546763dd6c3c
SSDEEP

786432:Cs1VRjYjBL0AaYbXsKP835eQxl05OYwu8LSUkxds8ZjnnrltV+pxpg5EH1:tVCV3hb8KE35xn97uuSld3nnrl7+pjg4

Score

3^/10

Malware Config

Signatures

Unsigned PE 56 IoCs

Checks for missing Authenticode signature.

resource
unpack001/allergy list.exe
unpack001/oIlKtW.table
unpack001/other/Browser/nppdf32.RUS
unpack001/other/Locale/en_US/stopwords.ENU
unpack001/other/Locale/ru_RU/Accessibility.RUS
unpack001/other/Locale/ru_RU/AcroScanBroker.RUS
unpack001/other/Locale/ru_RU/Acroform.RUS
unpack001/other/Locale/ru_RU/AdobeCollabSync.RUS
unpack001/other/Locale/ru_RU/Annots.RUS
unpack001/other/Locale/ru_RU/BRdlang32.RUS
unpack001/other/Locale/ru_RU/Checkers.RUS
unpack001/other/Locale/ru_RU/Compare.RUS
unpack001/other/Locale/ru_RU/DVA.RUS
unpack001/other/Locale/ru_RU/DigSig.RUS
unpack001/other/Locale/ru_RU/DropboxStorage.RUS
unpack001/other/Locale/ru_RU/EScript.RUS
unpack001/other/Locale/ru_RU/ExLang32.RUS
unpack001/other/Locale/ru_RU/HTML2PDF.RUS
unpack001/other/Locale/ru_RU/IA32.RUS
unpack001/other/Locale/ru_RU/ImageConversion.RUS
unpack001/other/Locale/ru_RU/MSRMS.RUS
unpack001/other/Locale/ru_RU/MakeAccessible.RUS
unpack001/other/Locale/ru_RU/Multimedia.RUS
unpack001/other/Locale/ru_RU/PDDom.RUS
unpack001/other/Locale/ru_RU/PPKLITE.RUS
unpack001/other/Locale/ru_RU/RdLang32.RUS
unpack001/other/Locale/ru_RU/ReadOutLoud.RUS
unpack001/other/Locale/ru_RU/Reflow.RUS
unpack001/other/Locale/ru_RU/SaveAsRTF.RUS
unpack001/other/Locale/ru_RU/SaveAsXML.RUS
unpack001/other/Locale/ru_RU/Scan.RUS
unpack001/other/Locale/ru_RU/Search.RUS
unpack001/other/Locale/ru_RU/SendMail.RUS
unpack001/other/Locale/ru_RU/Spelling.RUS
unpack001/other/Locale/ru_RU/StorageConnectors.RUS
unpack001/other/Locale/ru_RU/TouchUp.RUS
unpack001/other/Locale/ru_RU/Updater.RUS
unpack001/other/Locale/ru_RU/WCFirefoxExtn.RUS
unpack001/other/Locale/ru_RU/WebPDF.RUS
unpack001/other/Locale/ru_RU/Weblink.RUS
unpack001/other/Locale/ru_RU/eBook.RUS
unpack001/other/Locale/ru_RU/stopwords.RUS
unpack001/other/ccme_asym.dll
unpack001/other/ccme_base.dll
unpack001/other/ccme_base_non_fips.dll
unpack001/other/ccme_ecc.dll
unpack001/other/plug_ins/AcroForm/PMP/AdobePDF417.pmp
unpack001/other/plug_ins/AcroForm/PMP/DataMatrix.pmp
unpack001/other/plug_ins/AcroForm/PMP/QRCode.pmp
unpack001/other/plug_ins/Multimedia/MPP/Flash.RUS
unpack001/other/plug_ins/Multimedia/MPP/Flash.mpp
unpack001/other/plug_ins/Multimedia/MPP/MCIMPP.RUS
unpack001/other/plug_ins/Multimedia/MPP/MCIMPP.mpp
unpack001/other/plug_ins/Multimedia/MPP/WindowsMedia.RUS
unpack001/other/plug_ins/Multimedia/MPP/WindowsMedia.mpp
unpack001/vios.dll

Files

allergy.zip
.zip
IasT.table
allergy list.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
oIlKtW.table
.exe windows:6 windows x86

c5f6dc1f90a38f06246665a0433b1d04

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

vcruntime140

__current_exception
__current_exception_context
memset
_except_handler4_common
__FrameUnwindFilter

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_register_onexit_function
_controlfp_s
terminate
__p___argv
_cexit
_register_thread_local_exe_atexit_callback
_c_exit
abort
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_initialize_onexit_table
_set_app_type
_seh_filter_exe
__p___argc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

kernel32

TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
Sleep

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/AGM.dll
.dll windows:6 windows x64

58a0f80e7c2ef763e4252a187c3c5a11

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

19:26:b5:34:c5:c8:40:fc:58:f0:9b:00:df:94:51:f0:0f:f8:aa:e4:be:08:e8:87:3c:b6:de:7a:5e:a7:5c:ca
Signer

Actual PE Digest

19:26:b5:34:c5:c8:40:fc:58:f0:9b:00:df:94:51:f0:0f:f8:aa:e4:be:08:e8:87:3c:b6:de:7a:5e:a7:5c:ca

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
GetWindowsDirectoryA
RtlCaptureContext
CreateEventW
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
GetModuleHandleW
VirtualQuery
VirtualProtect
RaiseException
InitializeSListHead
GetSystemDirectoryW
GetSystemDirectoryA
GetCurrentDirectoryA
GetFileSize
ReadFile
SetCurrentDirectoryA
GlobalSize
WaitForSingleObject
GetProfileStringW
GetSystemDefaultLCID
GetLocaleInfoA
GetACP
GetFileTime
CreateFileA
LoadLibraryA
FindNextFileA
FindFirstFileA
FindClose
GetUserDefaultLangID
GetThreadLocale
GetTimeFormatW
GetTimeFormatA
GetDateFormatW
GetDateFormatA
GetCurrentProcess
DuplicateHandle
CreateSemaphoreA
GetVersionExA
GetThreadPriority
SetThreadPriority
GetCurrentThread
lstrcmpW
GetEnvironmentVariableW
GlobalHandle
GetTempFileNameW
GetTempPathW
DeleteFileW
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
GlobalFree
GlobalAlloc
LoadLibraryW
FreeLibrary
GetLocalTime
GlobalLock
GlobalUnlock
OutputDebugStringA
GetTempPathA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SystemTimeToFileTime
CreateWaitableTimerA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
SetWaitableTimer
GetLastError
HeapFree
HeapAlloc
GetProcessHeap
ResetEvent
SetEvent
GetCurrentThreadId
GetCurrentProcessId
GetProcAddress
Sleep
ReleaseSemaphore
WaitForMultipleObjectsEx
WaitForSingleObjectEx
CloseHandle
GetTickCount
GetSystemInfo
GetModuleHandleA
OpenEventA
CreateEventA
GetSystemTimeAsFileTime
LocalFree
RtlLookupFunctionEntry
FormatMessageA

user32

CharNextW
SetActiveWindow
GetActiveWindow
LoadIconA
LoadCursorA
GetClientRect
EnumDisplayMonitors
GetMonitorInfoA
SetWindowPos
WindowFromDC
GetDC
ReleaseDC
GetWindowRect
ScrollWindowEx
OffsetRect
MonitorFromPoint
MonitorFromWindow
GetSystemMetrics
GetDesktopWindow
DefWindowProcA
RegisterClassA
UnregisterClassA
CreateWindowExA
DestroyWindow

gdi32

SetMiterLimit
SelectClipPath
PolyDraw
FillPath
EndPath
CloseFigure
BeginPath
AbortDoc
EndPage
StartPage
EndDoc
StartDocW
GetDIBColorTable
CreateDIBSection
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
SetStretchBltMode
SetROP2
StretchDIBits
StretchBlt
SetPolyFillMode
SetGraphicsMode
SetDIBits
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RealizePalette
ResetDCW
RestoreDC
Rectangle
StrokePath
PatBlt
OffsetRgn
LineTo
IntersectClipRect
GetViewportOrgEx
GetStockObject
GetRgnBox
GetRegionData
GetGraphicsMode
GetDeviceCaps
GetCurrentObject
GetClipRgn
GetClipBox
ExtEscape
Escape
EqualRgn
DeleteObject
DeleteDC
CreateRectRgn
CreatePatternBrush
CreatePolyPolygonRgn
CreatePalette
CreateICW
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CombineRgn
BitBlt
ExtCreatePen
GetObjectA
MoveToEx
PolyBezierTo
PolylineTo
SetBrushOrgEx

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegGetValueA
RegSetValueExA

ole32

CreateStreamOnHGlobal

msvcp140

_Xtime_get_ticks
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?is@?$ctype@_W@std@@QEBA_NF_W@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xbad_alloc@std@@YAXXZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?uncaught_exception@std@@YA_NXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
_Query_perf_counter
_Query_perf_frequency
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PEAV32@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?id@?$ctype@D@std@@2V0locale@2@A
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo

shlwapi

PathAppendA
PathRemoveFileSpecA

vcruntime140

wcsstr
strchr
__C_specific_handler
__current_exception
__current_exception_context
__std_type_info_destroy_list
memcpy
_purecall
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__RTDynamicCast
memmove
__std_terminate
memset
memcmp
strstr
__std_type_info_compare
memchr
wcschr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc
calloc

api-ms-win-crt-string-l1-1-0

toupper
_stricmp
strcpy_s
tolower
_wcsnicmp
wcscmp
strcmp
isdigit
strncmp
strcat_s
wcscpy_s
_wcsicmp
wcsncpy
strncpy
strtok_s

api-ms-win-crt-convert-l1-1-0

atoi
strtol
_ltoa_s

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file
remove
rename

api-ms-win-crt-stdio-l1-1-0

fclose
__stdio_common_vsprintf
ungetc
setvbuf
__stdio_common_vsscanf
fgetwc
feof
fputwc
fputs
fwrite
_fseeki64
setbuf
fsetpos
fread
_get_stream_buffer_pointers
freopen
getc
ungetwc
__stdio_common_vfprintf
_wfopen_s
fputc
fopen_s
fflush
fseek
ftell
rewind
fgets
__stdio_common_vsprintf_s
__stdio_common_vswprintf
__acrt_iob_func
ferror
fopen
fgetc
fgetpos
clearerr

api-ms-win-crt-runtime-l1-1-0

terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initterm
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
strerror
_initialize_onexit_table
_initterm_e
_errno
_clearfp
_beginthreadex

api-ms-win-crt-time-l1-1-0

_localtime64
_gmtime64
_time64

api-ms-win-crt-math-l1-1-0

cosf
sinf
atanf
sqrt
pow
modf
log10f
floorf
_hypot
ceil
atan2
fmodf
log10
fmod
_fdclass
_isnan
floor
atan2f
ldexp
log
powf
ceilf
sin
cos
sqrtf

api-ms-win-crt-utility-l1-1-0

qsort

Exports

Exports

AGMGetVersion
AGMInitialize
AGMTerminate

Sections

.text
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 227KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/AGMGPUOptIn.ini
other/ANCUtility.dll
.dll windows:6 windows x64

23feecdb08b8e12dd2ba66164f4e05eb

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/12/2020, 00:00

Not After

21/12/2022, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

11:7b:8f:30:d0:1a:71:09:51:23:53:07:8d:de:b6:01:40:24:96:29:ff:54:1b:b9:a9:d3:5c:1e:6d:4f:2e:36
Signer

Actual PE Digest

11:7b:8f:30:d0:1a:71:09:51:23:53:07:8d:de:b6:01:40:24:96:29:ff:54:1b:b9:a9:d3:5c:1e:6d:4f:2e:36

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msi

ord167
ord125
ord8
ord17
ord74
ord103

kernel32

GetLastError
lstrcatW
CloseHandle
CreateProcessW
lstrcpyW
lstrcmpW
lstrlenW
CreateEventExW
WaitForSingleObject
SetEvent
GetCurrentProcessId
GetCurrentProcess
QueryPerformanceCounter
IsProcessorFeaturePresent
AcquireSRWLockShared
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
DecodePointer
Sleep
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW

ole32

CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CoInitialize
CoUninitialize
CoTaskMemFree

vccorlib140

??0FailureException@Platform@@QE$AAA@XZ
?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z
?Free@Heap@Details@Platform@@SAXPEAX@Z
?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z
?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z
?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z
?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z
?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z
?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z
??0ChangedStateException@Platform@@QE$AAA@XZ
??0Delegate@Platform@@QE$AAA@XZ
?InitializeData@Details@Platform@@YAJH@Z
?__abi_translateCurrentException@@YAJ_N@Z
?__abi_WinRTraiseObjectDisposedException@@YAXXZ
?__abi_WinRTraiseInvalidCastException@@YAXXZ
?__abi_WinRTraiseNotImplementedException@@YAXXZ
?__abi_WinRTraiseDisconnectedException@@YAXXZ
?__abi_WinRTraiseFailureException@@YAXXZ
?__abi_WinRTraiseOperationCanceledException@@YAXXZ
?__abi_WinRTraiseAccessDeniedException@@YAXXZ
?__abi_WinRTraiseInvalidArgumentException@@YAXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ
?__abi_WinRTraiseCOMException@@YAXJ@Z
?__abi_WinRTraiseNullReferenceException@@YAXXZ
?__abi_WinRTraiseChangedStateException@@YAXXZ
?__abi_WinRTraiseOutOfBoundsException@@YAXXZ
?__abi_WinRTraiseWrongThreadException@@YAXXZ
?__abi_WinRTraiseOutOfMemoryException@@YAXXZ
??0Object@Platform@@QE$AAA@XZ
?UninitializeData@Details@Platform@@YAXH@Z
?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z
?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z
??0OutOfMemoryException@Platform@@QE$AAA@XZ
??0OutOfBoundsException@Platform@@QE$AAA@XZ

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_copy
__std_exception_destroy
memcpy
memset
__std_terminate
memmove
_CxxThrowException
__std_type_info_destroy_list
wcschr
__C_specific_handler

api-ms-win-crt-string-l1-1-0

wcscat_s
wcscpy_s
wcstok
wcslen

api-ms-win-crt-convert-l1-1-0

_itow_s

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm_e
_initterm
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_crt_atexit
_cexit
_execute_onexit_table

Exports

Exports

checkSideloadPref
installAppx
removeAppx
removeAppxInUserContext
restoreSideloadPref

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/AXE8SharedExpat.dll
.dll windows:6 windows x64

e5c6328f1f709293e7e608b3ef16e3fc

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:81:0e:01:7f:cc:15:69:8a:42:d8:d4:38:cb:4b:74:6a:67:99:74:a0:de:bc:72:25:0b:fb:b5:f7:42:ea:f5
Signer

Actual PE Digest

62:81:0e:01:7f:cc:15:69:8a:42:d8:d4:38:cb:4b:74:6a:67:99:74:a0:de:bc:72:25:0b:fb:b5:f7:42:ea:f5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead

vcruntime140

__C_specific_handler
memcmp
__std_terminate
memcpy
__std_type_info_destroy_list
_CxxThrowException
memset
memmove

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_crt_atexit
_initialize_narrow_environment
_initterm
_register_onexit_function
_execute_onexit_table
_configure_narrow_argv
_cexit
_initialize_onexit_table
_errno
_seh_filter_dll

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

realloc
malloc
free

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

AXE8_ExpatGetVersion
AXE8_ExpatInit
AXE8_ExpatTerminate

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/AXSLE.dll
.dll windows:6 windows x64

dabac4b136a23495023df07c34817d2b

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:89:60:aa:bc:21:17:ae:86:c0:d6:ee:91:66:5f:a3:a1:d6:00:9a:d9:5c:1f:3d:5f:41:84:3d:d8:2d:a8:81
Signer

Actual PE Digest

dc:89:60:aa:bc:21:17:ae:86:c0:d6:ee:91:66:5f:a3:a1:d6:00:9a:d9:5c:1f:3d:5f:41:84:3d:d8:2d:a8:81

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead

vcruntime140

__current_exception_context
__std_type_info_destroy_list
__RTDynamicCast
strstr
__current_exception
__C_specific_handler
__std_terminate
memcpy
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memmove
memcmp
memset
strchr
_purecall

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strcspn
strpbrk
strlen
strspn
tolower
strncpy
strncmp
strcmp
_strnicmp

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_errno
_initterm_e
terminate
_clearfp
_initterm

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

realloc
free
_callnewh
malloc

api-ms-win-crt-convert-l1-1-0

strtod
strtoul

api-ms-win-crt-math-l1-1-0

_finite
_isnan
fabs
ceil
floor

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

AXE_TransformerGetVersion
AXE_TransformerInit
AXE_TransformerTerminate

Sections

.text
Size: 453KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/Adobe.Acrobat.Dependencies.manifest
.xml
other/AdobeLinguistic.dll
.dll windows:6 windows x64

2f81464c6a0d02ad36b37888907409d1

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/12/2020, 00:00

Not After

21/12/2022, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4d:fe:c3:b1:ce:ec:6c:ae:f7:d6:7d:69:41:aa:f5:ba:6b:dd:89:82:fa:64:b9:f9:84:b2:d0:da:5d:ec:97:24
Signer

Actual PE Digest

4d:fe:c3:b1:ce:ec:6c:ae:f7:d6:7d:69:41:aa:f5:ba:6b:dd:89:82:fa:64:b9:f9:84:b2:d0:da:5d:ec:97:24

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

icuuc69

??1Locale@icu_69@@UEAA@XZ
u_hasBinaryProperty_69
u_ispunct_69
u_isblank_69
??0Locale@icu_69@@QEAA@PEBD000@Z
u_isWhitespace_69
utext_close_69
?createWordInstance@BreakIterator@icu_69@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z
utext_next32From_69
utext_openUChars_69

kernel32

RaiseException
RtlCaptureContext
InitializeCriticalSectionAndSpinCount
GetSystemInfo
VirtualProtect
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventA
OpenEventA
GetCurrentProcessId
GetLastError
MultiByteToWideChar
WideCharToMultiByte
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetTempFileNameW
RemoveDirectoryW
GetTempPathW
GetSystemDirectoryA
GetVersionExW
FreeLibrary
GetProcAddress
LoadLibraryW
K32EnumProcesses
CreateFileW
ReadFile
WriteFile
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseMutex
WaitForSingleObject
CreateMutexW
CreateEventW
CreateThread
CreateMailslotW
SetLastError
CreateActCtxW
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
VirtualQuery
GetModuleHandleW
LoadLibraryExA
QueryPerformanceCounter
HeapAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
GetProcessHeap
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlVirtualUnwind
GetCurrentThreadId
ReleaseSemaphore
RtlLookupFunctionEntry

user32

wsprintfW

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc

ole32

CLSIDFromString
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree

oleaut32

SysFreeString
SysAllocString
SysStringLen

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEAD@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?_Xout_of_range@std@@YAXPEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Xlength_error@std@@YAXPEBD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

vcruntime140

_CxxThrowException
strchr
memcpy
_purecall
__current_exception
memmove
__current_exception_context
__std_terminate
memcmp
__RTDynamicCast
memchr
__std_exception_copy
memset
__C_specific_handler
__std_exception_destroy
__std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

strerror
terminate
exit
_wassert
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_errno
_cexit
_initterm
_initterm_e
_getpid
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_crt_atexit

api-ms-win-crt-stdio-l1-1-0

_read
__stdio_common_vfprintf
_get_stream_buffer_pointers
fclose
fflush
_close
_wsopen_dispatch
fgetc
_wfopen
__acrt_iob_func
__stdio_common_vsprintf
fgetpos
__stdio_common_vswprintf
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc

api-ms-win-crt-filesystem-l1-1-0

_wremove
_wmkdir
_wrmdir
_lock_file
_unlock_file
_wstat64i32

api-ms-win-crt-string-l1-1-0

wcscpy_s
wcsncpy
strncmp
_strnicmp
strncpy
strncat
tolower

api-ms-win-crt-convert-l1-1-0

_wtoi
_itoa
atoi

api-ms-win-crt-heap-l1-1-0

malloc
free
calloc
_callnewh

Exports

Exports

??0?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QEAA@AEBV01@@Z
??0?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QEAA@PEAUStringValue@LM_UniString@1@@Z
??0HyphenedWord@devtech@@QEAA@$$QEAU01@@Z
??0HyphenedWord@devtech@@QEAA@AEBU01@@Z
??0HyphenedWord@devtech@@QEAA@XZ
??0IDictionary@devtech@@QEAA@AEBV01@@Z
??0IDictionary@devtech@@QEAA@XZ
??0IDictionarySet@devtech@@QEAA@AEBV01@@Z
??0IDictionarySet@devtech@@QEAA@XZ
??0IHyphenService@devtech@@IEAA@XZ
??0IHyphenService@devtech@@QEAA@AEBV01@@Z
??0IHyphenWord@devtech@@QEAA@AEBV01@@Z
??0IHyphenWord@devtech@@QEAA@XZ
??0IProvider@devtech@@QEAA@AEBV01@@Z
??0IProvider@devtech@@QEAA@XZ
??0ISpellCheckedWord@devtech@@QEAA@AEBV01@@Z
??0ISpellCheckedWord@devtech@@QEAA@XZ
??0ISpellingService@devtech@@IEAA@XZ
??0ISpellingService@devtech@@QEAA@AEBV01@@Z
??0IThesaurusWord@devtech@@QEAA@AEBV01@@Z
??0IThesaurusWord@devtech@@QEAA@XZ
??0ITokenizer@devtech@@IEAA@XZ
??0ITokenizer@devtech@@QEAA@AEBV01@@Z
??0IWordList@devtech@@QEAA@AEBV01@@Z
??0IWordList@devtech@@QEAA@XZ
??0Iterator@IThesaurusWord@devtech@@IEAA@PEAV12@H@Z
??0Iterator@IThesaurusWord@devtech@@QEAA@AEBV012@@Z
??0LM_FileSpec@devtech@@QEAA@AEBV01@@Z
??0LM_FileSpec@devtech@@QEAA@PEBD@Z
??0LM_FileSpec@devtech@@QEAA@PEBG@Z
??0LM_FileSpec@devtech@@QEAA@PEB_W@Z
??0LM_FileSpec@devtech@@QEAA@XZ
??0LM_HyphenPoint@devtech@@QEAA@GEE@Z
??0LM_HyphenPoint@devtech@@QEAA@GEE_N@Z
??0LM_LinguisticService@devtech@@QEAA@AEBV01@@Z
??0LM_LinguisticService@devtech@@QEAA@XZ
??0LM_ThesaurusAssociatedWordList@devtech@@QEAA@AEBU01@@Z
??0LM_ThesaurusAssociatedWordList@devtech@@QEAA@GV?$vector@VLM_UniString@devtech@@V?$allocator@VLM_UniString@devtech@@@std@@@std@@@Z
??0LM_ThesaurusEntry@devtech@@QEAA@$$QEAU01@@Z
??0LM_ThesaurusEntry@devtech@@QEAA@AEBU01@@Z
??0LM_ThesaurusEntry@devtech@@QEAA@XZ
??0LM_ThesaurusPluginEntry@devtech@@QEAA@AEBU01@@Z
??0LM_ThesaurusPluginEntry@devtech@@QEAA@VLM_UniString@1@00V?$vector@ULM_ThesaurusAssociatedWordList@devtech@@V?$allocator@ULM_ThesaurusAssociatedWordList@devtech@@@std@@@std@@@Z
??0LM_UniString@devtech@@QEAA@AEBV01@@Z
??0LM_UniString@devtech@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0LM_UniString@devtech@@QEAA@PEBD@Z
??0LM_UniString@devtech@@QEAA@PEBG_K@Z
??0LM_UniString@devtech@@QEAA@PEB_W@Z
??0LM_UniString@devtech@@QEAA@XZ
??0LM_exception@devtech@@QEAA@AEBV01@@Z
??0LM_exception@devtech@@QEAA@F@Z
??0LM_exception@devtech@@QEAA@FAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0LM_exception@devtech@@QEAA@FPEBD@Z
??0LinguisticManager@devtech@@QEAA@PEAXAEBVLM_FileSpec@1@1@Z
??0LinguisticManager@devtech@@QEAA@PEAXAEBVLM_FileSpec@1@@Z
??0LinguisticManager@devtech@@QEAA@XZ
??0PtAttributeElement@IHyphenWord@devtech@@QEAA@EHE_N@Z
??0RCObject@devtech@@IEAA@AEBV01@@Z
??0RCObject@devtech@@IEAA@XZ
??1?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QEAA@XZ
??1HyphenedWord@devtech@@QEAA@XZ
??1IDictionary@devtech@@UEAA@XZ
??1IDictionarySet@devtech@@UEAA@XZ
??1IHyphenService@devtech@@MEAA@XZ
??1IHyphenWord@devtech@@UEAA@XZ
??1IProvider@devtech@@UEAA@XZ
??1ISpellCheckedWord@devtech@@UEAA@XZ
??1ISpellingService@devtech@@MEAA@XZ
??1IThesaurusWord@devtech@@UEAA@XZ
??1ITokenizer@devtech@@MEAA@XZ
??1IWordList@devtech@@UEAA@XZ
??1Iterator@IThesaurusWord@devtech@@QEAA@XZ
??1LM_FileSpec@devtech@@UEAA@XZ
??1LM_LinguisticService@devtech@@UEAA@XZ
??1LM_ThesaurusAssociatedWordList@devtech@@QEAA@XZ
??1LM_ThesaurusEntry@devtech@@QEAA@XZ
??1LM_ThesaurusPluginEntry@devtech@@QEAA@XZ
??1LM_UniString@devtech@@QEAA@XZ
??1LM_exception@devtech@@UEAA@XZ
??1LinguisticManager@devtech@@QEAA@XZ
??1RCObject@devtech@@MEAA@XZ
??4?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QEAAAEAV01@AEBV01@@Z
??4HyphenedWord@devtech@@QEAAAEAU01@$$QEAU01@@Z
??4HyphenedWord@devtech@@QEAAAEAU01@AEBU01@@Z
??4IDictionary@devtech@@QEAAAEAV01@AEBV01@@Z
??4IDictionarySet@devtech@@QEAAAEAV01@AEBV01@@Z
??4IHyphenService@devtech@@QEAAAEAV01@AEBV01@@Z
??4IHyphenWord@devtech@@QEAAAEAV01@AEBV01@@Z
??4IProvider@devtech@@QEAAAEAV01@AEBV01@@Z
??4ISpellCheckedWord@devtech@@QEAAAEAV01@AEBV01@@Z
??4ISpellingService@devtech@@QEAAAEAV01@AEBV01@@Z
??4IThesaurusWord@devtech@@QEAAAEAV01@AEBV01@@Z
??4ITokenizer@devtech@@QEAAAEAV01@AEBV01@@Z
??4IWordList@devtech@@QEAAAEAV01@AEBV01@@Z
??4Iterator@IThesaurusWord@devtech@@QEAAAEAV012@AEBV012@@Z
??4LM_FileSpec@devtech@@QEAAAEAV01@AEBV01@@Z
??4LM_HyphenPoint@devtech@@QEAAAEAU01@$$QEAU01@@Z
??4LM_HyphenPoint@devtech@@QEAAAEAU01@AEBU01@@Z
??4LM_LinguisticService@devtech@@QEAAAEAV01@AEBV01@@Z
??4LM_ThesaurusAssociatedWordList@devtech@@QEAAAEAU01@AEBU01@@Z
??4LM_ThesaurusEntry@devtech@@QEAAAEAU01@$$QEAU01@@Z
??4LM_ThesaurusEntry@devtech@@QEAAAEAU01@AEBU01@@Z
??4LM_ThesaurusPluginEntry@devtech@@QEAAAEAU01@AEBU01@@Z
??4LM_UniString@devtech@@QEAAAEAV01@AEBV01@@Z
??4LM_exception@devtech@@QEAAAEAV01@AEBV01@@Z
??4LinguisticManager@devtech@@QEAAAEAV01@AEBV01@@Z
??4PtAttributeElement@IHyphenWord@devtech@@QEAAAEAU012@$$QEAU012@@Z
??4PtAttributeElement@IHyphenWord@devtech@@QEAAAEAU012@AEBU012@@Z
??4RCObject@devtech@@IEAAAEAV01@AEBV01@@Z
??6devtech@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AEAV12@AEBVLM_FileSpec@0@@Z
??6devtech@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AEAV12@AEBVLM_UniString@0@@Z
??6devtech@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AEAV12@PEBVIWordList@0@@Z
??8LM_UniString@devtech@@QEBA_NAEBV01@@Z
??8LM_UniString@devtech@@QEBA_NPEBG@Z
??ALM_UniString@devtech@@QEAAAEAGH@Z
??ALM_UniString@devtech@@QEBAAEBGH@Z
??BLM_FileSpec@devtech@@QEBA?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??BLM_FileSpec@devtech@@QEBAPEBDXZ
??C?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QEBAPEAUStringValue@LM_UniString@1@XZ
??CIterator@IThesaurusWord@devtech@@QEAAPEAULM_ThesaurusEntry@2@XZ
??D?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QEBAAEAUStringValue@LM_UniString@1@XZ
??DIterator@IThesaurusWord@devtech@@QEAAAEAULM_ThesaurusEntry@2@XZ
??EIterator@IThesaurusWord@devtech@@QEAAAEAV012@H@Z
??HLM_UniString@devtech@@QEBA?BV01@AEBV01@@Z
??MLM_UniString@devtech@@QEBA_NAEBV01@@Z
??YIterator@IThesaurusWord@devtech@@QEAAAEAV012@H@Z
??YLM_FileSpec@devtech@@QEAAAEAV01@AEBV01@@Z
??_7IDictionary@devtech@@6B@
??_7IDictionarySet@devtech@@6B@
??_7IHyphenService@devtech@@6B@
??_7IHyphenWord@devtech@@6B@
??_7IProvider@devtech@@6B@
??_7ISpellCheckedWord@devtech@@6B@
??_7ISpellingService@devtech@@6B@
??_7IThesaurusWord@devtech@@6B@
??_7ITokenizer@devtech@@6B@
??_7IWordList@devtech@@6B@
??_7LM_FileSpec@devtech@@6B@
??_7LM_LinguisticService@devtech@@6B@
??_7LM_exception@devtech@@6B@
??_7RCObject@devtech@@6B@
??_F?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QEAAXXZ
?AddWordPair@LinguisticManager@devtech@@QEAAXPEAVIDictionary@2@AEBVLM_UniString@2@1@Z
?CloseCustomDictionary@LinguisticManager@devtech@@QEAAXPEAVIDictionary@2@@Z
?CloseUserDictionary@LinguisticManager@devtech@@QEAAXPEAVIDictionary@2@@Z
?ConvertBSTR@LM_UniString@devtech@@QEAAXQEA_W@Z
?CopyUniChar@LM_UniString@devtech@@QEBAKPEAGK@Z
?CreateCustomDictionary@LinguisticManager@devtech@@QEAAPEAVIDictionary@2@AEBVLM_UniString@2@G@Z
?CreateLinguisticService@LinguisticManager@devtech@@QEAAPEAVLM_LinguisticService@2@PEAVIProvider@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CreateLinguisticService@LinguisticManager@devtech@@QEAAPEAVLM_LinguisticService@2@PEAVIProvider@2@G@Z
?CreateUnicode@LinguisticManager@devtech@@QEAAPEAVLM_LinguisticService@2@PEAVIDictionarySet@2@PEAVIProvider@2@@Z
?CreateUserDictionary@LinguisticManager@devtech@@QEAAPEAVIDictionary@2@AEBVLM_FileSpec@2@AEBVLM_UniString@2@G@Z
?CreateUserDictionary@LinguisticManager@devtech@@QEAAPEAVIDictionary@2@AEBVLM_UniString@2@G_N@Z
?DeleteCustomDictionary@LinguisticManager@devtech@@QEAAXPEAVIDictionary@2@@Z
?DeleteTempFiles@LinguisticManager@devtech@@QEAAXXZ
?DeleteUserDictionary@LinguisticManager@devtech@@QEAAXPEAVIDictionary@2@@Z
?DisplayLocalizedName@IProvider@devtech@@QEAA?BVLM_UniString@2@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?EnableAllLanguageUserDictionary@LinguisticManager@devtech@@QEAAX_N@Z
?ErrorCode@LM_exception@devtech@@QEAAFXZ
?ExportCustomDictionary@LinguisticManager@devtech@@QEAAXPEAVIDictionary@2@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAVIProvider@2@@Z
?ExportUserDictionary@LinguisticManager@devtech@@QEAAXPEAVIDictionary@2@AEAVLM_FileSpec@2@PEAVIProvider@2@@Z
?FindDictionarySetForLanguage@LinguisticManager@devtech@@QEAAPEAVIDictionarySet@2@G@Z
?FindUserDictionarySetForLanguage@LinguisticManager@devtech@@QEAAPEAVIDictionarySet@2@G@Z
?GetDefaultProvider@LinguisticManager@devtech@@QEAAPEAVIProvider@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@G@Z
?GetIterIndex@IThesaurusWord@devtech@@IEAAHVIterator@12@@Z
?GetLanguageIndexList@LinguisticManager@devtech@@QEAAAEBV?$map@GV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@G@2@V?$allocator@U?$pair@$$CBGV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@@2@@std@@G@Z
?GetLanguageIndexList@LinguisticManager@devtech@@QEAAXAEAV?$map@GV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@G@2@V?$allocator@U?$pair@$$CBGV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@@2@@std@@G@Z
?GetLanguageName@LinguisticManager@devtech@@QEAA?BVLM_UniString@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetPreferredHyphenString@LinguisticManager@devtech@@QEAA?AVLM_UniString@2@G@Z
?GetProviderList@LinguisticManager@devtech@@QEAAAEBV?$list@PEAVIProvider@devtech@@V?$allocator@PEAVIProvider@devtech@@@std@@@std@@XZ
?GetProviderList@LinguisticManager@devtech@@QEAAXAEAV?$list@PEAVIProvider@devtech@@V?$allocator@PEAVIProvider@devtech@@@std@@@std@@@Z
?GetUniCharPtr@LM_UniString@devtech@@QEBAPEBGXZ
?GetUniCharPtrWritable@LM_UniString@devtech@@QEBAPEAGXZ
?GetVersionInfo@LinguisticManager@devtech@@QEBAGXZ
?GetVersionInfoFull@LinguisticManager@devtech@@QEBA?BVLM_UniString@2@XZ
?ImportCustomDictionary@LinguisticManager@devtech@@QEAAPEAVIDictionary@2@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBVLM_UniString@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
?ImportUserDictionary@LinguisticManager@devtech@@QEAAPEAVIDictionary@2@AEBVLM_FileSpec@2@AEBVLM_UniString@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?IsInsideAppSandBox@LinguisticManager@devtech@@SA_NXZ
?LoadExtendedPlugins@LinguisticManager@devtech@@QEAAXXZ
?MigrateCustomUD@LinguisticManager@devtech@@QEAA_NAEBVLM_FileSpec@2@0AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAF@Z
?MigrateUD@LinguisticManager@devtech@@QEAA_N_NAEAF@Z
?OpenCustomDictionary@LinguisticManager@devtech@@QEAAPEAVIDictionary@2@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBVLM_UniString@2@PEAVIProvider@2@@Z
?OpenUserDictionary@LinguisticManager@devtech@@QEAAPEAVIDictionary@2@AEBVLM_FileSpec@2@AEBVLM_UniString@2@PEAVIProvider@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?Release@LinguisticManager@devtech@@QEAAXPEAVLM_LinguisticService@2@@Z
?ReleaseLinguisticService@LinguisticManager@devtech@@QEAAXPEAVLM_LinguisticService@2@@Z
?Result@LM_exception@devtech@@QEAAFXZ
?RunInsideAppSandBox@LinguisticManager@devtech@@SAXXZ
?SetBibProc@LinguisticManager@devtech@@QEAAXPEAX@Z
?SetFlagAXE8_ExpatInited@LinguisticManager@devtech@@QEAAX_N@Z
?SetHeadlightsInfo@LinguisticManager@devtech@@QEAAXPEBDAEBVLM_FileSpec@2@VLM_UniString@2@2200W4LM_SerializationState@@W4LM_UserType@@0@Z
?SetHeadlightsInfo@LinguisticManager@devtech@@QEAAXPEBDAEBVLM_FileSpec@2@W4LM_NoticeShownState@@VLM_UniString@2@3300W4LM_SerializationState@@W4LM_UserType@@0@Z
?SetToEmptyString@LM_UniString@devtech@@AEAAXXZ
?UserDictionaryExtension@LinguisticManager@devtech@@QEAA?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?addReference@RCObject@devtech@@QEAAXXZ
?begin@IThesaurusWord@devtech@@UEAA?AVIterator@12@XZ
?c_str@LM_UniString@devtech@@QEBAPEBGXZ
?clear@LM_UniString@devtech@@QEAAXXZ
?compare@LM_UniString@devtech@@QEBAHAEBV12@@Z
?compare@LM_UniString@devtech@@QEBAHPEBG@Z
?createInstance@IHyphenService@devtech@@SAPEAV12@PEAVIProvider@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?createInstance@ISpellingService@devtech@@SAPEAV12@PEAVIProvider@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?createInstance@ITokenizer@devtech@@SAPEAV12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?empty@LM_UniString@devtech@@QEBA_NXZ
?end@IThesaurusWord@devtech@@UEAA?AVIterator@12@XZ
?getString@LM_FileSpec@devtech@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?init@?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@AEAAXXZ
?isShareable@RCObject@devtech@@QEBA_NXZ
?isShared@RCObject@devtech@@QEBA_NXZ
?language@LM_LinguisticService@devtech@@QEAAGXZ
?length@LM_UniString@devtech@@QEBAKXZ
?m_InsideAppSandBox@LinguisticManager@devtech@@1_NA
?markUnshareable@RCObject@devtech@@QEAAXXZ
?removeReference@RCObject@devtech@@QEAAXXZ
?reserve@LM_UniString@devtech@@QEAAX_K@Z
?setValue@LM_UniString@devtech@@QEAAXPEBG_K@Z
?size@LM_UniString@devtech@@QEBAKXZ
?what@LM_exception@devtech@@UEBAPEBDXZ

Sections

.text
Size: 305KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/AdobeXMP.dll
.dll windows:6 windows x64

aad2a34f287057bdb5dd9086cc7c81cd

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:d9:37:70:e2:99:a7:45:cb:63:c1:b6:7b:23:87:f8:d5:54:87:c1:bc:2f:59:5c:2f:e3:c5:24:d6:93:63:49
Signer

Actual PE Digest

70:d9:37:70:e2:99:a7:45:cb:63:c1:b6:7b:23:87:f8:d5:54:87:c1:bc:2f:59:5c:2f:e3:c5:24:d6:93:63:49

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
DeleteCriticalSection
ResetEvent
WaitForSingleObjectEx
InitializeSListHead
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentThreadId
DisableThreadLibraryCalls
InitializeCriticalSectionAndSpinCount

ole32

CoCreateGuid

msvcp140

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?uncaught_exception@std@@YA_NXZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException
__C_specific_handler
__std_type_info_compare
memcmp
_purecall
__std_exception_copy
memcpy
memmove
__std_exception_destroy
__std_terminate
__RTDynamicCast
memset
__std_type_info_destroy_list
memchr

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_initialize_onexit_table
_execute_onexit_table
_initterm
_initterm_e
_errno
_initialize_narrow_environment
_cexit
_configure_narrow_argv
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_seh_filter_dll

api-ms-win-crt-string-l1-1-0

strncmp
strlen
strcmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

realloc
free
malloc
_callnewh

api-ms-win-crt-locale-l1-1-0

setlocale
__initialize_lconv_for_unsigned_char

api-ms-win-crt-time-l1-1-0

_difftime64
_gmtime64_s
_localtime64_s
_mktime64
_time64

api-ms-win-crt-convert-l1-1-0

strtod
strtoul

api-ms-win-crt-utility-l1-1-0

rand_s

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

WXMPDocOps_BranchXMP_1
WXMPDocOps_CTor_1
WXMPDocOps_Clone_1
WXMPDocOps_CreateID_1
WXMPDocOps_DecrementRefCount_1
WXMPDocOps_EnsureIDsExist_1
WXMPDocOps_GetMetaRef_1
WXMPDocOps_GetPartChangeID_1
WXMPDocOps_HasPartChanged_1
WXMPDocOps_IncrementRefCount_1
WXMPDocOps_IsDirty_1
WXMPDocOps_NewXMP_1
WXMPDocOps_NoteChange_1
WXMPDocOps_OpenXMP_1
WXMPDocOps_PrepareForSave_1
WXMPDocOps_SetAppName_1
WXMPIterator_DecrementRefCount_1
WXMPIterator_IncrementRefCount_1
WXMPIterator_Next_1
WXMPIterator_PropCTor_1
WXMPIterator_Skip_1
WXMPIterator_TableCTor_1
WXMPMeta_AppendArrayItem_1
WXMPMeta_CTor_1
WXMPMeta_Clone_1
WXMPMeta_CountArrayItems_1
WXMPMeta_DecrementRefCount_1
WXMPMeta_DeleteArrayItem_1
WXMPMeta_DeleteLocalizedText_1
WXMPMeta_DeleteNamespace_1
WXMPMeta_DeleteProperty_1
WXMPMeta_DeleteQualifier_1
WXMPMeta_DeleteStructField_1
WXMPMeta_DoesArrayItemExist_1
WXMPMeta_DoesPropertyExist_1
WXMPMeta_DoesQualifierExist_1
WXMPMeta_DoesStructFieldExist_1
WXMPMeta_DumpNamespaces_1
WXMPMeta_DumpObject_1
WXMPMeta_DumpPropertyTraits_1
WXMPMeta_Erase_1
WXMPMeta_GetArrayItem_1
WXMPMeta_GetGlobalOptions_1
WXMPMeta_GetIXMPMetadata_1
WXMPMeta_GetLocalizedText_1
WXMPMeta_GetMemProcs_1
WXMPMeta_GetNamespacePrefix_1
WXMPMeta_GetNamespaceURI_1
WXMPMeta_GetObjectName_1
WXMPMeta_GetObjectOptions_1
WXMPMeta_GetProperty_1
WXMPMeta_GetProperty_Bool_1
WXMPMeta_GetProperty_Date_1
WXMPMeta_GetProperty_Float_1
WXMPMeta_GetProperty_Int64_1
WXMPMeta_GetProperty_Int_1
WXMPMeta_GetQualifier_1
WXMPMeta_GetStructField_1
WXMPMeta_GetVersionInfo_1
WXMPMeta_GetXMPDOMFactoryInstance_1
WXMPMeta_IncrementRefCount_1
WXMPMeta_Initialize_1
WXMPMeta_MarkStaleProperties_1
WXMPMeta_ParseFromBuffer_1
WXMPMeta_RegisterAssertNotify_1
WXMPMeta_RegisterNamespace_1
WXMPMeta_RegisterPropertyTraits_1
WXMPMeta_ResetErrorCallbackLimit_1
WXMPMeta_SerializeToBuffer_1
WXMPMeta_SetArrayItem_1
WXMPMeta_SetDefaultErrorCallback_1
WXMPMeta_SetErrorCallback_1
WXMPMeta_SetGlobalOptions_1
WXMPMeta_SetLocalizedText_1
WXMPMeta_SetObjectName_1
WXMPMeta_SetObjectOptions_1
WXMPMeta_SetProperty_1
WXMPMeta_SetProperty_Bool_1
WXMPMeta_SetProperty_Date_1
WXMPMeta_SetProperty_Float_1
WXMPMeta_SetProperty_Int64_1
WXMPMeta_SetProperty_Int_1
WXMPMeta_SetQualifier_1
WXMPMeta_SetStructField_1
WXMPMeta_Sort_1
WXMPMeta_Terminate_1
WXMPMeta_UnregisterAssertNotify_1
WXMPMeta_Use_CPP_DOM_APIs_1
WXMPUtils_AppendProperties_1
WXMPUtils_ApplyTemplate_1
WXMPUtils_CatenateArrayItems_1
WXMPUtils_CollectMultiFileXMP_1
WXMPUtils_CompareDateTime_1
WXMPUtils_ComposeArrayItemPath_1
WXMPUtils_ComposeFieldSelector_1
WXMPUtils_ComposeLangSelector_1
WXMPUtils_ComposeQualifierPath_1
WXMPUtils_ComposeStructFieldPath_1
WXMPUtils_ConvertFromBool_1
WXMPUtils_ConvertFromDate_1
WXMPUtils_ConvertFromFloat_1
WXMPUtils_ConvertFromInt64_1
WXMPUtils_ConvertFromInt_1
WXMPUtils_ConvertToBool_1
WXMPUtils_ConvertToDate_1
WXMPUtils_ConvertToFloat_1
WXMPUtils_ConvertToInt64_1
WXMPUtils_ConvertToInt_1
WXMPUtils_ConvertToLocalTime_1
WXMPUtils_ConvertToUTCTime_1
WXMPUtils_CurrentDateTime_1
WXMPUtils_DecodeFromBase64_1
WXMPUtils_DistributeMultiFileXMP_1
WXMPUtils_DuplicateSubtree_1
WXMPUtils_EncodeToBase64_1
WXMPUtils_GetBulkMarkers_1
WXMPUtils_GetDateRange_1
WXMPUtils_GetMergedListPath_1
WXMPUtils_IsPropertyMultiValued_1
WXMPUtils_MergeFromJPEG_1
WXMPUtils_PackageForJPEG_1
WXMPUtils_RemoveMultiValueInfo_1
WXMPUtils_RemoveProperties_1
WXMPUtils_SeparateArrayItems_1
WXMPUtils_SetBulkMarkers_1
WXMPUtils_SetTimeZone_1
XMP_GetAssertNotify
XMP_NewExpatAdapter

Sections

.text
Size: 939KB - Virtual size: 938KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/BIB.dll
.dll windows:6 windows x64

dc572eaa5bffef3479a18f1ee663475d

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

17:02:2f:f1:d3:a8:5e:4b:4f:a9:b7:7c:89:c6:b0:48:cc:c9:cd:53:8a:db:ec:2a:5e:39:ea:3b:cd:05:a2:78
Signer

Actual PE Digest

17:02:2f:f1:d3:a8:5e:4b:4f:a9:b7:7c:89:c6:b0:48:cc:c9:cd:53:8a:db:ec:2a:5e:39:ea:3b:cd:05:a2:78

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
CloseHandle
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
CreateThread
GetSystemTimeAsFileTime
GetModuleHandleA
GetProcAddress
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetACP
Sleep
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memmove
_purecall
__std_type_info_destroy_list
__RTDynamicCast
__current_exception_context
__std_exception_destroy
__std_terminate
memset
memcpy
_CxxThrowException
__std_exception_copy
__current_exception
__C_specific_handler

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strlen
strcmp

api-ms-win-crt-stdio-l1-1-0

fseek
fread
fopen
fflush
ftell
fwrite
ferror
fclose
_wfopen
feof

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo
_initterm_e
_initterm
_errno
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
terminate
_seh_filter_dll

api-ms-win-crt-math-l1-1-0

log

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

Exports

Exports

BIBGetGetProcAddress
BIBGetVersion
BIBInitialize
BIBInitialize2
BIBInitialize3
BIBInitialize4
BIBLockSmithAssertNoLocksImpl
BIBLockSmithDeleteImpl
BIBLockSmithLockImpl
BIBLockSmithUnlockImpl
BIBTerminate

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/BIBUtils.dll
.dll windows:6 windows x64

502808dd55c98c39eb970da7b6d6de3a

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ba:2d:39:c1:7d:66:cb:f6:97:98:f8:67:2f:91:78:6d:3d:9e:a7:1e:21:b7:88:56:ce:c2:fb:29:cf:e9:ce:d0
Signer

Actual PE Digest

ba:2d:39:c1:7d:66:cb:f6:97:98:f8:67:2f:91:78:6d:3d:9e:a7:1e:21:b7:88:56:ce:c2:fb:29:cf:e9:ce:d0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetCurrentDirectoryA
GetTempPathA
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
__std_terminate
__std_exception_copy
strstr
_purecall
memset
memcpy
__RTDynamicCast
_CxxThrowException
__std_exception_destroy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_initialize_narrow_environment
_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm
_initterm_e
_invalid_parameter_noinfo
_errno
_crt_atexit

api-ms-win-crt-string-l1-1-0

isdigit
strspn
strcspn
isprint
isalpha

api-ms-win-crt-convert-l1-1-0

atoi
atof

api-ms-win-crt-filesystem-l1-1-0

remove
rename
_stat64i32

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
_sopen_dispatch
_close
__stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

Exports

Exports

BIBUtilsGetVersion
BIBUtilsInitialize
BIBUtilsTerminate

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/Browser/WCChromeExtn/WCChromeNativeMessagingHost.exe
.exe windows:6 windows x64

dbac2b0debc9f195267ed6b972f130c1

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

73:51:a1:f5:e6:6b:43:0a:e4:fc:9a:bc:cf:c1:a1:dd:dc:eb:28:2e:22:df:6e:7f:37:7a:46:23:b7:cd:00:f0
Signer

Actual PE Digest

73:51:a1:f5:e6:6b:43:0a:e4:fc:9a:bc:cf:c1:a1:dd:dc:eb:28:2e:22:df:6e:7f:37:7a:46:23:b7:cd:00:f0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WriteFile
CloseHandle
GetLastError
SetNamedPipeHandleState
OpenMutexW
Sleep
GetTickCount
lstrlenW
OutputDebugStringA
RaiseException
SetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
FindResourceExW
GetModuleFileNameW
GetModuleHandleExW
LoadResource
LockResource
SizeofResource
FindResourceW
LoadLibraryW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
MultiByteToWideChar
GetCurrentProcessId
FreeLibrary
ReadFile
GetProcAddress
FileTimeToSystemTime
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
DeleteFileW
FindClose
FindFirstFileW
GetTempFileNameW
GetTempPathW
CreateProcessW
MoveFileW
VerSetConditionMask
HeapSetInformation
GetCurrentProcess
ExitProcess
CreateThread
TerminateThread
SetDllDirectoryW
VerifyVersionInfoW
GetVolumeInformationW
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CreateFileW
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetModuleHandleW
OutputDebugStringW

user32

DdeDisconnect
DdeFreeStringHandle
DdeGetLastError
DdeUninitialize
DdeClientTransaction
DdeCreateStringHandleW
KillTimer
SetTimer
DispatchMessageW
TranslateMessage
DdeConnect
GetMessageW
MessageBoxW
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
PostMessageW
RegisterWindowMessageW
DdeInitializeW

advapi32

RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryInfoKeyW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteExW
ShellExecuteW

ole32

CoInitializeEx
CoUninitialize

msvcp140

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBGHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

shlwapi

PathFileExistsW

vcruntime140

memcpy
__std_terminate
__std_exception_copy
__C_specific_handler
__current_exception_context
__current_exception
memcmp
memmove
memchr
_CxxThrowException
__std_exception_destroy
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

exit
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo
__p___wargv
_exit
__p___argc
_errno
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
terminate
_seh_filter_exe
_set_app_type
_c_exit
_configure_wide_argv
_initialize_wide_environment
_get_initial_wide_environment
_initterm
_initterm_e

api-ms-win-crt-string-l1-1-0

isspace
isxdigit
isdigit
strlen
wcscpy_s
wcscat_s
_wcslwr
_wcsicmp
wcsncpy
wcsnlen
wcsncpy_s
wcsncat_s
wmemcpy_s

api-ms-win-crt-heap-l1-1-0

_callnewh
_set_new_mode
_get_heap_handle
malloc
free

api-ms-win-crt-stdio-l1-1-0

_set_fmode
_fileno
__acrt_iob_func
ungetc
setvbuf
fwrite
_fseeki64
__p__commode
fsetpos
_setmode
fread
fgetpos
fgetc
fflush
_get_stream_buffer_pointers
getchar
fclose
_wfopen_s
fputc

api-ms-win-crt-filesystem-l1-1-0

_waccess_s
_wsplitpath_s
_waccess
_unlock_file
_lock_file

api-ms-win-crt-convert-l1-1-0

_itow_s
_itoa_s

api-ms-win-crt-math-l1-1-0

__setusermatherr
pow

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/Browser/WCChromeExtn/manifest.json
other/Browser/nppdf32.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Browser/nppdf32.dll
.dll windows:6 windows x64

5bcbb161c4b0f1ecc1dc932b7bba8030

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

14:38:fe:a7:b9:56:bc:86:52:50:ab:4c:80:66:10:74:bc:2a:2c:38:ee:a0:3b:b7:ec:28:71:0b:59:8d:2b:5e
Signer

Actual PE Digest

14:38:fe:a7:b9:56:bc:86:52:50:ab:4c:80:66:10:74:bc:2a:2c:38:ee:a0:3b:b7:ec:28:71:0b:59:8d:2b:5e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

uxtheme

SetWindowTheme

kernel32

ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
DeleteFileA
GetTempPathA
GetTempFileNameA
GetModuleFileNameA
LoadLibraryA
OpenFile
CopyFileA
GetVolumeInformationW
WriteFile
SetNamedPipeHandleState
OpenMutexW
GetTickCount
lstrlenW
FreeLibrary
LoadLibraryExA
GetFileAttributesW
GetLongPathNameW
RaiseException
InitializeCriticalSectionEx
GetVersionExW
GetTempPathW
ExpandEnvironmentStringsW
CreateActCtxW
VirtualQuery
GetModuleHandleW
CreateDirectoryA
CreateFileA
SetFilePointer
QueryPerformanceCounter
GetLocalTime
EnterCriticalSection
CallNamedPipeW
GetModuleHandleA
LoadLibraryW
FormatMessageA
GetSystemDirectoryA
FindClose
FindFirstFileW
CreateEventW
GetExitCodeProcess
GetCurrentThreadId
SetThreadPriority
CreateProcessW
GetThreadId
OpenProcess
lstrcpyW
CreateSemaphoreA
SetDllDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GetFileType
TransactNamedPipe
WaitNamedPipeW
ResetEvent
CreateMutexW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
InitializeCriticalSection
SetLastError
WideCharToMultiByte
MultiByteToWideChar
OpenFileMappingA
CreateFileMappingA
UnmapViewOfFile
GetProcAddress
GetModuleHandleExW
GetModuleFileNameW
ResumeThread
TerminateThread
ExitThread
CreateThread
Sleep
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
TryEnterCriticalSection
LocalFree
LeaveCriticalSection
FlushViewOfFile
MapViewOfFile
GetCurrentProcessId
GetLastError
OutputDebugStringA
ReadFile
GetFileSize
CreateFileW
GetCurrentProcess
CloseHandle
VirtualProtect
GetSystemInfo

user32

GetWindow
GetWindowThreadProcessId
EnumWindows
GetParent
GetDesktopWindow
IsWindowUnicode
PostQuitMessage
DispatchMessageW
GetMessageW
GetMessageA
FindWindowW
MsgWaitForMultipleObjects
GetActiveWindow
WaitForInputIdle
wsprintfW
GetAncestor
CreateWindowExW
FindWindowA
SendMessageA
RegisterWindowMessageA
SetWindowLongPtrA
GetWindowLongPtrA
SetWindowLongA
GetWindowLongA
ClientToScreen
SetCursor
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetForegroundWindow
GetSubMenu
LoadMenuA
GetFocus
IsChild
CallWindowProcA
LoadStringW
LoadStringA
DestroyCursor
LoadCursorA
MessageBoxA
KillTimer
SetTimer
SetFocus
SystemParametersInfoA
GetClassNameA
GetWindowRect
GetClientRect
RemovePropW
GetPropW
SetPropW
InvalidateRect
GetWindowRgn
SetWindowRgn
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
GetDlgItem
EndDialog
CreateDialogParamA
IsWindowVisible
SetWindowPos
ShowWindow
DestroyWindow
IsWindow
DefWindowProcA
PostMessageW
PostMessageA
PeekMessageA
DispatchMessageA
TranslateMessage

gdi32

PlayEnhMetaFile
GetEnhMetaFileA
DeleteEnhMetaFile
GetDeviceCaps
Escape
SetTextColor
SetBkColor
GetStockObject
FillRgn
DeleteObject
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
LPtoDP

advapi32

RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
RegEnumValueW
RegQueryInfoKeyW
GetTokenInformation
RegEnumKeyExW

ole32

CoCreateInstance
CoTaskMemFree

msvcp140

?id@?$ctype@G@std@@2V0locale@2@A
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_Xout_of_range@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?widen@?$ctype@G@std@@QEBAGD@Z
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ

vcruntime140

memcpy
memmove
__std_type_info_destroy_list
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__current_exception_context
memset
memcmp
_purecall
__C_specific_handler
strchr
__current_exception
wcsstr
strrchr
strstr
memchr
wcsrchr
__std_terminate

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_errno
_invalid_parameter_noinfo
_initialize_onexit_table
_cexit
_set_invalid_parameter_handler
_initterm_e
_register_onexit_function
_seh_filter_dll
_configure_narrow_argv
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
terminate
_initterm
_crt_atexit

api-ms-win-crt-string-l1-1-0

strcat_s
strcat
strncmp
wcsncpy_s
strcmp
strlen
strcpy
wcslen
_stricmp
_strnicmp
strncpy
strcpy_s
wcscat
_wcsicmp
wcsncmp
_wcsnicmp
wcstok_s
wcsncat_s
wcscpy_s
wcscat_s
_wcsdup
_wcslwr_s
iswdigit
towlower
tolower

api-ms-win-crt-stdio-l1-1-0

fwrite
fseek
fread
fopen
fclose
__stdio_common_vsscanf
__stdio_common_vsprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsnprintf_s
_wfopen_s
__stdio_common_vfwscanf
__stdio_common_vsprintf
__stdio_common_vswprintf_s
tmpfile
__stdio_common_vswprintf

api-ms-win-crt-locale-l1-1-0

localeconv
setlocale

api-ms-win-crt-heap-l1-1-0

free
calloc
malloc
_callnewh

api-ms-win-crt-convert-l1-1-0

wcstol
_itow_s
_wtof
_itoa
_wtol

api-ms-win-crt-filesystem-l1-1-0

_waccess_s
_wsplitpath_s
_unlink

api-ms-win-crt-multibyte-l1-1-0

_mbscmp

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-environment-l1-1-0

_wputenv_s
_wgetenv

api-ms-win-crt-math-l1-1-0

ceilf

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

shell32

SHGetFolderPathA

Exports

Exports

NP_AcrobatProtectedInitialize
NP_ApolloEntry
NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/DocSettings/Redaction/CAN/SearchRedactPatterns.xml
.xml .vbs
other/DocSettings/Redaction/DEU/SearchRedactPatterns.xml
.xml .vbs
other/DocSettings/Redaction/ENU/SearchRedactPatterns.xml
.xml .vbs
other/DocSettings/Redaction/ENU/U.S. FOIA.xml
other/DocSettings/Redaction/ENU/U.S. Privacy Act.xml
other/DocSettings/Redaction/FRA/SearchRedactPatterns.xml
.xml .vbs
other/DocSettings/Redaction/JPN/SearchRedactPatterns.xml
.xml .vbs
other/DocSettings/Redaction/LocaleDisplayNameMap.xml
other/DocSettings/Redaction/UK/SearchRedactPatterns.xml
.xml .vbs
other/DocTemplates/ENU/template1.pdf
.pdf
other/DocTemplates/ENU/template2.pdf
.pdf
other/DocTemplates/ENU/template3.pdf
.pdf
other/DocTemplates/RUS/Template1.pdf
.pdf
other/DocTemplates/RUS/Template2.pdf
.pdf
other/DocTemplates/RUS/Template3.pdf
.pdf
other/FileInfo/FileInfo_ru_RU.dat
other/HostedServicesTemplates/ENU/template1.pdf
.pdf
other/IDTemplates/ENU/AdobeID.pdf
.pdf
other/IDTemplates/ENU/DefaultID.pdf
.pdf
other/IDTemplates/RUS/AdobeID.pdf
.pdf
other/IDTemplates/RUS/DefaultID.pdf
.pdf
other/Javascripts/JSByteCodeWin.bin
other/Legal/ENU/eula.ini
other/Legal/ENU/license.html
.html
other/Legal/RUS/eula.ini
other/Legal/RUS/license.html
other/Legal/ar_AE/license.html
other/Legal/cs_CZ/license.html
other/Legal/da_DK/license.html
other/Legal/de_DE/license.html
other/Legal/el_GR/license.html
other/Legal/en_AE/license.html
other/Legal/en_GB/license.html
other/Legal/en_IL/license.html
other/Legal/en_US/license.html
other/Legal/es_ES/license.html
other/Legal/fi_FI/license.html
other/Legal/fr_FR/license.html
other/Legal/fr_MA/license.html
other/Legal/he_IL/license.html
other/Legal/hu_HU/license.html
other/Legal/it_IT/license.html
other/Legal/ja_JP/license.html
other/Legal/ko_KR/license.html
other/Legal/nb_NO/license.html
other/Legal/nl_NL/license.html
other/Legal/pl_PL/license.html
other/Legal/pt_BR/license.html
other/Legal/ru_RU/license.html
other/Legal/sk_SK/license.html
other/Legal/sl_SI/license.html
other/Legal/sv_SE/license.html
other/Legal/tr_TR/license.html
other/Legal/uk_UA/license.html
other/Legal/zh_CN/license.html
other/Legal/zh_TW/license.html
other/Locale/en_US/stopwords.ENU
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/Accessibility.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/AcroForm/FormsDataCollection.nav
.zip
other/Locale/ru_RU/AcroScanBroker.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/Acroform.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 540KB - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/AdobeCollabSync.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/Annots.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 564KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/BRdlang32.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/Checkers.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/Compare.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/DVA.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/DigSig.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/DropboxStorage.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/EScript.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/ExLang32.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/HTML2PDF.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/IA32.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/ImageConversion.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/MSRMS.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/MakeAccessible.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/Multimedia.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/PDDom.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/PPKLITE.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 711KB - Virtual size: 711KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/RdLang32.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/ReadOutLoud.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/Reflow.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/SaveAsRTF.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/SaveAsXML.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/Scan.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/Search.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/SendMail.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/Spelling.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/StorageConnectors.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/TouchUp.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/Updater.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/WCFirefoxExtn.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/WebPDF.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/Weblink.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/eBook.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/Locale/ru_RU/stopwords.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/NGL/cefWorkflow/adobe_licensing_wf_acro.exe
.exe windows:6 windows x64

a2af9278c05162daf037db0eb91d9984

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

46:bb:a9:8f:b6:8a:6d:14:5a:d6:e6:98:40:25:b5:20:55:c1:06:c8:4d:d2:0a:84:c9:67:21:21:35:fa:e0:d5
Signer

Actual PE Digest

46:bb:a9:8f:b6:8a:6d:14:5a:d6:e6:98:40:25:b5:20:55:c1:06:c8:4d:d2:0a:84:c9:67:21:21:35:fa:e0:d5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shlwapi

UrlEscapeW
PathIsURLW
UrlCanonicalizeW
PathRenameExtensionW
PathIsDirectoryW
PathAppendW
PathIsFileSpecW
PathAddExtensionW
PathFileExistsW
PathRemoveExtensionW
PathRemoveFileSpecW
PathFindFileNameW
PathCreateFromUrlW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

CreateFileW
CreateEventW
SetEvent
ResetEvent
MultiByteToWideChar
WideCharToMultiByte
GetFileSizeEx
FindClose
GetLocalTime
GetTimeFormatW
GetDateFormatW
lstrlenW
ReadFile
WriteFile
Sleep
CreateThread
IsBadWritePtr
GetCommandLineW
GetModuleFileNameW
FormatMessageW
GetModuleHandleW
GetCurrentProcess
LocalAlloc
LocalFree
SetDllDirectoryW
HeapFree
HeapAlloc
GetProcessHeap
GetTempPathW
RaiseException
GetProcAddress
FreeLibrary
SetLastError
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
SetFilePointerEx
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetACP
InitializeCriticalSection
GetModuleFileNameA
ExitProcess
GetTimeZoneInformation
GetFileType
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwindEx
InitializeSListHead
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeCriticalSectionAndSpinCount
GetCPInfo
CompareStringEx
LCMapStringEx
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetLastError
WaitForSingleObject
CloseHandle
TerminateProcess
HeapReAlloc
RtlUnwind
SetStdHandle
GetLocaleInfoEx
GetStringTypeW
GetExitCodeThread
WaitForSingleObjectEx
InitOnceBeginInitialize
InitOnceComplete
QueryPerformanceFrequency
QueryPerformanceCounter
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetModuleHandleExW
IsProcessorFeaturePresent
RtlPcToFileHeader
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
DeleteCriticalSection
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
HeapSize
SetEndOfFile
GetStdHandle

user32

PostMessageW
AdjustWindowRectEx
GetWindowThreadProcessId
EnableWindow
GetClassInfoExW
GetDesktopWindow
GetWindowRect
RegisterClassExW
GetWindowLongPtrW
SetWindowTextW
CreateWindowExW
SetWindowLongPtrW
MessageBoxW
DestroyWindow
SetWindowPos
LoadCursorW
SendMessageW
DefWindowProcW
TranslateMessage
PeekMessageW
DispatchMessageW
SetForegroundWindow
GetClientRect
ReleaseDC
BringWindowToTop
GetForegroundWindow
AttachThreadInput
ShowWindow
GetMonitorInfoW
GetDC
MonitorFromRect
GetSystemMetrics
EqualRect

gdi32

GetDeviceCaps

shell32

SHGetKnownFolderPath
SHCreateDirectoryExW
ShellExecuteW

ole32

CoCreateGuid
OleInitialize
OleUninitialize
CoTaskMemFree

oleaut32

VariantInit
SafeArrayGetUBound
SafeArrayGetLBound
SysFreeString
SysStringLen
SysAllocStringLen
SafeArrayAccessData
VariantChangeType
VariantClear

advapi32

RegOpenKeyExW
RegQueryValueExA
RegCloseKey
RegQueryValueExW
GetTokenInformation
OpenProcessToken
GetSidSubAuthority
GetSidSubAuthorityCount

wininet

InternetCrackUrlW

credui

CredUIPromptForCredentialsW

bcrypt

BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptCreateHash
BCryptFinishHash
BCryptOpenAlgorithmProvider
BCryptHashData

crypt32

CertCloseStore

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 610KB - Virtual size: 609KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 207KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/NGL/cefWorkflow/adobe_licensing_wf_helper_acro.exe
.exe windows:6 windows x64

8144c6c3682013859f838306a551da61

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:16:a2:2d:46:7d:a2:37:39:d1:4e:57:b3:9c:2b:03:29:e7:53:b6:ff:e6:5c:5a:33:75:03:a5:0e:6e:2b:aa
Signer

Actual PE Digest

0a:16:a2:2d:46:7d:a2:37:39:d1:4e:57:b3:9c:2b:03:29:e7:53:b6:ff:e6:5c:5a:33:75:03:a5:0e:6e:2b:aa

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetProcAddress
LoadLibraryExA
WriteConsoleW
CreateFileW
CloseHandle
SetLastError
GetLastError
GetModuleHandleW
SetDllDirectoryW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
GetFileType
LCMapStringW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetProcessHeap
SetFilePointerEx
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode

shell32

CommandLineToArgvW

advapi32

RegQueryValueExA
RegOpenKeyExW
RegCloseKey

Sections

.text
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/RDCNotificationClient/FullTrustNotifier.exe
.exe windows:6 windows x86

1e3fcd214dbb0cc3195c8a933d8f245e

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/12/2020, 00:00

Not After

21/12/2022, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a8:06:99:a0:36:02:e9:d9:f9:f3:2d:6f:ec:ef:6d:5e:43:07:e7:15:9e:af:ad:d2:3b:2a:6b:2b:68:2a:c0:47
Signer

Actual PE Digest

a8:06:99:a0:36:02:e9:d9:f9:f3:2d:6f:ec:ef:6d:5e:43:07:e7:15:9e:af:ad:d2:3b:2a:6b:2b:68:2a:c0:47

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringA
lstrlenW
GetSystemDirectoryW
LoadLibraryW
GetProcAddress
FreeLibrary
WaitForSingleObject
GetLastError
SetEvent
ResetEvent
CreateEventA
WideCharToMultiByte
ReadFile
WriteFile
WaitForMultipleObjects
CreateFileW
DisconnectNamedPipe
CreateEventW
CloseHandle
GetOverlappedResult
GetCurrentProcessId
FlushFileBuffers
DecodePointer
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
WaitForSingleObjectEx
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive

ole32

CoInitializeEx
CoUninitialize
CoCreateFreeThreadedMarshaler
CoTaskMemFree

vccorlib140

??0Delegate@Platform@@Q$AAA@XZ
?Allocate@Heap@Details@Platform@@SAPAXII@Z
?__abi_ObjectToString@__abi_details@@YGP$AAVString@Platform@@P$AAVObject@3@_N@Z
?InitializeData@Details@Platform@@YAJH@Z
?Free@Heap@Details@Platform@@SAXPAX@Z
?AlignedFree@Heap@Details@Platform@@SAXPAX@Z
?UninitializeData@Details@Platform@@YAXH@Z
?GetIidsFn@@YGJHPAKPBU__s_GUID@@PAPAVGuid@Platform@@@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AAEXXZ
?__abi_cast_String_to_Object@__abi_details@@YGP$AAVObject@Platform@@P$AAVString@3@@Z
?__abi_translateCurrentException@@YGJ_N@Z
?__abi_WinRTraiseObjectDisposedException@@YGXXZ
?__abi_WinRTraiseInvalidCastException@@YGXXZ
?__abi_WinRTraiseNotImplementedException@@YGXXZ
?__abi_WinRTraiseDisconnectedException@@YGXXZ
?__abi_WinRTraiseFailureException@@YGXXZ
?__abi_WinRTraiseOperationCanceledException@@YGXXZ
?__abi_WinRTraiseAccessDeniedException@@YGXXZ
?__abi_WinRTraiseInvalidArgumentException@@YGXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YGXXZ
?__abi_WinRTraiseCOMException@@YGXJ@Z
?__abi_WinRTraiseNullReferenceException@@YGXXZ
?__abi_WinRTraiseChangedStateException@@YGXXZ
?__abi_WinRTraiseOutOfBoundsException@@YGXXZ
?__abi_WinRTraiseWrongThreadException@@YGXXZ
?__abi_WinRTraiseOutOfMemoryException@@YGXXZ
??0Object@Platform@@Q$AAA@XZ
?CreateException@Exception@Platform@@SAP$AAV12@H@Z
?ReCreateException@Exception@Platform@@SAP$AAV12@H@Z
?get@Message@Exception@Platform@@Q$AAAP$AAVString@3@XZ
?GetActivationFactoryByPCWSTR@@YGJPAXAAVGuid@Platform@@PAPAX@Z

msvcp140

??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Xlength_error@std@@YAXPBD@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?GetNextAsyncId@platform@details@Concurrency@@YAIXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Assign@_ContextCallback@details@Concurrency@@AAEXPAX@Z
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?__ExceptionPtrCreate@@YAXPAX@Z
_Cnd_init_in_situ
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
_Wcscoll
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_C_error@std@@YAXH@Z
?id@?$collate@_W@std@@2V0locale@2@A
?_XGetLastError@std@@YAXXZ
?__ExceptionPtrToBool@@YA_NPBX@Z
_Mtx_destroy_in_situ
_Wcsxfrm
?__ExceptionPtrDestroy@@YAXPAX@Z
_Mtx_lock
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
_Mtx_init_in_situ
_Cnd_wait
_Mtx_unlock
_Cnd_broadcast
_Cnd_destroy_in_situ

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString

vcruntime140

memcpy
memmove
_except_handler4_common
_CxxThrowException
memset
strchr
_purecall
__std_exception_copy
__std_exception_destroy
__std_terminate
__CxxFrameHandler3

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
_set_fmode
__p__commode

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback
terminate
_c_exit
_configure_wide_argv
_invalid_parameter_noinfo_noreturn
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_set_app_type
_controlfp_s
_initialize_wide_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe

api-ms-win-crt-string-l1-1-0

wcscpy_s
wcslen

api-ms-win-crt-heap-l1-1-0

realloc
free
malloc
_callnewh
_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/RDCNotificationClient/Microsoft.VCLibs.x86.14.00.appx
.appx
other/RDCNotificationClient/RDCNotificationClient.appx
.appx
other/RdrApp/ENU/Accessibility_R_RHP.aapp
other/RdrApp/ENU/Actions_R_RHP.aapp
other/RdrApp/ENU/AppCenter_R.aapp
other/RdrApp/ENU/CCX_R_RHP.aapp
other/RdrApp/ENU/CPDF_Full.aapp
other/RdrApp/ENU/CPDF_RHP.aapp
other/RdrApp/ENU/Certificates_R.aapp
other/RdrApp/ENU/CollectSignatures.aapp
other/RdrApp/ENU/Combine_DelayedPaywall.aapp
other/RdrApp/ENU/Combine_R_RHP.aapp
other/RdrApp/ENU/Comments.aapp
other/RdrApp/ENU/Compare_R_RHP.aapp
other/RdrApp/ENU/ConvertPDF_Full.aapp
other/RdrApp/ENU/ConvertPDF_RHP.aapp
other/RdrApp/ENU/CreateCustom_R_RHP.aapp
other/RdrApp/ENU/Developer_R_RHP.aapp
other/RdrApp/ENU/EPDF_Full.aapp
other/RdrApp/ENU/EPDF_RHP.aapp
other/RdrApp/ENU/Edit_DelayedPaywall.aapp
other/RdrApp/ENU/Edit_R_Exp_RHP.aapp
other/RdrApp/ENU/Edit_R_Full.aapp
other/RdrApp/ENU/Edit_R_Menu.aapp
other/RdrApp/ENU/Edit_R_RHP.aapp
other/RdrApp/ENU/FillSign.aapp
other/RdrApp/ENU/Forms_R_RHP.aapp
other/RdrApp/ENU/Home.aapp
other/RdrApp/ENU/InAppSign.aapp
other/RdrApp/ENU/Index_R_RHP.aapp
other/RdrApp/ENU/Measure.aapp
other/RdrApp/ENU/MoreTools.aapp
other/RdrApp/ENU/OptimizePDF_R_CTX.aapp
other/RdrApp/ENU/OptimizePDF_R_RHP.aapp
other/RdrApp/ENU/Pages_DelayedPaywall.aapp
other/RdrApp/ENU/Pages_R_RHP.aapp
other/RdrApp/ENU/PrintProduction_R_RHP.aapp
other/RdrApp/ENU/Protect_R_RHP.aapp
other/RdrApp/ENU/Redact_R_RHP.aapp
other/RdrApp/ENU/Review_RHP.aapp
other/RdrApp/ENU/RichMedia_R_RHP.aapp
other/RdrApp/ENU/Scan_R_RHP.aapp
other/RdrApp/ENU/Stamp.aapp
other/RdrApp/ENU/Standards_R_RHP.aapp
other/RdrApp/ENU/TrackedSend.aapp
other/RdrApp/ENU/UnifiedShare.aapp
other/RdrApp/ENU/Viewer.aapp
other/RdrApp/RUS/Accessibility_R_RHP.aapp
other/RdrApp/RUS/Actions_R_RHP.aapp
other/RdrApp/RUS/AppCenter_R.aapp
other/RdrApp/RUS/CPDF_Full.aapp
other/RdrApp/RUS/CPDF_RHP.aapp
other/RdrApp/RUS/Certificates_R.aapp
other/RdrApp/RUS/Combine_DelayedPaywall.aapp
other/RdrApp/RUS/Combine_R_RHP.aapp
other/RdrApp/RUS/Comments.aapp
other/RdrApp/RUS/Compare_R_RHP.aapp
other/RdrApp/RUS/ConvertPDF_Full.aapp
other/RdrApp/RUS/CreateCustom_R_RHP.aapp
other/RdrApp/RUS/Developer_R_RHP.aapp
other/RdrApp/RUS/EPDF_Full.aapp
other/RdrApp/RUS/EPDF_RHP.aapp
other/RdrApp/RUS/Edit_DelayedPaywall.aapp
other/RdrApp/RUS/Edit_R_Exp_RHP.aapp
other/RdrApp/RUS/Edit_R_Full.aapp
other/RdrApp/RUS/Edit_R_Menu.aapp
other/RdrApp/RUS/Edit_R_RHP.aapp
other/RdrApp/RUS/FillSign.aapp
other/RdrApp/RUS/Forms_R_RHP.aapp
other/RdrApp/RUS/Home.aapp
other/RdrApp/RUS/InAppSign.aapp
other/RdrApp/RUS/Index_R_RHP.aapp
other/RdrApp/RUS/Measure.aapp
other/RdrApp/RUS/MoreTools.aapp
other/RdrApp/RUS/OptimizePDF_R_CTX.aapp
other/RdrApp/RUS/OptimizePDF_R_RHP.aapp
other/RdrApp/RUS/Pages_DelayedPaywall.aapp
other/RdrApp/RUS/Pages_R_RHP.aapp
other/RdrApp/RUS/PrintProduction_R_RHP.aapp
other/RdrApp/RUS/Protect_R_RHP.aapp
other/RdrApp/RUS/Redact_R_RHP.aapp
other/RdrApp/RUS/Review_RHP.aapp
other/RdrApp/RUS/RichMedia_R_RHP.aapp
other/RdrApp/RUS/Scan_R_RHP.aapp
other/RdrApp/RUS/Stamp.aapp
other/RdrApp/RUS/Standards_R_RHP.aapp
other/RdrApp/RUS/UnifiedShare.aapp
other/RdrApp/RUS/Viewer.aapp
other/Sequences/ENU/Action01.sequ
.xml
other/Sequences/ENU/Action02.sequ
.xml
other/Sequences/ENU/Action03.sequ
.xml
other/Sequences/ENU/Action04.sequ
.xml
other/Sequences/ENU/Action05.sequ
.xml
other/Sequences/ENU/Action06.sequ
.xml
other/Sequences/RUS/Action01.sequ
.xml
other/Sequences/RUS/Action02.sequ
.xml
other/Sequences/RUS/Action03.sequ
.xml
other/Sequences/RUS/Action04.sequ
.xml
other/Sequences/RUS/Action05.sequ
.xml
other/Sequences/RUS/Action06.sequ
.xml
other/Tracker/add_reviewer.gif
.gif
other/Tracker/bl.gif
.gif
other/Tracker/br.gif
.gif
other/Tracker/change_deadline.gif
.gif
other/Tracker/create_form.gif
.gif
other/Tracker/distribute_form.gif
.gif
other/Tracker/email_all.gif
.gif
other/Tracker/email_initiator.gif
.gif
other/Tracker/email_recipients_not_respond.gif
.gif
other/Tracker/end_review.gif
.gif
other/Tracker/ended_review_or_form.gif
.gif
other/Tracker/form_responses.gif
.gif
other/Tracker/forms_distributed.gif
.gif
other/Tracker/forms_received.gif
.gif
other/Tracker/forms_super.gif
.gif
other/Tracker/info.gif
.gif
other/Tracker/main.css
other/Tracker/open_original_form.gif
.gif
other/Tracker/pdf.gif
.gif
other/Tracker/review_browser.gif
.gif
other/Tracker/review_email.gif
.gif
other/Tracker/review_same_reviewers.gif
.gif
other/Tracker/review_shared.gif
.gif
other/Tracker/reviewers.gif
.gif
other/Tracker/reviews_joined.gif
.gif
other/Tracker/reviews_sent.gif
.gif
other/Tracker/reviews_super.gif
.gif
other/Tracker/rss.gif
.gif
other/Tracker/server_issue.gif
.gif
other/Tracker/server_lg.gif
.gif
other/Tracker/server_ok.gif
.gif
other/Tracker/stop_collection_data.gif
.gif
other/Tracker/submission_history.gif
.gif
other/Tracker/tl.gif
.gif
other/Tracker/tr.gif
.gif
other/Tracker/trash.gif
.gif
other/Tracker/turnOffNotificationInAcrobat.gif
.gif
other/Tracker/turnOffNotificationInTray.gif
.gif
other/Tracker/turnOnNotificationInAcrobat.gif
.gif
other/Tracker/turnOnNotificationInTray.gif
.gif
other/Tracker/warning.gif
.gif
other/UICustomization/RUS/Custom01.aaui
.xml
other/UIThemes/DarkTheme.acrotheme
other/UIThemes/LightTheme.acrotheme
other/adobeafp.dll
.dll regsvr32 windows:6 windows x64

f12b16b6617580a819ccdd00261cc918

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:06:2d:ad:22:fa:63:bb:d7:1a:58:b0:81:17:28:47:92:c3:45:ff:9a:c4:c2:cf:87:38:9a:ef:a3:a9:30:d0
Signer

Actual PE Digest

fb:06:2d:ad:22:fa:63:bb:d7:1a:58:b0:81:17:28:47:92:c3:45:ff:9a:c4:c2:cf:87:38:9a:ef:a3:a9:30:d0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

PeekMessageW
SetParent
IsClipboardFormatAvailable
GetClipboardData
LoadCursorW
GetWindow
GetClassNameW
GetParent
GetDesktopWindow
IsWindow
DestroyWindow
MoveWindow
GetClassInfoExW
RegisterClassExW
CallWindowProcW
DefWindowProcW
RegisterWindowMessageW
CharLowerBuffW
SendMessageW
GetWindowThreadProcessId
FindWindowW
IsChild
CreateWindowExW
KillTimer
SetTimer
EmptyClipboard
CloseClipboard
OpenClipboard
ShowWindow
UnregisterClassW
PostMessageW
SetWindowPos
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
OffsetRect
FillRect
GetSysColor
ScreenToClient
ClientToScreen
GetWindowRect
GetClientRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DestroyAcceleratorTable
CreateAcceleratorTableW
ReleaseCapture
SetCapture
GetFocus
SetFocus
CharNextW
GetDlgItem

ole32

HWND_UserFree64
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
StringFromGUID2
CreateBindCtx
OleInitialize
OleUninitialize
OleDraw
OleLockRunning
HWND_UserSize
HWND_UserMarshal
HWND_UserUnmarshal
HWND_UserFree
HWND_UserSize64
HWND_UserMarshal64
HWND_UserUnmarshal64

oleaut32

GetErrorInfo
VarBstrFromI4
VarI4FromStr
VariantChangeType
SafeArrayGetVartype
SafeArrayCopy
SafeArrayRedim
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayDestroy
OleLoadPicture
UnRegisterTypeLi
RegisterTypeLi
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
VarUI4FromStr
LPSAFEARRAY_UserFree64
LPSAFEARRAY_UserUnmarshal64
LPSAFEARRAY_UserMarshal64
LPSAFEARRAY_UserSize64
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserSize
VARIANT_UserFree64
VARIANT_UserUnmarshal64
VARIANT_UserMarshal64
VARIANT_UserSize64
VARIANT_UserFree
VARIANT_UserUnmarshal
VARIANT_UserMarshal
VARIANT_UserSize
OleCreateFontIndirect
SysStringByteLen
VarBstrCmp
LoadRegTypeLi
LoadTypeLi
SafeArrayCreate
SysStringLen
SysAllocStringLen
SysAllocString
VariantCopy
VariantClear
VariantInit
SysAllocStringByteLen
SysFreeString

kernel32

PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
GetFileAttributesExW
VirtualQuery
VirtualProtect
FileTimeToSystemTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
SystemTimeToTzSpecificLocalTime
GetACP
ExitProcess
GetModuleHandleExW
GetStdHandle
CompareStringW
LCMapStringW
GetCurrentDirectoryW
GetFullPathNameW
SetStdHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
SetFilePointerEx
WriteFile
GetTimeZoneInformation
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW
GetSystemInfo
GlobalUnlock
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LocalFree
GlobalReAlloc
InitializeCriticalSection
WideCharToMultiByte
CopyFileW
SetFileAttributesW
DeleteFileW
ReadFile
GetFileSize
CreateFileW
SetThreadLocale
GetThreadLocale
EncodePointer
lstrcmpiW
LoadLibraryExW
GetProcAddress
GetModuleHandleW
FreeLibrary
lstrcmpW
MulDiv
InitializeCriticalSectionEx
GetTempPathW
DecodePointer
CloseHandle
RaiseException
GetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
DeleteCriticalSection
TerminateProcess
OpenProcess
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
MultiByteToWideChar
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
SetLastError
GetCurrentThreadId
GlobalAlloc
GlobalLock

advapi32

RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetKeyParam
CryptGetHashParam
CryptImportKey
CryptDecrypt
CryptCreateHash
CryptHashData
CryptDestroyHash
RegOpenKeyExW

shell32

SHGetDesktopFolder

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
SelectObject
StretchBlt
SetStretchBltMode
GetObjectW
SetBrushOrgEx
CopyEnhMetaFileW
CreateDIBSection
DeleteEnhMetaFile
GetEnhMetaFileW
GetEnhMetaFileHeader
PlayEnhMetaFile
GetDIBits
SetEnhMetaFileBits

urlmon

CreateURLMonikerEx
CoInternetSetFeatureEnabled

rpcrt4

UuidToStringW
UuidCreate
RpcStringFreeW
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrOleFree
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrCStdStubBuffer_Release
NdrClientCall3
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
NdrOleAllocate

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 215B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/ahclient.dll
.dll windows:6 windows x64

8fe504dde4dfe86add50069abd3b3990

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1c:2c:da:4c:54:f4:99:b3:11:91:13:64:d1:29:f3:98:c1:4b:8f:1e:cc:ab:50:90:bb:5a:6b:64:9b:42:ee:ec
Signer

Actual PE Digest

1c:2c:da:4c:54:f4:99:b3:11:91:13:64:d1:29:f3:98:c1:4b:8f:1e:cc:ab:50:90:bb:5a:6b:64:9b:42:ee:ec

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

wininet

HttpOpenRequestA
HttpSendRequestW
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetSetOptionA
HttpSendRequestA
HttpQueryInfoA
InternetCrackUrlA

shlwapi

AssocQueryStringW

kernel32

IsDebuggerPresent
CreateEventW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
CloseHandle
GetModuleHandleW
GetProcAddress
FormatMessageA
FormatMessageW
WideCharToMultiByte
LocalFree
CreateSemaphoreA
ReleaseSemaphore
CreateEventA
SetEvent
GetCurrentProcess
WaitForSingleObjectEx
GetSystemTimeAsFileTime
GetProcessHeap
HeapAlloc
HeapFree
QueryPerformanceCounter
QueryPerformanceFrequency
GetLastError
GlobalFree
MultiByteToWideChar
GetStdHandle
GetEnvironmentVariableW
FindFirstFileW
GetFileAttributesExW
ReadFile
CreatePipe
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetModuleFileNameW
GlobalAlloc
WaitForMultipleObjectsEx
TerminateProcess
SetUnhandledExceptionFilter
RaiseException
VirtualQuery
DuplicateHandle
FreeLibrary
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
CreateWaitableTimerA
GetModuleHandleA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
GetCurrentThreadId
GetCurrentProcessId
Sleep
SetWaitableTimer
ResetEvent
OpenEventA

user32

wsprintfW

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

shell32

SHGetFolderPathW

ole32

CoInitialize
OleRun
CLSIDFromString
CLSIDFromProgID
CoCreateInstance

oleaut32

VariantInit
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
VariantChangeType
VariantCopy

msvcp140

?_Xbad_alloc@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?id@?$ctype@D@std@@2V0locale@2@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?exceptions@ios_base@std@@QEAAXH@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z

winhttp

WinHttpReadData
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpOpen
WinHttpQueryAuthSchemes
WinHttpSetCredentials
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpConnect

vcruntime140

__std_exception_copy
_CxxThrowException
__std_terminate
memchr
_purecall
__std_exception_destroy
memcpy
memmove
memset
wcsstr
__C_specific_handler
__std_type_info_destroy_list
__current_exception
__current_exception_context
__C_specific_handler_noexcept
memcmp
__vcrt_LoadLibraryExW
__std_type_info_name
__vcrt_GetModuleFileNameW

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
terminate
_initterm
_initterm_e
_beginthreadex
_errno
_invalid_parameter_noinfo_noreturn
_wassert
_initialize_narrow_environment
strerror

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-convert-l1-1-0

atoi
strtoul
_itoa

api-ms-win-crt-string-l1-1-0

strncpy
wcscat_s
wcsncat_s
wcsncpy_s
wcslen
strlen
wcscpy_s
strcat_s
strcpy_s
toupper
tolower

api-ms-win-crt-time-l1-1-0

_time64
_localtime64

api-ms-win-crt-stdio-l1-1-0

_fseeki64
ungetc
setvbuf
fsetpos
fread
fputc
__stdio_common_vsprintf_s
fgetc
fflush
fclose
_get_stream_buffer_pointers
_wfopen_s
__stdio_common_vsprintf
fgetpos
fwrite

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

Exports

Exports

AdobeHelpEncodeURIComponent
DisplayAdobeHelpClientPage
FetchAdobeHelpClientPage
FetchSearchHelpPage
GetAdobeHelpClientOnlineStatus
GetAdobeHelpClientVersion
InitializeAdobeHelpClient
InitializeAdobeHelpClientWrapper
OpenURL
ReleaseURLMemory
SearchHelp
SearchHelpv2
UnInitializeAdobeHelpClient

Sections

.text
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/ccme_asym.dll
.dll windows:6 windows x64

4d4a3446b941b10ad7150397133b2dee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcr120

_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__C_specific_handler
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
_initterm_e
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
memcmp
memset
__clean_type_info_names_internal
memcpy_s

kernel32

IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent

Exports

Exports

R_FIPS_MODULE_resource

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/ccme_base.dll
.dll windows:6 windows x64

1ffb9110f13b790972e9898c9e3fc2c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

GetMessageTime
GetCaretPos
GetCursorPos
GetCapture
GetQueueStatus
GetFocus
GetActiveWindow
GetOpenClipboardWindow
GetClipboardViewer
GetClipboardOwner
GetMessagePos

gdi32

GetObjectA
SelectObject
GetDeviceCaps
GetBitmapBits
DeleteObject
DeleteDC
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt

msvcr120

__C_specific_handler
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
sprintf
toupper
isdigit
memmove_s
_stat64i32
fread
fopen
fclose
memcpy
memmove
_difftime64
_time64
memset
memcpy_s
memcmp
getenv
_initterm_e

iphlpapi

GetIfTable

kernel32

HeapReAlloc
HeapFree
GetSystemTime
SystemTimeToFileTime
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
QueryPerformanceCounter
K32GetProcessMemoryInfo
K32EnumProcesses
HeapAlloc
OpenProcess
GetSystemTimes
GetThreadTimes
GetCurrentThread
GetProcessTimes
GetStartupInfoA
GetCurrentThreadId
GetCurrentProcessId
GetProcessWorkingSetSize
GlobalMemoryStatusEx
GetCurrentProcess
CloseHandle
ReadFile
CreateFileA
GetProcessIoCounters
HeapDestroy

Exports

Exports

R_FIPS_MODULE_resource

Sections

.text
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/ccme_base_non_fips.dll
.dll windows:6 windows x64

38e7aea50232e7403e460eecfc55fb06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcr120

fopen
fread
_stat64i32
memmove_s
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
fclose
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
_difftime64
_time64
memmove
memcpy
memset
memcpy_s
memcmp
srand
_lock
rand

kernel32

IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
QueryPerformanceCounter
DecodePointer
EncodePointer
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent

Exports

Exports

R_FIPS_MODULE_resource

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/ccme_ecc.dll
.dll windows:6 windows x64

85fa29bd3c72ce2d14f3f8e4207261d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcr120

__C_specific_handler
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_initterm_e
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
memmove_s
memcpy_s
memcmp
__clean_type_info_names_internal
memset

kernel32

IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent

Exports

Exports

R_FIPS_MODULE_resource

Sections

.text
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/ngl_resources/resources/ui/font/ie/AdobeClean-Bold.eot
other/ngl_resources/resources/ui/font/ie/AdobeClean-Light.eot
other/ngl_resources/resources/ui/font/ie/AdobeClean-Regular.eot
other/ngl_resources/resources/ui/font/regular/AdobeClean-Bold.woff
other/ngl_resources/resources/ui/font/regular/AdobeClean-Light.woff
other/ngl_resources/resources/ui/font/regular/AdobeClean-Regular.woff
other/ngl_resources/resources/ui/index.html
.html
other/plug_ins/Accessibility.api
.dll regsvr32 windows:6 windows x64

7a6f5bbf71fe3f6f026d26722b6004ae

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a4:fd:3d:bd:3d:59:2b:4f:7d:15:dc:4c:60:60:78:ca:76:47:0b:27:b8:59:71:30:3c:72:01:09:5e:d9:f8:12
Signer

Actual PE Digest

a4:fd:3d:bd:3d:59:2b:4f:7d:15:dc:4c:60:60:78:ca:76:47:0b:27:b8:59:71:30:3c:72:01:09:5e:d9:f8:12

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryExA
LoadResource
SizeofResource
LoadLibraryW
lstrcmpiA
FindResourceA
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
MultiByteToWideChar
WideCharToMultiByte
IsDBCSLeadByte
GetSystemDirectoryA
LoadLibraryA
DecodePointer
GetModuleHandleW
GetThreadLocale
SetThreadLocale
FreeResource
LockResource
GetModuleHandleExW
lstrcpyA
lstrlenA
GetTickCount
FindAtomW
GetModuleHandleA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
OutputDebugStringW
IsDebuggerPresent
GetModuleFileNameW
GetModuleFileNameA
FreeLibrary
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetProcAddress
GetLastError
RaiseException
OutputDebugStringA
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CloseHandle

user32

FindWindowA
GetClassNameA
SetPropW
SystemParametersInfoA
IsWindow
GetPropW
MoveWindow
GetWindowTextA
wsprintfA
SetFocus
GetSystemMetrics
CharNextW
GetFocus
GetGUIThreadInfo
GetWindowThreadProcessId
IsRectEmpty
OffsetRect
GetWindowRect
NotifyWinEvent
CharNextA

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegQueryInfoKeyA

ole32

StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoDisconnectObject

oleaut32

UnRegisterTypeLi
RegisterTypeLi
SysStringByteLen
VariantInit
SysAllocString
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VariantClear
SysStringLen
SysFreeString
SysAllocStringLen
VarBstrCat

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?uncaught_exception@std@@YA_NXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?_Xout_of_range@std@@YAXPEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_type_info_destroy_list
__current_exception_context
__current_exception
__std_terminate
strchr
memset
memcmp
__C_specific_handler
memchr
_purecall
__RTDynamicCast
__std_exception_destroy
__std_exception_copy
_CxxThrowException
strstr
strrchr
memmove
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strcat_s
strcpy_s
wcscmp
strlen
wcslen
strpbrk
isalpha
strcmp
_wcsicmp
tolower
isdigit
wcsncmp
strncmp
wcsncpy_s

api-ms-win-crt-runtime-l1-1-0

_errno
_cexit
_initterm
_register_onexit_function
_execute_onexit_table
_initterm_e
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo
_set_invalid_parameter_handler
_invalid_parameter_noinfo_noreturn
terminate
_crt_atexit
_resetstkoflw

api-ms-win-crt-stdio-l1-1-0

fgetc
fgetpos
fputc
fread
fsetpos
_fseeki64
fwrite
setvbuf
ungetc
fclose
_get_stream_buffer_pointers
__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s
fflush

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free
_recalloc

api-ms-win-crt-multibyte-l1-1-0

_mbsstr
_mbsnbcat_s
_mbsnbcpy_s

api-ms-win-crt-convert-l1-1-0

atoi
_wtoi

api-ms-win-crt-time-l1-1-0

_time64
_gmtime64
_localtime64

Exports

Exports

DllRegisterServer
DllUnregisterServer
PlugInMain

Sections

.text
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/AcroForm.api
.dll regsvr32 windows:6 windows x64

c8f9b62b77c7113519b794d4a080ca82

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

80:12:b3:e2:07:63:10:ae:fa:c6:3b:b5:3d:4d:a7:d7:88:16:59:08:fb:68:c5:da:bd:02:c5:a3:75:42:dd:9f
Signer

Actual PE Digest

80:12:b3:e2:07:63:10:ae:fa:c6:3b:b5:3d:4d:a7:d7:88:16:59:08:fb:68:c5:da:bd:02:c5:a3:75:42:dd:9f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

bib

ord5

kernel32

GlobalAddAtomA
GlobalFindAtomA
FindClose
FindFirstFileW
SearchPathA
Sleep
GetCurrentProcess
TerminateProcess
CloseHandle
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
CreateThread
LocalFree
MulDiv
GetDriveTypeW
GetComputerNameExW
GetFullPathNameA
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemDefaultLangID
GetFileAttributesW
GetSystemInfo
VirtualProtect
VirtualQuery
CreateSemaphoreA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
FindResourceA
lstrcmpiA
SizeofResource
LoadResource
LoadLibraryExA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
FreeLibrary
GetModuleFileNameA
GlobalSize
DisableThreadLibraryCalls
GetLocaleInfoW
lstrcpyA
lstrcpynA
OutputDebugStringW
GetCurrentThreadId
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
GetDateFormatEx
SystemTimeToFileTime
GetComputerNameA
GetTickCount64
GlobalMemoryStatusEx
GetSystemTime
GetThreadLocale
FormatMessageA
GetTempFileNameA
GetTempPathA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetFileSize
CreateFileW
ExitProcess
LocalAlloc
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
GetLocalTime
GetSystemTimeAsFileTime
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
GetLocaleInfoA
VerifyVersionInfoW
CreateActCtxW
LoadLibraryW
GetModuleHandleExW
GetModuleFileNameW
InitializeCriticalSectionEx
SetLastError
GetLastError
RaiseException
DecodePointer
LockResource
FreeResource
VerSetConditionMask
EnumSystemLocalesA
GetUserDefaultLCID
GetACP
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
lstrlenA
lstrcatA
LoadLibraryA
GetSystemDirectoryA
GlobalDeleteAtom
OutputDebugStringA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcessId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetTempPathW
FindAtomW
GetTickCount
IsDBCSLeadByte

user32

DdeCreateStringHandleA
DdeFreeStringHandle
GetAsyncKeyState
LoadKeyboardLayoutA
DdeDisconnect
AttachThreadInput
ShowWindow
DdeConnect
DdeInitializeA
FindWindowExA
GetSystemMetrics
MoveWindow
SetFocus
GetFocus
SetPropW
GetPropW
GetWindowRect
FindWindowA
IsIconic
GetForegroundWindow
LoadStringA
GetParent
GetWindowThreadProcessId
CharNextA
CharNextW
CallWindowProcA
SetPropA
GetPropA
RemovePropA
SetWindowLongPtrW
MessageBeep
GetSysColor
FillRect
LoadBitmapA
LoadCursorA
DestroyCursor
wsprintfA
GetDC
ReleaseDC
GetDesktopWindow
SetWindowPos
GetKeyboardLayout
InvalidateRect
SetWindowLongPtrA
OpenClipboard
CloseClipboard
GetClipboardData
GetKeyState
GetWindowLongPtrA
TranslateMessage
DispatchMessageA
PeekMessageA
SendMessageA
SetWindowTextA
GetWindowTextA
wsprintfW
MsgWaitForMultipleObjects
SetClipboardData
RegisterClipboardFormatA
EmptyClipboard
IsClipboardFormatAvailable
OffsetRect
ActivateKeyboardLayout
GetKeyboardLayoutList
CreateWindowExA
DestroyWindow
IsWindowVisible
IsWindowUnicode
GetWindowLongPtrW
SetForegroundWindow
GetWindowTextLengthA
GetWindowLongA

gdi32

GetStockObject
GetDeviceCaps
GetCharWidthA
DeleteDC
CreateFontIndirectA
CreateCompatibleDC
MoveToEx
SetBkColor
LineTo
CreateSolidBrush
CreatePen
DeleteObject
SetTextColor
GetTextMetricsA
SelectObject
CreateFontIndirectW
EnumFontFamiliesA
GetTextAlign
GetFontLanguageInfo
GetCharacterPlacementA
SetTextAlign

advapi32

RegQueryValueExA
RegSetValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyA
RegQueryValueA
RegCreateKeyExW

ole32

ProgIDFromCLSID
CLSIDFromProgID
CoInitialize
CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemFree
CoInitializeEx

oleaut32

GetErrorInfo
VariantChangeType
VariantInit
VariantCopy
VariantClear
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetDim
SysAllocStringByteLen
SysStringByteLen
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysAllocString
CreateErrorInfo
SetErrorInfo
LoadRegTypeLi
LoadTypeLi
SysStringLen
SysFreeString
SafeArrayCreateVector

sensapi

IsNetworkAlive

msvcp140

?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEAD@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
?exceptions@ios_base@std@@QEAAXH@Z
?classic@locale@std@@SAAEBV12@XZ
?_Syserror_map@std@@YAPEBDH@Z
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??Bios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
_Thrd_id
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_Xlength_error@std@@YAXPEBD@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PEAV32@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Xbad_alloc@std@@YAXXZ
?_Xbad_function_call@std@@YAXXZ
_Strcoll
_Strxfrm
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$collate@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAH@Z
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?_Xruntime_error@std@@YAXPEBD@Z
??0_Locinfo@std@@QEAA@HPEBD@Z
?_Getname@_Locinfo@std@@QEBAPEBDXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

vcruntime140

longjmp
__std_terminate
memcmp
__intrinsic_setjmp
__std_type_info_destroy_list
__current_exception_context
__current_exception
__std_type_info_name
memchr
_purecall
memset
wcsrchr
memcpy
memmove
__std_exception_copy
strrchr
strstr
strchr
__C_specific_handler
__RTDynamicCast
__std_exception_destroy
_CxxThrowException
__std_type_info_compare

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

isalpha
wcstok_s
iswdigit
iswalpha
tolower
wcscat_s
wcslen
wcscpy_s
towlower
iswcntrl
strncpy
isdigit
_wcslwr_s
strcat
isspace
_wcsicmp
strspn
strcspn
isprint
strcpy_s
wcsncpy_s
strcat_s
strncpy_s
isblank
strcoll
strtok_s
islower
ispunct
_strdup
strcpy
wcscpy
wcscat
iscntrl
strlen
strcmp
iswspace
isalnum
strpbrk
_strnicmp
strncmp
strncat
_stricmp
wcsncpy
_strlwr
toupper
isxdigit
isupper
wcsncat

api-ms-win-crt-stdio-l1-1-0

_get_stream_buffer_pointers
fgets
fgetpos
fsetpos
setvbuf
__stdio_common_vsnwprintf_s
__stdio_common_vsscanf
fopen
fputc
fgetc
__acrt_iob_func
__stdio_common_vsprintf_s
_fseeki64
putc
getc
__stdio_common_vfprintf
_wfdopen
_wfopen
fclose
ferror
_wfopen_s
fflush
_fileno
fread
feof
ungetc
__stdio_common_vswprintf
__stdio_common_vswscanf
_ftelli64
tmpfile
fseek
fwrite
__stdio_common_vsprintf
_wsopen_s
_chsize_s
_close
__stdio_common_vsnprintf_s

api-ms-win-crt-runtime-l1-1-0

_errno
_resetstkoflw
_invalid_parameter_noinfo
exit
_configure_narrow_argv
_wassert
strerror
_invalid_parameter_noinfo_noreturn
_set_invalid_parameter_handler
_initterm_e
_initterm
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_exit
_initialize_onexit_table
_seh_filter_dll
_initialize_narrow_environment

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_wremove
_lock_file

api-ms-win-crt-time-l1-1-0

_mktime64
_tzset
__timezone
__daylight
_ftime64
_time64
asctime
_localtime64
clock
_gmtime64

api-ms-win-crt-convert-l1-1-0

_ltoa
_itoa
atol
_ui64toa
_i64toa
strtoul
_strtod_l
mbstowcs
strtoll
_ultoa_s
_ltoa_s
_wtoi
strtol
_fcvt
strtoull
strtod
_itoa_s
_wtol
atof
_wtof
atoi

api-ms-win-crt-heap-l1-1-0

_recalloc
malloc
realloc
calloc
free
_callnewh

api-ms-win-crt-locale-l1-1-0

localeconv
setlocale
_free_locale
_create_locale

api-ms-win-crt-math-l1-1-0

cos
sin
acos
floor
_finite
sqrt
ceilf
pow
ceil
atan2
fmod
exp
log
asin
atan
tan
_dtest
fabs
_isnan

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-utility-l1-1-0

abs
srand
qsort
bsearch
labs
rand

crypt32

CryptProtectData
CryptUnprotectData

shlwapi

PathRemoveFileSpecW

axsle

ord1
ord2

Exports

Exports

DllRegisterServer
DllUnregisterServer
PlugInMain
hb_aat_layout_feature_type_get_name_id
hb_aat_layout_feature_type_get_selector_infos
hb_aat_layout_get_feature_types
hb_aat_layout_has_positioning
hb_aat_layout_has_substitution
hb_aat_layout_has_tracking
hb_blob_copy_writable_or_fail
hb_blob_create
hb_blob_create_from_file
hb_blob_create_sub_blob
hb_blob_destroy
hb_blob_get_data
hb_blob_get_data_writable
hb_blob_get_empty
hb_blob_get_length
hb_blob_get_user_data
hb_blob_is_immutable
hb_blob_make_immutable
hb_blob_reference
hb_blob_set_user_data
hb_buffer_add
hb_buffer_add_codepoints
hb_buffer_add_latin1
hb_buffer_add_utf16
hb_buffer_add_utf32
hb_buffer_add_utf8
hb_buffer_allocation_successful
hb_buffer_append
hb_buffer_clear_contents
hb_buffer_create
hb_buffer_destroy
hb_buffer_diff
hb_buffer_get_cluster_level
hb_buffer_get_content_type
hb_buffer_get_direction
hb_buffer_get_empty
hb_buffer_get_flags
hb_buffer_get_glyph_infos
hb_buffer_get_glyph_positions
hb_buffer_get_invisible_glyph
hb_buffer_get_language
hb_buffer_get_length
hb_buffer_get_replacement_codepoint
hb_buffer_get_script
hb_buffer_get_segment_properties
hb_buffer_get_unicode_funcs
hb_buffer_get_user_data
hb_buffer_guess_segment_properties
hb_buffer_normalize_glyphs
hb_buffer_pre_allocate
hb_buffer_reference
hb_buffer_reset
hb_buffer_reverse
hb_buffer_reverse_clusters
hb_buffer_reverse_range
hb_buffer_set_cluster_level
hb_buffer_set_content_type
hb_buffer_set_direction
hb_buffer_set_flags
hb_buffer_set_invisible_glyph
hb_buffer_set_language
hb_buffer_set_length
hb_buffer_set_message_func
hb_buffer_set_replacement_codepoint
hb_buffer_set_script
hb_buffer_set_segment_properties
hb_buffer_set_unicode_funcs
hb_buffer_set_user_data
hb_direction_from_string
hb_direction_to_string
hb_face_builder_add_table
hb_face_builder_create
hb_face_collect_unicodes
hb_face_collect_variation_selectors
hb_face_collect_variation_unicodes
hb_face_count
hb_face_create
hb_face_create_for_tables
hb_face_destroy
hb_face_get_empty
hb_face_get_glyph_count
hb_face_get_index
hb_face_get_table_tags
hb_face_get_upem
hb_face_get_user_data
hb_face_is_immutable
hb_face_make_immutable
hb_face_reference
hb_face_reference_blob
hb_face_reference_table
hb_face_set_glyph_count
hb_face_set_index
hb_face_set_upem
hb_face_set_user_data
hb_feature_from_string
hb_feature_to_string
hb_font_add_glyph_origin_for_direction
hb_font_create
hb_font_create_sub_font
hb_font_destroy
hb_font_funcs_create
hb_font_funcs_destroy
hb_font_funcs_get_empty
hb_font_funcs_get_user_data
hb_font_funcs_is_immutable
hb_font_funcs_make_immutable
hb_font_funcs_reference
hb_font_funcs_set_font_h_extents_func
hb_font_funcs_set_font_v_extents_func
hb_font_funcs_set_glyph_contour_point_func
hb_font_funcs_set_glyph_extents_func
hb_font_funcs_set_glyph_from_name_func
hb_font_funcs_set_glyph_func
hb_font_funcs_set_glyph_h_advance_func
hb_font_funcs_set_glyph_h_advances_func
hb_font_funcs_set_glyph_h_kerning_func
hb_font_funcs_set_glyph_h_origin_func
hb_font_funcs_set_glyph_name_func
hb_font_funcs_set_glyph_v_advance_func
hb_font_funcs_set_glyph_v_advances_func
hb_font_funcs_set_glyph_v_kerning_func
hb_font_funcs_set_glyph_v_origin_func
hb_font_funcs_set_nominal_glyph_func
hb_font_funcs_set_nominal_glyphs_func
hb_font_funcs_set_user_data
hb_font_funcs_set_variation_glyph_func
hb_font_get_empty
hb_font_get_extents_for_direction
hb_font_get_face
hb_font_get_glyph
hb_font_get_glyph_advance_for_direction
hb_font_get_glyph_advances_for_direction
hb_font_get_glyph_contour_point
hb_font_get_glyph_contour_point_for_origin
hb_font_get_glyph_extents
hb_font_get_glyph_extents_for_origin
hb_font_get_glyph_from_name
hb_font_get_glyph_h_advance
hb_font_get_glyph_h_advances
hb_font_get_glyph_h_kerning
hb_font_get_glyph_h_origin
hb_font_get_glyph_kerning_for_direction
hb_font_get_glyph_name
hb_font_get_glyph_origin_for_direction
hb_font_get_glyph_v_advance
hb_font_get_glyph_v_advances
hb_font_get_glyph_v_kerning
hb_font_get_glyph_v_origin
hb_font_get_h_extents
hb_font_get_nominal_glyph
hb_font_get_parent
hb_font_get_ppem
hb_font_get_ptem
hb_font_get_scale
hb_font_get_user_data
hb_font_get_v_extents
hb_font_get_var_coords_normalized
hb_font_get_variation_glyph
hb_font_glyph_from_string
hb_font_glyph_to_string
hb_font_is_immutable
hb_font_make_immutable
hb_font_reference
hb_font_set_face
hb_font_set_funcs
hb_font_set_funcs_data
hb_font_set_parent
hb_font_set_ppem
hb_font_set_ptem
hb_font_set_scale
hb_font_set_user_data
hb_font_set_var_coords_design
hb_font_set_var_coords_normalized
hb_font_set_variations
hb_font_subtract_glyph_origin_for_direction
hb_glyph_info_get_glyph_flags
hb_language_from_string
hb_language_get_default
hb_language_to_string
hb_ot_font_set_funcs
hb_ot_layout_collect_features
hb_ot_layout_collect_lookups
hb_ot_layout_feature_get_characters
hb_ot_layout_feature_get_lookups
hb_ot_layout_feature_get_name_ids
hb_ot_layout_feature_with_variations_get_lookups
hb_ot_layout_get_attach_points
hb_ot_layout_get_glyph_class
hb_ot_layout_get_glyphs_in_class
hb_ot_layout_get_ligature_carets
hb_ot_layout_get_size_params
hb_ot_layout_has_glyph_classes
hb_ot_layout_has_positioning
hb_ot_layout_has_substitution
hb_ot_layout_language_find_feature
hb_ot_layout_language_get_feature_indexes
hb_ot_layout_language_get_feature_tags
hb_ot_layout_language_get_required_feature
hb_ot_layout_language_get_required_feature_index
hb_ot_layout_lookup_collect_glyphs
hb_ot_layout_lookup_substitute_closure
hb_ot_layout_lookup_would_substitute
hb_ot_layout_lookups_substitute_closure
hb_ot_layout_script_find_language
hb_ot_layout_script_get_language_tags
hb_ot_layout_script_select_language
hb_ot_layout_table_choose_script
hb_ot_layout_table_find_feature_variations
hb_ot_layout_table_find_script
hb_ot_layout_table_get_feature_tags
hb_ot_layout_table_get_lookup_count
hb_ot_layout_table_get_script_tags
hb_ot_layout_table_select_script
hb_ot_shape_glyphs_closure
hb_ot_shape_plan_collect_lookups
hb_ot_tag_from_language
hb_ot_tag_to_language
hb_ot_tag_to_script
hb_ot_tags_from_script
hb_ot_tags_from_script_and_language
hb_ot_tags_to_script_and_language
hb_ot_var_find_axis
hb_ot_var_find_axis_info
hb_ot_var_get_axes
hb_ot_var_get_axis_count
hb_ot_var_get_axis_infos
hb_ot_var_get_named_instance_count
hb_ot_var_has_data
hb_ot_var_named_instance_get_design_coords
hb_ot_var_named_instance_get_postscript_name_id
hb_ot_var_named_instance_get_subfamily_name_id
hb_ot_var_normalize_coords
hb_ot_var_normalize_variations
hb_script_from_iso15924_tag
hb_script_from_string
hb_script_get_horizontal_direction
hb_script_to_iso15924_tag
hb_segment_properties_equal
hb_segment_properties_hash
hb_set_add
hb_set_add_range
hb_set_allocation_successful
hb_set_clear
hb_set_create
hb_set_del
hb_set_del_range
hb_set_destroy
hb_set_get_empty
hb_set_get_max
hb_set_get_min
hb_set_get_population
hb_set_get_user_data
hb_set_has
hb_set_intersect
hb_set_invert
hb_set_is_empty
hb_set_is_equal
hb_set_is_subset
hb_set_next
hb_set_next_range
hb_set_previous
hb_set_previous_range
hb_set_reference
hb_set_set
hb_set_set_user_data
hb_set_subtract
hb_set_symmetric_difference
hb_set_union
hb_shape
hb_shape_full
hb_shape_list_shapers
hb_shape_plan_create
hb_shape_plan_create2
hb_shape_plan_create_cached
hb_shape_plan_create_cached2
hb_shape_plan_destroy
hb_shape_plan_execute
hb_shape_plan_get_empty
hb_shape_plan_get_shaper
hb_shape_plan_get_user_data
hb_shape_plan_reference
hb_shape_plan_set_user_data
hb_tag_from_string
hb_tag_to_string
hb_unicode_combining_class
hb_unicode_compose
hb_unicode_decompose
hb_unicode_decompose_compatibility
hb_unicode_eastasian_width
hb_unicode_funcs_create
hb_unicode_funcs_destroy
hb_unicode_funcs_get_default
hb_unicode_funcs_get_empty
hb_unicode_funcs_get_parent
hb_unicode_funcs_get_user_data
hb_unicode_funcs_is_immutable
hb_unicode_funcs_make_immutable
hb_unicode_funcs_reference
hb_unicode_funcs_set_combining_class_func
hb_unicode_funcs_set_compose_func
hb_unicode_funcs_set_decompose_compatibility_func
hb_unicode_funcs_set_decompose_func
hb_unicode_funcs_set_eastasian_width_func
hb_unicode_funcs_set_general_category_func
hb_unicode_funcs_set_mirroring_func
hb_unicode_funcs_set_script_func
hb_unicode_funcs_set_user_data
hb_unicode_general_category
hb_unicode_mirroring
hb_unicode_script
hb_variation_from_string
hb_variation_to_string
hb_version
hb_version_atleast
hb_version_string

Sections

.text
Size: 9.2MB - Virtual size: 9.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.4MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/AcroForm/PMP/AdobePDF417.pmp
.dll windows:6 windows x64

518822041974a80f9fc62e63b3c6e81a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__C_specific_handler
memchr
memcmp
__std_exception_destroy
memset
memmove
_CxxThrowException
memcpy
_purecall
__std_type_info_destroy_list
__std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_initterm_e
_seh_filter_dll
_cexit
_crt_atexit
_initterm
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_execute_onexit_table

api-ms-win-crt-math-l1-1-0

ceil
floor
sqrt

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

Exports

Exports

GetAcrobatPMPInterface

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/AcroForm/PMP/DataMatrix.pmp
.dll windows:6 windows x64

90995248fd971b04137e4e90607de878

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

_purecall
__std_type_info_destroy_list
__C_specific_handler
__std_exception_destroy
__std_exception_copy
memset
memmove
memcmp
memcpy
_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

Exports

Exports

GetAcrobatPMPInterface

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/AcroForm/PMP/QRCode.pmp
.dll windows:6 windows x64

7918d2c41118432211bdc2d795c449cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memcpy
_purecall
memset
__std_type_info_destroy_list
__C_specific_handler
memmove
memcmp
__std_exception_destroy
__std_exception_copy
_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strlen
toupper

api-ms-win-crt-runtime-l1-1-0

_initterm
_cexit
_crt_atexit
_execute_onexit_table
_initterm_e
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
exit

api-ms-win-crt-utility-l1-1-0

abs

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

Exports

Exports

GetAcrobatPMPInterface

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/AcroForm/adobepdf.xdc
.xml
other/plug_ins/Annotations/Stamps/CompareMarkers.pdf
.pdf
other/plug_ins/Annotations/Stamps/ENU/Dynamic.pdf
.pdf
other/plug_ins/Annotations/Stamps/ENU/Faces.pdf
.pdf
other/plug_ins/Annotations/Stamps/ENU/Pointers.pdf
.pdf
other/plug_ins/Annotations/Stamps/ENU/SignHere.pdf
.pdf
other/plug_ins/Annotations/Stamps/ENU/Standard.pdf
.pdf
other/plug_ins/Annotations/Stamps/ENU/StandardBusiness.pdf
.pdf
other/plug_ins/Annotations/Stamps/RUS/Dynamic.pdf
.pdf
other/plug_ins/Annotations/Stamps/RUS/Faces.pdf
.pdf
other/plug_ins/Annotations/Stamps/RUS/Pointers.pdf
.pdf
other/plug_ins/Annotations/Stamps/RUS/SignHere.pdf
.pdf
other/plug_ins/Annotations/Stamps/RUS/Standard.pdf
.pdf
other/plug_ins/Annotations/Stamps/RUS/StandardBusiness.pdf
.pdf
other/plug_ins/Annotations/Stamps/Words.pdf
.pdf
other/plug_ins/Annots.api
.dll windows:6 windows x64

a5d223a6e520d5d9076128dc326728c3

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:8b:33:65:ed:86:26:bc:a6:05:a3:ab:f1:92:67:1a:23:00:0f:95:86:c8:78:28:ed:e4:ba:ff:7f:dd:e9:cf
Signer

Actual PE Digest

dc:8b:33:65:ed:86:26:bc:a6:05:a3:ab:f1:92:67:1a:23:00:0f:95:86:c8:78:28:ed:e4:ba:ff:7f:dd:e9:cf

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcp140

?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_wait
_Cnd_broadcast
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Syserror_map@std@@YAPEBDH@Z
?_Xbad_function_call@std@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBGHH@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_signal
_Cnd_timedwait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_current_owns
_Query_perf_frequency
_Query_perf_counter
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Xtime_get_ticks
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_Xlength_error@std@@YAXPEBD@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Thrd_id
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Xout_of_range@std@@YAXPEBD@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z

gdiplus

GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdiplusShutdown
GdipCreateBitmapFromScan0
GdipSaveImageToFile
GdipDisposeImage
GdipCreateBitmapFromHBITMAP

vcruntime140

wcsstr
_CxxThrowException
__intrinsic_setjmp
__std_type_info_destroy_list
__current_exception_context
__current_exception
longjmp
__RTDynamicCast
__std_type_info_name
_purecall
__std_exception_destroy
__std_exception_copy
memmove
memcmp
memchr
__C_specific_handler
strstr
strrchr
strchr
memcpy
__std_terminate
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_cexit
terminate
abort
_invalid_parameter_noinfo
_errno
_getpid
_invalid_parameter_noinfo_noreturn
signal
_set_invalid_parameter_handler
_initialize_narrow_environment
_resetstkoflw
_beginthreadex
_crt_atexit
_endthreadex
_initterm
_initterm_e
_seh_filter_dll
raise
_exit
_register_onexit_function
_configure_narrow_argv
exit
_execute_onexit_table

api-ms-win-crt-string-l1-1-0

wcscat_s
strncpy
strpbrk
_wcslwr_s
iswalpha
strnlen
toupper
wcsncat
_wcsicmp
wcscpy
_strlwr
wcslen
isalpha
isdigit
_strnicmp
strncmp
tolower
wcscpy_s
isalnum
strlen
wcsncpy
isspace
strcpy
wcscat
isupper
_strdup
isxdigit
strcmp
_stricmp
strncat
wmemcpy_s
wcscspn
wcsspn
strcat

api-ms-win-crt-stdio-l1-1-0

setvbuf
fwrite
_fseeki64
fsetpos
fread
fgetpos
fgetc
_getcwd
ftell
fclose
__acrt_iob_func
__stdio_common_vfprintf
fopen
fputc
fputs
__stdio_common_vswprintf
__stdio_common_vsscanf
__stdio_common_vsprintf
__stdio_common_vsprintf_s
feof
ferror
fgets
_fileno
_setmode
_get_stream_buffer_pointers
__stdio_common_vsnprintf_s
fflush
tmpfile
__stdio_common_vsnwprintf_s
__stdio_common_vswscanf
ungetc
fseek
_wfopen

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
malloc
realloc
free
_recalloc

api-ms-win-crt-filesystem-l1-1-0

_wrename
rename
_chdir
_wchdir
_wsplitpath_s
_lock_file
_splitpath_s
_unlock_file
remove

api-ms-win-crt-time-l1-1-0

_gmtime64
_localtime64
_time64
_gmtime64_s
clock
asctime

api-ms-win-crt-math-l1-1-0

_fdtest
_ldtest
floor
_dtest
cosf
sqrt
atan2
_dsign
cos
acos
floorf
ceilf
sin
log
pow
fabs
atan2f
ceil
exp
sinf

api-ms-win-crt-convert-l1-1-0

atoi
_ltoa_s
strtoul
_itoa_s
strtol
atof
_fcvt
_itoa
_wtoi
atol

api-ms-win-crt-locale-l1-1-0

localeconv
setlocale

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-utility-l1-1-0

qsort
bsearch
abs
_lrotl
rand
labs
_lrotr

bib

ord5

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

LockResource
LoadResource
GetProcAddress
GetModuleHandleExW
GetModuleFileNameW
GetModuleFileNameA
FreeResource
SetLastError
GetLastError
OutputDebugStringA
VerSetConditionMask
WaitForMultipleObjects
LocalFree
WaitNamedPipeA
LoadLibraryW
FindResourceA
GetComputerNameExW
GetSystemTime
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
GetCurrencyFormatW
HeapDestroy
HeapReAlloc
HeapSize
EnterCriticalSection
LeaveCriticalSection
VerifyVersionInfoW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
RaiseException
InitializeCriticalSectionEx
DeleteCriticalSection
SleepEx
GetCurrentProcessId
CreateFileW
GetFileSizeEx
CloseHandle
GetTempPathA
GetTempFileNameA
InitOnceComplete
InitOnceBeginInitialize
ExitProcess
CreateFileMappingA
GetFileSize
GetModuleHandleA
GetCurrentThread
CreateProcessW
GetLocalTime
LocalAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TryEnterCriticalSection
SwitchToThread
SizeofResource
CreateDirectoryW
SetFilePointer
SetEndOfFile
GetFullPathNameW
GetFileInformationByHandle
FindFirstFileW
FindClose
DeleteFileW
WideCharToMultiByte
FlushConsoleInputBuffer
GetVersion
GetFileType
GetStdHandle
GlobalMemoryStatus
FindResourceExW
FindResourceW
MapViewOfFile
UnmapViewOfFile
WaitForSingleObject
CreateThread
SetThreadPriority
TerminateThread
ResumeThread
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreA
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
CreateEventW
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
IsDebuggerPresent
CreateEventA
OutputDebugStringW
GetSystemInfo
VirtualProtect
VirtualQuery
GetSystemTimeAsFileTime
SystemTimeToFileTime
FreeLibrary
GetModuleHandleW
CreateToolhelp32Snapshot
Process32First
Process32Next
GetDriveTypeW
GetFileAttributesW
lstrcpynA
lstrcpyA
lstrcatA
lstrlenA
GetLocaleInfoW
GetLocaleInfoA
GetTickCount
Sleep
MultiByteToWideChar
HeapAlloc
HeapFree
GetProcessHeap
SetFileAttributesW
GetTempPathW
FileTimeToSystemTime
FindAtomW
VerifyVersionInfoA
CreateFileA
ReadFile
WriteFile
DisconnectNamedPipe
SetNamedPipeHandleState
PeekNamedPipe
GetOverlappedResult
CancelIoEx
SetEvent
ResetEvent
WaitForMultipleObjectsEx
LoadLibraryA
GetSystemDirectoryA
LoadLibraryExA

user32

PostMessageA
RegisterClipboardFormatA
SetTimer
IsClipboardFormatAvailable
GetClipboardData
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
CloseClipboard
OpenClipboard
KillTimer
GetDesktopWindow
ScreenToClient
GetWindowRect
GetWindowTextA
GetPropA
SetPropA
ReleaseDC
EnableWindow
GetDlgItem
EndDialog
DestroyWindow
SetWindowPos
SendMessageW
DialogBoxParamA
FindWindowA
GetPropW
GetFocus
SetFocus
GetParent
MoveWindow
GetSystemMetrics
FillRect
LoadCursorA
DestroyCursor
LoadImageA
SetPropW
GetDC
FindWindowW
wsprintfA
TranslateMessage
DispatchMessageA
PeekMessageA
SendMessageA
SetActiveWindow

gdi32

CreateDIBSection
SetPixel
GetObjectA
PlayEnhMetaFile
GetEnhMetaFileHeader
GetDIBits
CreateCompatibleBitmap
GetCharWidthA
CreateFontIndirectA
GetDeviceCaps
EnumFontFamiliesA
DeleteDC
CreateCompatibleDC
SelectObject
DeleteObject
CreateSolidBrush

advapi32

RegCreateKeyExA
RegSetValueExA
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorA
ConvertSidToStringSidA
GetTokenInformation
OpenThreadToken
OpenProcessToken
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW

shell32

ShellExecuteW

ole32

CoTaskMemFree
CoTaskMemAlloc
MkParseDisplayName
CoCreateInstance
CreateBindCtx

api-ms-win-crt-conio-l1-1-0

_getch

Exports

Exports

PlugInMain

Sections

.text
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

fipstx
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 290KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fipsda
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fipsro
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

fipsrd
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/Checkers.api
.dll windows:6 windows x64

0e598d8d09449e946cc5685d7c1d752e

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dd:97:c5:4b:d6:a8:ef:00:02:5c:7d:c0:f6:ff:cc:2b:64:02:d0:d9:57:d0:6e:a6:00:56:c1:52:50:42:f7:5e
Signer

Actual PE Digest

dd:97:c5:4b:d6:a8:ef:00:02:5c:7d:c0:f6:ff:cc:2b:64:02:d0:d9:57:d0:6e:a6:00:56:c1:52:50:42:f7:5e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FreeResource
LoadResource
LockResource
SizeofResource
FindResourceA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleFileNameA
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
InitializeSListHead
lstrlenA
lstrcpyA
GetTickCount
TerminateProcess
FindAtomW

user32

SetFocus
FindWindowA
GetWindowRect
GetPropW
SetPropW
GetSystemMetrics
MoveWindow
GetFocus

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z

vcruntime140

__std_exception_copy
__std_type_info_destroy_list
__current_exception_context
__current_exception
__C_specific_handler
strchr
strrchr
__RTDynamicCast
memchr
__std_exception_destroy
strstr
memcpy
memcmp
_purecall
__std_terminate
_CxxThrowException
memset
memmove

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

_stricmp
toupper
isupper
wcscpy_s
strpbrk
strcmp
isdigit
isalnum
strncmp
strlen
tolower

api-ms-win-crt-runtime-l1-1-0

_set_invalid_parameter_handler
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_crt_atexit
_cexit
terminate
_invalid_parameter_noinfo
_initterm
_initterm_e
_execute_onexit_table
_errno

api-ms-win-crt-stdio-l1-1-0

fclose
fopen
fputs
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s

api-ms-win-crt-convert-l1-1-0

_ultoa_s
atoi

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

Exports

Exports

PlugInMain

Sections

.text
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 515KB - Virtual size: 514KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/DVA.api
.dll windows:6 windows x64

b539625b3b88420bcdebc978b2f3f2e0

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3f:b0:77:50:30:11:84:f3:38:a0:f4:e3:6c:67:c8:68:4c:48:5c:b0:82:88:c6:75:0e:f3:29:a6:36:90:84:55
Signer

Actual PE Digest

3f:b0:77:50:30:11:84:f3:38:a0:f4:e3:6c:67:c8:68:4c:48:5c:b0:82:88:c6:75:0e:f3:29:a6:36:90:84:55

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

SizeofResource
FindResourceA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
LoadResource
IsDebuggerPresent
GetProcAddress
GetModuleHandleW
CreateEventW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
CloseHandle
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
LockResource
FreeResource
DisableThreadLibraryCalls

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__current_exception_context
__current_exception
__std_exception_copy
memset
memmove
memcpy
memcmp
_CxxThrowException
__std_terminate
__std_type_info_destroy_list
__std_exception_destroy
__C_specific_handler

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strtok_s

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_set_invalid_parameter_handler
terminate

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Exports

Exports

PlugInMain

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/DigSig.api
.dll windows:6 windows x64

d6eb26b2838b50952eba6bcbf262b172

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:39:24:e8:94:35:cb:38:7f:3b:31:67:88:0f:a0:2b:90:a5:8f:42:f0:c7:53:7f:9c:c2:fc:56:35:1d:cf:1a
Signer

Actual PE Digest

04:39:24:e8:94:35:cb:38:7f:3b:31:67:88:0f:a0:2b:90:a5:8f:42:f0:c7:53:7f:9c:c2:fc:56:35:1d:cf:1a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetModuleFileNameA
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
OutputDebugStringW
lstrlenA
lstrcatA
GetProcAddress
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
MulDiv
FindAtomW
InitializeSListHead
GetTickCount

user32

GetSystemMetrics
MoveWindow
SetPropW
GetDesktopWindow
ReleaseDC
GetDC
wsprintfA
FindWindowA
GetWindowRect
SetFocus
GetFocus
GetPropW

gdi32

GetCharWidthA
CreateFontIndirectA
CreateCompatibleDC
DeleteDC
DeleteObject
CreateDIBSection
SelectObject

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_type_info_destroy_list
__current_exception_context
__current_exception
strstr
memchr
__C_specific_handler
strrchr
strchr
__RTDynamicCast
memcmp
memset
_CxxThrowException
__std_exception_destroy
memcpy
_purecall
__std_terminate
__std_exception_copy
memmove

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strncmp
isdigit
strlen
_strnicmp
wcscpy_s
strpbrk
strcmp
tolower
isalpha

api-ms-win-crt-runtime-l1-1-0

_set_invalid_parameter_handler
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_initterm
_errno
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
terminate

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s

api-ms-win-crt-utility-l1-1-0

qsort
abs

api-ms-win-crt-convert-l1-1-0

_ltoa_s
atoi
_itoa_s
_ui64toa_s

api-ms-win-crt-math-l1-1-0

ceilf
fabs
cos
sin
atan2f
acos

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-time-l1-1-0

_gmtime64
_localtime64
_time64

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

Exports

Exports

?ObsoleteProc@@YAXXZ
PlugInMain

Sections

.text
Size: 1003KB - Virtual size: 1002KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 223KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/DropboxStorage.api
.dll windows:6 windows x64

0b9adc48737cf0a40ab41f6cab49b2c4

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

94:74:2b:c0:e4:0a:b0:64:42:47:7e:1b:1a:03:0b:24:fb:97:01:56:85:69:e8:37:01:2c:26:1e:37:6b:f8:e3
Signer

Actual PE Digest

94:74:2b:c0:e4:0a:b0:64:42:47:7e:1b:1a:03:0b:24:fb:97:01:56:85:69:e8:37:01:2c:26:1e:37:6b:f8:e3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcp140

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?uncaught_exception@std@@YA_NXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memchr
memcmp
__RTDynamicCast
__C_specific_handler
__std_type_info_destroy_list
__std_exception_destroy
__std_exception_copy
memset
_CxxThrowException
memcpy
memmove
_purecall
__std_terminate

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
_crt_atexit
_initterm_e
_cexit
_set_invalid_parameter_handler
_initterm
_configure_narrow_argv

api-ms-win-crt-string-l1-1-0

isdigit
strlen
strcmp
isspace
isxdigit

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-convert-l1-1-0

strtoll
_ui64toa_s
atol
atoi
_ultoa_s
_itoa_s
_i64toa_s

api-ms-win-crt-math-l1-1-0

pow

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

kernel32

SizeofResource
FindResourceA
LockResource
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
LoadResource
GetModuleFileNameA
FreeResource
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
DisableThreadLibraryCalls

Exports

Exports

PlugInMain

Sections

.text
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/EScript.api
.dll windows:6 windows x64

6fd684b3f76501c35d527935f09b900f

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:3a:dd:f2:dc:d8:58:41:1c:b2:af:0b:bc:64:f8:2e:ce:e2:30:3c:27:6f:de:79:95:3b:43:8e:24:74:7b:09
Signer

Actual PE Digest

51:3a:dd:f2:dc:d8:58:41:1c:b2:af:0b:bc:64:f8:2e:ce:e2:30:3c:27:6f:de:79:95:3b:43:8e:24:74:7b:09

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

VerSetConditionMask
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceA
VerifyVersionInfoW
GetACP
lstrcpyA
DisableThreadLibraryCalls
GetTickCount
FindAtomW
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
TlsSetValue
TlsAlloc
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetSystemTimeAdjustment
QueryPerformanceFrequency
VirtualAlloc
VirtualFree
RtlCaptureContext
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetModuleFileNameA
TlsGetValue
CloseHandle
GetCurrentDirectoryW
GetCurrentThreadId
GetCurrentThread
Sleep
IsDebuggerPresent
ActivateActCtx
SetThreadPriority
GetThreadPriority
QueryThreadCycleTime
IsWow64Process
GetVersionExW
GetProductInfo
GetNativeSystemInfo
GetCurrentProcessId
CreateEventW
ExpandEnvironmentStringsW
MultiByteToWideChar
lstrlenA
lstrcatA
FreeLibrary
DeleteCriticalSection
InitializeCriticalSectionEx
RaiseException
QueryActCtxW
FindActCtxSectionStringW
AcquireSRWLockExclusive
CreateActCtxW
LoadLibraryW
LoadLibraryA
GetModuleHandleExW
GetModuleFileNameW
SetLastError
GetLastError
OutputDebugStringA
GetProcessHeap
HeapFree
HeapAlloc
SetFileAttributesW
GetWindowsDirectoryA
DeactivateActCtx
TlsFree
GetSystemDirectoryW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
OutputDebugStringW
GetWindowsDirectoryW
GetSystemDirectoryA
CreateProcessW
GetProcAddress
GetModuleHandleW
TerminateProcess
GetCurrentProcess
GetFileAttributesW
GetTempPathW

user32

PeekMessageA
MsgWaitForMultipleObjects
GetSystemMetrics
MessageBeep
wsprintfA
GetDC
GetWindowRect
GetFocus
TranslateMessage
GetAsyncKeyState
GetMessageA
GetKeyState
FindWindowA
GetPropW
SetPropW
SetFocus
MoveWindow
DispatchMessageA

gdi32

EnumFontFamiliesA

advapi32

SystemFunction036
RegSetValueExA
RegCreateKeyExA
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ole32

CoCreateInstance
CoTaskMemFree

oleaut32

SysAllocString
SysFreeString

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
_Cnd_broadcast
_Cnd_timedwait
_Mtx_current_owns
_Cnd_wait
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_detach
_Cnd_signal
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_destroy_in_situ
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_init_in_situ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?good@ios_base@std@@QEBA_NXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
_Xtime_get_ticks
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_lock

vcruntime140

__std_type_info_destroy_list
__std_terminate
memcpy
memmove
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__intrinsic_setjmp
memset
memchr
memcmp
_purecall
__C_specific_handler
strrchr
strchr
strstr
__CxxFrameHandler3
__current_exception
__current_exception_context

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_exit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_cexit
_initterm
_initterm_e
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_set_invalid_parameter_handler
_beginthreadex
terminate
_seh_filter_dll
_crt_atexit
abort
_errno
_invalid_parameter_noinfo

api-ms-win-crt-string-l1-1-0

tolower
toupper
isdigit
isalpha
strlen
strcmp
_strlwr
isupper
wcsncpy
wcscpy
isxdigit
strtok_s
towlower
iswcntrl
iswalpha
wcslen
isalnum
isspace
_wcslwr_s
wcscmp
strncmp
_strnicmp
strpbrk
_stricmp
wcscpy_s
strncat
strncpy
strcpy
isprint

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
_fileno
__stdio_common_vsscanf
fputc
fclose
__acrt_iob_func
getc
__stdio_common_vfprintf
fflush
fwrite
__stdio_common_vsprintf
fputs
fopen
__stdio_common_vsnprintf_s

api-ms-win-crt-convert-l1-1-0

atoi
_itoa_s
_fcvt
atol
_wtoi
_ltoa_s
atof

api-ms-win-crt-math-l1-1-0

floor
sqrt
fmod
atan2
cos
log10
ceilf
acos
sin
_isnan
asin
atan
_copysign
ceil
exp
log
tan
pow

api-ms-win-crt-utility-l1-1-0

rand_s
_swab

api-ms-win-crt-filesystem-l1-1-0

_wfullpath
_fstat64i32
_splitpath_s

api-ms-win-crt-multibyte-l1-1-0

_ismbbtrail
_mbschr
_ismbblead
_mbsstr
_mbsrchr
_mbsicmp
_mbscspn

api-ms-win-crt-heap-l1-1-0

_recalloc
free
calloc
_callnewh
malloc
realloc

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_mktime64
_tzset
strftime
_localtime64
_time64
_gmtime64

api-ms-win-crt-locale-l1-1-0

localeconv

shell32

SHGetFolderPathW
SHGetKnownFolderPath

psapi

GetProcessMemoryInfo

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime

Exports

Exports

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@AEBAXPEBDHHHPEAVStringBuilder@2@@Z
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@AEBAXPEBDHHPEAVStringBuilder@2@@Z
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPEADHPEA_NPEAH3@Z
?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAAEBV12@XZ
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@AEBA_NNPEAVStringBuilder@2@@Z
?HashBytes@mozilla@@YAIPEBX_K@Z
?ToExponential@DoubleToStringConverter@double_conversion@@QEBA_NNHPEAVStringBuilder@2@@Z
?ToFixed@DoubleToStringConverter@double_conversion@@QEBA_NNHPEAVStringBuilder@2@@Z
?ToPrecision@DoubleToStringConverter@double_conversion@@QEBA_NNHPEA_NPEAVStringBuilder@2@@Z
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@AEBA_NNPEAVStringBuilder@2@W4DtoaMode@12@@Z
?kBase10MaximalLength@DoubleToStringConverter@double_conversion@@2HB
GetHandleVerifier
PlugInMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 714KB - Virtual size: 714KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 445KB - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/IA32.api
.dll windows:6 windows x64

20f3bfc2945c8a5026f86a4a8235cd50

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:76:ed:55:63:a6:2a:5b:4f:68:55:9c:49:26:e4:c7:ba:2c:61:32:eb:03:1b:7f:fe:d7:9b:f8:93:9a:eb:22
Signer

Actual PE Digest

49:76:ed:55:63:a6:2a:5b:4f:68:55:9c:49:26:e4:c7:ba:2c:61:32:eb:03:1b:7f:fe:d7:9b:f8:93:9a:eb:22

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceA
lstrcpynA
lstrcpyA
lstrcatA
lstrlenA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleA
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
CloseHandle
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
GetProcAddress
GetModuleHandleW
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
InitializeSListHead
GetModuleFileNameA
GetSystemDirectoryA
DeleteCriticalSection
LeaveCriticalSection
GetTickCount
EnterCriticalSection
InitializeCriticalSection
GetLastError
OutputDebugStringA
GetCurrentDirectoryA
QueryPerformanceCounter
SetCurrentDirectoryA

user32

wsprintfA

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

msvcp140

?id@?$numpunct@D@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??0facet@locale@std@@IEAA@_K@Z
??Bid@locale@std@@QEAA_KXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??1facet@locale@std@@MEAA@XZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xbad_alloc@std@@YAXXZ
_Query_perf_counter
_Query_perf_frequency
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ

vcruntime140

__std_type_info_destroy_list
__current_exception_context
__current_exception
strstr
strrchr
strchr
_purecall
__C_specific_handler
__std_exception_destroy
__std_exception_copy
memset
memmove
memcpy
memcmp
__std_terminate
memchr
_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_set_invalid_parameter_handler
_invalid_parameter_noinfo_noreturn
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initterm
_cexit
terminate

api-ms-win-crt-string-l1-1-0

strncmp
tolower
isdigit
strtok_s
_stricmp
toupper
_strlwr
_strnicmp
isspace
isalnum
strncat
isxdigit
isupper
strlen
strcmp
wcscpy_s
isalpha
wcsncpy

api-ms-win-crt-heap-l1-1-0

free
calloc
malloc
_callnewh

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vsscanf

api-ms-win-crt-time-l1-1-0

_mktime64
_time64
_localtime64
_gmtime64
_difftime64

api-ms-win-crt-math-l1-1-0

_ldtest
_fdtest
_dtest
_dsign

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

api-ms-win-crt-convert-l1-1-0

atoi

Exports

Exports

PlugInMain

Sections

.text
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/MSRMS.api
.dll windows:6 windows x64

928b3ddc4dcca5422f422378e4a3eb31

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b7:3b:fd:3e:da:e0:1a:59:21:39:57:0e:14:2d:21:d3:75:8f:b9:9c:34:ad:84:2f:dd:45:86:a9:59:96:7a:4d
Signer

Actual PE Digest

b7:3b:fd:3e:da:e0:1a:59:21:39:57:0e:14:2d:21:d3:75:8f:b9:9c:34:ad:84:2f:dd:45:86:a9:59:96:7a:4d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

shlwapi

PathAppendW

mip_upe_sdk

?LoadAsync@PolicyProfile@mipns@@SA?AV?$shared_ptr@VAsyncControl@mipns@@@std@@AEBVSettings@12@AEBV?$shared_ptr@X@4@@Z
?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@@Z

mip_protection_sdk

?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_istream@DU?$char_traits@D@std@@@std@@@3@@Z
?LoadAsync@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VAsyncControl@mipns@@@std@@AEBVSettings@12@AEBV?$shared_ptr@X@4@@Z
?GetPublishingLicenseInfo@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VPublishingLicenseInfo@mipns@@@std@@AEBV?$vector@EV?$allocator@E@std@@@4@@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_ostream@DU?$char_traits@D@std@@@std@@@3@@Z

kernel32

GetFileAttributesA
HeapAlloc
HeapFree
GetProcessHeap
GetACP
CompareStringA
GetLocaleInfoA
GetSystemDefaultLCID
lstrcpynA
lstrcpyA
lstrcatA
lstrlenA
GetLocaleInfoW
GetModuleFileNameA
VerSetConditionMask
DebugBreak
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceA
GetProfileIntA
GetProfileStringA
VerifyVersionInfoW
SetLastError
GetCurrentProcessId
ReadFile
DisableThreadLibraryCalls
WaitForMultipleObjects
DisconnectNamedPipe
GetLastError
CloseHandle
GetOverlappedResult
CreateEventA
ConnectNamedPipe
OutputDebugStringA
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExA
GetProcAddress
GetModuleHandleW
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
FindAtomW
GetTickCount
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
CreateDirectoryA
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
WriteFile
InitializeSListHead

user32

MsgWaitForMultipleObjects
IsDialogMessageA
EnumChildWindows
GetParent
GetDesktopWindow
SetWindowLongPtrA
GetWindowLongPtrA
ScreenToClient
SetCursor
DispatchMessageA
SetWindowTextA
RemovePropA
GetPropA
SetPropA
ReleaseDC
GetDC
EnableWindow
ShowWindow
SendMessageA
LoadImageA
DestroyIcon
DestroyCursor
LoadCursorA
GetWindowTextA
PeekMessageA
wsprintfA
SetWindowPos
GetKeyboardLayout
CharToOemA
OemToCharA
MessageBeep
GetSysColor
FillRect
LoadBitmapA
FindWindowA
GetWindowRect
GetPropW
SetPropW
GetFocus
SetFocus
MoveWindow
GetSystemMetrics
TranslateMessage

gdi32

SelectObject
LineTo
DeleteObject
CreateSolidBrush
GetDeviceCaps
MoveToEx
CreatePen

advapi32

GetSecurityDescriptorDacl
GetAce
FreeSid
EqualSid
AllocateAndInitializeSid
GetFileSecurityA

shell32

SHGetKnownFolderPath
SHGetFolderPathW

ole32

CoTaskMemFree

msvcp140

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
_Query_perf_frequency
_Xtime_get_ticks
_Cnd_timedwait
?_Throw_Cpp_error@std@@YAXH@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
_Thrd_id
?_Xinvalid_argument@std@@YAXPEBD@Z
?swap@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Mtx_current_owns
_Query_perf_counter
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_Xbad_alloc@std@@YAXXZ
?_Xbad_function_call@std@@YAXXZ
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEAD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

vcruntime140

__std_type_info_destroy_list
__std_terminate
_purecall
memcpy
memmove
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
memcmp
memchr
strrchr
strstr
strchr
__current_exception_context
__RTDynamicCast
__std_type_info_compare
__C_specific_handler
__current_exception

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

isxdigit
isspace
strncpy
strtok
isdigit
strpbrk
wcslen
strncmp
strncat
isalnum
_stricmp
wcsncpy
tolower
strlen
toupper
strcmp
isupper
_strlwr
isalpha
strcpy

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_invalid_parameter_noinfo
_configure_narrow_argv
_register_onexit_function
_seh_filter_dll
_cexit
terminate
_crt_atexit
_set_invalid_parameter_handler
_crt_at_quick_exit
_invalid_parameter_noinfo_noreturn
_initterm
_initterm_e
_errno

api-ms-win-crt-stdio-l1-1-0

fgetpos
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fflush
fputc
fclose
_getcwd
fputs
fopen
fgetc
__stdio_common_vsprintf
__stdio_common_vsnprintf_s
__stdio_common_vsscanf
__stdio_common_vsprintf_s
_get_stream_buffer_pointers

api-ms-win-crt-convert-l1-1-0

_ui64toa_s
_i64toa_s
_ultoa_s
_ltoa_s
_wtoi
_itoa
atof
atoi
strtol
_fcvt
strtoull
strtoll
strtod
atol
_itoa_s

api-ms-win-crt-math-l1-1-0

fabs
cos
ceilf
sin
acos
_dsign
_dtest
pow
sqrt

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_mktime64
strftime
_ctime64
_time64
_localtime64
_gmtime64

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file
_access
_findclose
_stat64i32
_findnext64i32
_findfirst64i32
_chdir

api-ms-win-crt-heap-l1-1-0

calloc
_callnewh
free
malloc

api-ms-win-crt-locale-l1-1-0

localeconv

Exports

Exports

?iMSRMSSetTestPerms@@YAPEAXPEAU_t_PDDoc@@PEAU_t_ASCabinet@@@Z
PlugInMain

Sections

.text
Size: 693KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/MakeAccessible.api
.dll windows:6 windows x64

d95c5c5e60718be96f9e15406013440c

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:c1:f1:83:c0:81:7c:3a:59:16:e9:a3:10:ec:d1:2e:2f:f0:01:b9:a2:66:ea:12:09:52:b9:5a:47:2e:eb:a7
Signer

Actual PE Digest

98:c1:f1:83:c0:81:7c:3a:59:16:e9:a3:10:ec:d1:2e:2f:f0:01:b9:a2:66:ea:12:09:52:b9:5a:47:2e:eb:a7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

SetInformationJobObject
AssignProcessToJobObject
CreateJobObjectW
IsProcessInJob
ProcessIdToSessionId
lstrlenW
GetTempPathW
CreateDirectoryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeLibrary
CreateProcessW
ResumeThread
TerminateProcess
GetCurrentProcessId
WaitForMultipleObjects
CreateEventA
ResetEvent
SetEvent
VerifyVersionInfoA
GetProcAddress
LocalFree
FormatMessageA
DisableThreadLibraryCalls
MapViewOfFileEx
CreateFileMappingA
UnmapViewOfFile
DuplicateHandle
CloseHandle
GetCurrentProcess
GetLastError
SwitchToThread
Sleep
GetTempPathA
GetSystemInfo
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
QueryInformationJobObject
lstrlenA
GetModuleHandleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
VerifyVersionInfoW
FindResourceA
SizeofResource
LockResource
LoadResource
FreeResource
VerSetConditionMask
GetModuleFileNameA
OpenFileMappingA
RtlVirtualUnwind

user32

GetUserObjectInformationW

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetTokenInformation
GetSecurityDescriptorSacl
GetLengthSid
DuplicateTokenEx
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CreateProcessAsUserW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
ConvertStringSidToSidW

msvcp140

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setf@ios_base@std@@QEAAHHH@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??Bid@locale@std@@QEAA_KXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?classic@locale@std@@SAAEBV12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?is@?$ctype@D@std@@QEBA_NFD@Z
?widen@?$ctype@D@std@@QEBADD@Z
?narrow@?$ctype@D@std@@QEBADDD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?exceptions@ios_base@std@@QEAAXH@Z
?flags@ios_base@std@@QEAAHH@Z
?precision@ios_base@std@@QEAA_J_J@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?tolower@?$ctype@D@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ

vcruntime140

strchr
__std_type_info_compare
memcpy
__C_specific_handler
__current_exception
__current_exception_context
_purecall
__std_terminate
memchr
memcmp
memmove
memset
strstr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
__RTDynamicCast
wcschr
strrchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

system
_seh_filter_dll
_errno
terminate
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_cexit
_configure_narrow_argv
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_register_onexit_function
_initialize_onexit_table
_set_invalid_parameter_handler

api-ms-win-crt-string-l1-1-0

strcmp
_stricmp
strlen
strtok
strcspn
wcslen
strspn
strcpy
_wcsdup
isspace
strnlen
_strnicmp
strncpy
wcscpy_s
isalnum
strncmp
toupper
isxdigit
isupper
isdigit
tolower

api-ms-win-crt-stdio-l1-1-0

_wfopen_s
fwrite
__stdio_common_vfprintf_s
fgets
fclose
fopen_s
fputs
__stdio_common_vsprintf
__stdio_common_vfscanf
__stdio_common_vsscanf
fopen
__acrt_iob_func
rewind
__stdio_common_vfprintf
fread
__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

atoi
atof
strtol

api-ms-win-crt-filesystem-l1-1-0

_mkdir
_stat64i32
remove

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

api-ms-win-crt-time-l1-1-0

clock
_gmtime64
_localtime64
_time64

api-ms-win-crt-heap-l1-1-0

free
calloc
_callnewh
malloc

api-ms-win-crt-math-l1-1-0

ceil
tan
sqrt
log2f
atan2f
cos
fabs
atanf
asin
expf
atan
atan2
sin
pow
sqrtf
acos
exp
floorf
log
ceilf

api-ms-win-crt-utility-l1-1-0

abs
qsort
labs

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

Exports

Exports

?ASstrcasecmp@@YAHPEBD0@Z
?ASstrequal@@YAGPEBD0@Z
?ASstrncasecmp@@YAHPEBD0_K@Z
?ASstrncmp@@YAHPEBD0_K@Z
?PDAlternateGetEmbeddedFile@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDAlternateGetMediaQueries@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDAlternateGetName@@YAPEAU_t_ASTextRec@@UOPAQUE_64_BITS@@@Z
?PDAlternateGetParams@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDAlternateGetSubtype@@YAGUOPAQUE_64_BITS@@@Z
?PDAlternateIsValid@@YAGUOPAQUE_64_BITS@@@Z
?PDAlternateParamsFromCosObj@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDAlternateParamsGetCosObj@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDAlternateParamsGetResources@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDAlternateParamsIsValid@@YAGUOPAQUE_64_BITS@@@Z
?PDAlternateParamsNew@@YA?AUOPAQUE_64_BITS@@U1@G@Z
?PDAlternateParamsSetResources@@YAXUOPAQUE_64_BITS@@0@Z
?PDAlternateSetEmbeddedFile@@YAXUOPAQUE_64_BITS@@0@Z
?PDAlternateSetName@@YAXUOPAQUE_64_BITS@@PEAU_t_ASTextRec@@@Z
?PDAlternateSetParams@@YAXUOPAQUE_64_BITS@@0@Z
?PDAlternateSetSubtype@@YAXUOPAQUE_64_BITS@@G@Z
?PDAlternatesAddAlternate@@YAXUOPAQUE_64_BITS@@0H@Z
?PDAlternatesAddNewAlternate@@YA?AUOPAQUE_64_BITS@@U1@G@Z
?PDAlternatesFromCosObj@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDAlternatesGetAlternates@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDAlternatesGetCosObj@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDAlternatesGetCount@@YAHUOPAQUE_64_BITS@@@Z
?PDAlternatesGetOneAlternate@@YA?AUOPAQUE_64_BITS@@U1@H@Z
?PDAlternatesIsValid@@YAGUOPAQUE_64_BITS@@@Z
?PDDocGetAlternates@@YA?AUOPAQUE_64_BITS@@PEAU_t_PDDoc@@@Z
?PDDocGetAlternatesCosObj@@YA?AUOPAQUE_64_BITS@@PEAU_t_PDDoc@@@Z
?PDMediaQueriesAddQuery@@YAXUOPAQUE_64_BITS@@0H@Z
?PDMediaQueriesFromCosObj@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDMediaQueriesGetCosObj@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDMediaQueriesGetCount@@YAHUOPAQUE_64_BITS@@@Z
?PDMediaQueriesGetOneQuery@@YA?AUOPAQUE_64_BITS@@U1@H@Z
?PDMediaQueriesGetQueries@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDMediaQueriesIsValid@@YAGUOPAQUE_64_BITS@@@Z
?PDMediaQueryFromCosObj@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDMediaQueryGetCosObj@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDMediaQueryIsValid@@YAGUOPAQUE_64_BITS@@@Z
?PDMediaQueryNew@@YA?AUOPAQUE_64_BITS@@U1@@Z
?PDMediaQuerySetMediaType@@YAXUOPAQUE_64_BITS@@G@Z
PlugInMain

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 536KB - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 143KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/Multimedia.api
.dll windows:6 windows x64

6136a1943ba5746ceee2ec7f85c32c85

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

24:dc:97:ab:24:b8:85:0c:d4:44:97:77:38:b1:74:05:92:d2:67:15:f4:75:c3:a7:41:e6:2e:06:5b:b1:f6:46
Signer

Actual PE Digest

24:dc:97:ab:24:b8:85:0c:d4:44:97:77:38:b1:74:05:92:d2:67:15:f4:75:c3:a7:41:e6:2e:06:5b:b1:f6:46

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetModuleHandleExW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
CreateActCtxW
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
FreeLibrary
GetProcAddress
LoadLibraryExW
OutputDebugStringW
DisableThreadLibraryCalls
GetDriveTypeW
GetComputerNameW
GetCurrentProcessId
GetModuleFileNameW
OutputDebugStringA
SetLastError
GetLastError
GetModuleHandleW
lstrcpynA
lstrcpyA
lstrcatA
lstrlenA
FreeResource
GetModuleFileNameA
LoadResource
LockResource
SizeofResource
FindResourceA
GetTickCount
InitializeCriticalSectionEx
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
FindAtomW
DeleteCriticalSection

user32

BeginPaint
EndPaint
GetPropW
EnableWindow
IsWindowEnabled
GetParent
FindWindowA
GetFocus
MoveWindow
ReleaseDC
SetFocus
GetDesktopWindow
wsprintfA
SetWindowPos
SetPropW
DefWindowProcW
GetSystemMetrics
GetClientRect
GetWindowRect
ClientToScreen
GetSysColor
GetMonitorInfoW
EnumDisplayMonitors
RemovePropW
AdjustWindowRectEx
LoadImageW
CreatePopupMenu
DestroyMenu
DestroyWindow
AppendMenuW
TrackPopupMenuEx
RegisterClassW
UnregisterClassW
CreateWindowExW
GetDC

gdi32

PatBlt
GetStockObject
GetClipBox
CreateSolidBrush
GetObjectW
GetDIBColorTable
CreateDIBSection
SelectObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateDCW
CreateCompatibleDC
BitBlt
CreateFontIndirectA
GetCharWidthA

advapi32

RegOpenKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??Bid@locale@std@@QEAA_KXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z

vcruntime140

__current_exception
__std_type_info_compare
__RTtypeid
__current_exception_context
__std_type_info_destroy_list
_purecall
__std_terminate
memcpy
memset
_CxxThrowException
strrchr
__C_specific_handler
memmove
__std_exception_copy
__std_exception_destroy
memcmp
strstr
memchr
strchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strncat
isalnum
_strlwr
strpbrk
_stricmp
wcsncpy
wcslen
strlen
isdigit
strcmp
isalpha
isxdigit
towlower
wcscpy_s
strncmp
_strdup
tolower
toupper
isprint
isspace
islower
isupper
iswalpha
iswcntrl
strncpy_s

api-ms-win-crt-heap-l1-1-0

free
calloc
malloc
realloc
_callnewh

api-ms-win-crt-time-l1-1-0

clock

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table
_errno
_initterm
_invalid_parameter_noinfo
_crt_atexit
_initterm_e
_set_invalid_parameter_handler
_invalid_parameter_noinfo_noreturn
terminate
_initialize_onexit_table

api-ms-win-crt-convert-l1-1-0

_strtoui64
atof
atol
strtol
_itoa_s
atoi
mbstowcs_s

api-ms-win-crt-stdio-l1-1-0

fputc
fflush
__stdio_common_vsnprintf_s
__stdio_common_vsprintf
_wsopen_dispatch
__stdio_common_vfprintf
__acrt_iob_func
_close
_read
__stdio_common_vsprintf_s
__stdio_common_vsscanf
_sopen_dispatch

api-ms-win-crt-utility-l1-1-0

labs

api-ms-win-crt-math-l1-1-0

acos
modf
ldexp
cos
sin
ceilf
log2

api-ms-win-crt-filesystem-l1-1-0

_fstat64i32

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

Exports

Exports

PlugInMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 358KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/Multimedia/MPP/Flash.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/plug_ins/Multimedia/MPP/Flash.mpp
.dll windows:6 windows x64

ddf6834e20f5ab35a03e4c0036f9e2b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

shlwapi

PathFindExtensionW
PathCreateFromUrlW

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

wininet

InternetCrackUrlA
InternetCrackUrlW

kernel32

GetCurrentThreadId
GetModuleFileNameA
GlobalAlloc
GlobalUnlock
GlobalLock
MulDiv
lstrcmpA
MultiByteToWideChar
CreateFileW
ReadFile
CloseHandle
GetModuleHandleA
GetProcAddress
GetUserDefaultLangID
DisableThreadLibraryCalls
FreeLibrary
LoadLibraryExA
LoadResource
SizeofResource
lstrcmpiA
FindResourceA
EnterCriticalSection
CreateFileA
SetFilePointer
WriteFile
GetTempPathA
GetTempFileNameA
RtlLookupFunctionEntry
RtlCaptureContext
VirtualFree
VirtualAlloc
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetProcessHeap
HeapFree
HeapAlloc
EncodePointer
OutputDebugStringW
IsDebuggerPresent
WideCharToMultiByte
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
GetModuleHandleExW
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetLastError
GetSystemTimeAsFileTime
GetLastError
RaiseException
DecodePointer
LeaveCriticalSection
OutputDebugStringA
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
IsDBCSLeadByte

user32

SetWindowLongA
GetWindowLongA
OffsetRect
FillRect
GetSysColor
ScreenToClient
ClientToScreen
GetClientRect
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DestroyAcceleratorTable
SetWindowLongPtrA
ReleaseCapture
SetCapture
GetFocus
SetFocus
CharNextA
GetWindowLongPtrA
GetDesktopWindow
UnregisterClassA
RegisterWindowMessageA
SendMessageA
DefWindowProcA
CallWindowProcA
RegisterClassExA
GetClassInfoExA
CreateWindowExA
IsWindow
IsChild
DestroyWindow
MoveWindow
SetWindowPos
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
BringWindowToTop
ShowWindow
RegisterClassA
PostMessageA
wsprintfA
LoadStringA
LoadCursorA
GetWindow
GetDlgItem
GetParent
GetClassNameA
CreateAcceleratorTableA

gdi32

GetObjectA
SelectObject
GetStockObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
CreateDIBSection
BitBlt

advapi32

RegCreateKeyExA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
RegSetValueExA
RegQueryInfoKeyW
RegEnumKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA

ole32

CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
OleUninitialize
CLSIDFromString
CoCreateInstance
CoGetClassObject
OleLockRunning
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CLSIDFromProgID
CoTaskMemRealloc
OleInitialize

oleaut32

VarUI4FromStr
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
SysFreeString
VariantInit
SysStringLen
SysAllocStringLen
SysAllocString
VariantClear

urlmon

CoInternetGetSession

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__C_specific_handler
memset
__std_terminate
_purecall
memcmp
memcpy
_CxxThrowException
strrchr
__std_exception_copy
__std_exception_destroy
__current_exception
__current_exception_context
__std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

calloc
malloc
_recalloc
free
_callnewh

api-ms-win-crt-runtime-l1-1-0

_errno
_invalid_parameter_noinfo
terminate
_seh_filter_dll
_configure_narrow_argv
_initterm_e
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_resetstkoflw
_initterm
_initialize_narrow_environment

api-ms-win-crt-string-l1-1-0

wcscpy
_wcsicmp
_stricmp
wcslen
strlen

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vsprintf_s

api-ms-win-crt-multibyte-l1-1-0

_mbsnbicmp
_mbsstr
_mbsnbcpy_s

api-ms-win-crt-utility-l1-1-0

rand
srand

api-ms-win-crt-time-l1-1-0

_time64

Exports

Exports

GetAcrobatMPPInterface

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/Multimedia/MPP/MCIMPP.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/plug_ins/Multimedia/MPP/MCIMPP.mpp
.dll windows:6 windows x64

8dcd237e261791870e60366570d46049

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
GetShortPathNameA
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
VerSetConditionMask
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
FreeLibrary
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
VerifyVersionInfoW
ActivateActCtx
CreateActCtxW
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleExW
GetModuleFileNameW
SetLastError
GetLastError
DeleteCriticalSection
OutputDebugStringA

user32

SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
DefWindowProcA
RegisterClassExA
GetSysColor
GetClassInfoExA
EnableWindow
GetClientRect
GetWindowRect
InflateRect
LoadCursorA
LoadIconA
DestroyIcon
MonitorFromRect
OffsetRect
GetMonitorInfoA
LoadStringA
SendMessageA
CreateWindowExA
GetDC
ReleaseDC
GetDesktopWindow
IsChild
SetFocus
GetFocus
CallWindowProcA
DestroyWindow
ShowWindow
SetWindowPos
IsWindowVisible
SetTimer
KillTimer
GetUpdateRect
GetParent
InvalidateRect
GetWindowLongPtrA
SetWindowLongPtrA
GetWindow

gdi32

CreateDIBSection
GetObjectA
SelectObject
PatBlt
CreateSolidBrush
GetStockObject
DeleteObject
DeleteDC
GetClipBox
CreateCompatibleBitmap
CreateCompatibleDC

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

msvcp140

??Bid@locale@std@@QEAA_KXZ
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memmove
__std_terminate
strrchr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__C_specific_handler
_purecall
__std_type_info_destroy_list
memset
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initterm_e
_seh_filter_dll
_initterm
_invalid_parameter_noinfo_noreturn
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv

api-ms-win-crt-string-l1-1-0

_strupr
wcscpy_s
wcslen
strlen
strcpy
strcat
strcmp

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-utility-l1-1-0

labs

api-ms-win-crt-multibyte-l1-1-0

_mbsnbicmp
_mbscmp

Exports

Exports

GetAcrobatMPPInterface

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/Multimedia/MPP/WindowsMedia.RUS
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
other/plug_ins/Multimedia/MPP/WindowsMedia.mpp
.dll windows:6 windows x64

0368436a0f3c3e5fb07a21198336f639

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

shlwapi

PathCreateFromUrlA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

WaitForSingleObject
CreateEventA
MultiByteToWideChar
WideCharToMultiByte
Sleep
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
GlobalAlloc
GlobalUnlock
GlobalLock
MulDiv
lstrcmpA
SetErrorMode
GetModuleHandleA
GetProcAddress
GetUserDefaultLangID
DisableThreadLibraryCalls
FreeLibrary
LoadLibraryExA
LoadResource
SizeofResource
lstrcmpiA
FindResourceA
IsDBCSLeadByte
VerSetConditionMask
CloseHandle
GetSystemInfo
VirtualProtect
VirtualQuery
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
VirtualFree
VirtualAlloc
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetProcessHeap
HeapFree
HeapAlloc
EncodePointer
OutputDebugStringW
IsDebuggerPresent
GetCurrentThreadId
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
GetModuleHandleExW
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetLastError
SetEvent
GetLastError
RaiseException
GetSystemTimeAsFileTime
DecodePointer
OutputDebugStringA
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
VerifyVersionInfoW

user32

FillRect
GetSysColor
ScreenToClient
ClientToScreen
SetCursor
GetClientRect
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
SetWindowLongA
CreateAcceleratorTableA
ReleaseCapture
SetCapture
GetFocus
GetWindowLongPtrA
UnregisterClassA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
RegisterWindowMessageA
SendMessageA
PostMessageA
DefWindowProcA
CallWindowProcA
RegisterClassExA
GetClassInfoExA
CreateWindowExA
IsWindow
IsChild
GetWindowLongA
KillTimer
SetTimer
BringWindowToTop
ShowWindow
wsprintfA
LoadStringA
LoadCursorA
GetWindow
GetClassNameA
GetParent
GetDesktopWindow
DestroyAcceleratorTable
DestroyWindow
MoveWindow
SetWindowPos
GetDlgItem
CharNextA
SetFocus
SetWindowLongPtrA

gdi32

GetObjectA
SelectObject
GetDeviceCaps
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateDIBSection
GetStockObject
DeleteObject

advapi32

RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegCloseKey

ole32

OleInitialize
CoTaskMemFree
OleLockRunning
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoGetClassObject
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoTaskMemRealloc
OleUninitialize
CoTaskMemAlloc

oleaut32

VarUI4FromStr
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
SysFreeString
VariantInit
SysStringLen
SysAllocStringLen
SysAllocString
VariantClear

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memcpy
__current_exception
__current_exception_context
__std_type_info_destroy_list
memcmp
_purecall
__std_terminate
memset
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

_recalloc
_callnewh
calloc
free
malloc

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_configure_narrow_argv
_resetstkoflw
_initterm
_initterm_e
_seh_filter_dll
_errno
_invalid_parameter_noinfo_noreturn
_cexit
terminate
_initialize_narrow_environment
_invalid_parameter_noinfo

api-ms-win-crt-string-l1-1-0

strlen
wcslen
wcscpy_s
wcscmp
strcmp
wcsncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-multibyte-l1-1-0

_mbsstr
_mbsnbcpy_s

Exports

Exports

GetAcrobatMPPInterface
WMCreateStreamForURL

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/PDDom.api
.dll windows:6 windows x64

b0b529302747ea62373f93068ffbba21

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

21:7f:c6:74:c7:8d:02:f1:b1:d7:e5:7d:b8:89:96:4c:05:ca:ff:77:13:a3:ee:03:90:c0:6c:b4:87:b2:f2:a0
Signer

Actual PE Digest

21:7f:c6:74:c7:8d:02:f1:b1:d7:e5:7d:b8:89:96:4c:05:ca:ff:77:13:a3:ee:03:90:c0:6c:b4:87:b2:f2:a0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
lstrlenA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
FindResourceA
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
CloseHandle
InitializeSListHead
SizeofResource
LockResource
LoadResource
FreeResource
GetModuleFileNameA
IsDebuggerPresent

user32

wsprintfA

msvcp140

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

vcruntime140

__C_specific_handler
memcmp
__std_exception_destroy
__std_exception_copy
memcpy
_CxxThrowException
__std_terminate
memset
_purecall
memmove
__std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_cexit
_initterm
_initterm_e
_seh_filter_dll
_crt_atexit
_set_invalid_parameter_handler
_initialize_narrow_environment
_errno
_invalid_parameter_noinfo
_configure_narrow_argv

api-ms-win-crt-string-l1-1-0

isalpha
strlen
isdigit
strcmp
wcslen
strncmp

api-ms-win-crt-math-l1-1-0

cos
sqrt
fabs
atan2
atanf
asin
fmod
ceilf
sin
acos

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

api-ms-win-crt-time-l1-1-0

_time64
_localtime64
_gmtime64

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

Exports

Exports

?FixedQuadOverlap@@YAGPEBU_t_ASFixedQuad@@0@Z
?ObsoleteProc@@YAXXZ
PlugInMain

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/PPKLite.api
.dll windows:6 windows x64

09e3e040939f49cf94bd6a0fa408d554

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

24:87:89:b8:63:d9:bb:1f:ba:dd:f4:15:10:86:e2:7e:0b:8f:33:b1:61:a1:ad:92:be:64:bd:54:b9:b2:8c:f5
Signer

Actual PE Digest

24:87:89:b8:63:d9:bb:1f:ba:dd:f4:15:10:86:e2:7e:0b:8f:33:b1:61:a1:ad:92:be:64:bd:54:b9:b2:8c:f5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CreateMutexA
EnumSystemLocalesA
ReleaseMutex
GetLogicalDriveStringsA
SetErrorMode
GetVolumeInformationA
GetDriveTypeA
GetUserDefaultLCID
GetProcessHeap
HeapFree
HeapAlloc
MultiByteToWideChar
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
lstrlenA
lstrcatA
LoadLibraryW
ExitThread
GetProcAddress
GetModuleHandleExW
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryA
DeleteCriticalSection
InitializeCriticalSectionEx
SetLastError
VerSetConditionMask
DebugBreak
FreeResource
LoadResource
LockResource
LoadLibraryExA
GetModuleHandleW
VirtualQuery
VirtualProtect
GetSystemInfo
GetModuleHandleA
lstrcpyA
CreateThread
RaiseException
DecodePointer
OutputDebugStringA
FindAtomW
DisableThreadLibraryCalls
FormatMessageA
LocalFree
GetTickCount
GetLastError
FileTimeToSystemTime
GetModuleFileNameA
CloseHandle
GetFileTime
VerifyVersionInfoW
FindResourceA
LoadLibraryA
SizeofResource
VirtualFree
VirtualAlloc
WaitForSingleObject
CreateFileA
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
EncodePointer
OutputDebugStringW
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
GetEnvironmentVariableA
IsDBCSLeadByte
WideCharToMultiByte
lstrcmpiA
lstrcmpA
MulDiv
GlobalFree
GlobalHandle
GlobalLock
GlobalUnlock
GlobalAlloc
FindResourceW
LeaveCriticalSection
EnterCriticalSection
Sleep
InitializeCriticalSectionAndSpinCount
FlushConsoleInputBuffer
GetVersion
RtlVirtualUnwind
GetCurrentThreadId
WriteFile
GetFileType
GetStdHandle
GlobalMemoryStatus
GetCurrentProcessId
QueryPerformanceCounter
VerifyVersionInfoA
GetSystemTimeAsFileTime
SystemTimeToFileTime

user32

GetWindowLongPtrA
SetWindowLongPtrA
GetPropW
GetDesktopWindow
GetWindowRect
FindWindowA
GetFocus
GetSystemMetrics
GetParent
IsDialogMessageA
SetFocus
MoveWindow
ScreenToClient
UnregisterClassA
GetWindowTextA
SetWindowTextA
GetAsyncKeyState
GetMonitorInfoA
MonitorFromWindow
MapDialogRect
GetWindow
GetClassNameA
SetWindowLongA
GetWindowLongA
MapWindowPoints
ClientToScreen
SetWindowContextHelpId
GetClientRect
GetWindowTextLengthA
RedrawWindow
InvalidateRgn
SetForegroundWindow
InvalidateRect
EndPaint
BeginPaint
DestroyAcceleratorTable
SetPropW
CreateAcceleratorTableA
ReleaseCapture
GetSysColor
SetCapture
CharNextA
SendDlgItemMessageA
GetDlgItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
IsChild
IsWindow
CreateWindowExA
GetClassInfoExA
RegisterClassExA
CallWindowProcA
DefWindowProcA
PostMessageA
GetMessageA
FillRect
LoadBitmapA
LoadCursorA
wsprintfA
SetWindowPos
RegisterWindowMessageA
GetAncestor
TranslateMessage
DispatchMessageA
CallNextHookEx
PeekMessageA
UnhookWindowsHookEx
SetWindowsHookExA
GetForegroundWindow
IsIconic
MessageBoxW
SendMessageA
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxA
ShowWindow
EnableWindow
SetCursor
ReleaseDC
GetDC

gdi32

CreateCompatibleBitmap
BitBlt
CreateBitmap
CreateCompatibleDC
CreateFontIndirectA
GetDeviceCaps
SelectObject
DeleteObject
CreateSolidBrush
DeleteDC
GetBkColor
GetMapMode
GetStockObject
GetTextExtentPoint32A
SetBkColor
SetMapMode
GetTextMetricsA
GetObjectA
DPtoLP

advapi32

CryptGetUserKey
CryptEncrypt
RegSetValueExA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegCreateKeyExA
RegCloseKey
CryptDestroyKey
CryptImportKey
CryptGenKey
CryptSetProvParam
CryptAcquireContextW
CryptSetKeyParam
CryptGetProvParam
CryptDecrypt
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
RegOpenKeyExW
RegQueryValueExW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyW
CryptVerifySignatureA
CryptSignHashA
CryptSetHashParam

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetFolderLocation

ole32

CoTaskMemAlloc
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
CreateStreamOnHGlobal
CoTaskMemRealloc
OleInitialize
OleUninitialize
OleLockRunning
CoUninitialize
CoInitialize
CoTaskMemFree
CoCreateInstance

oleaut32

OleCreateFontIndirect
DispCallFunc
LoadRegTypeLi
LoadTypeLi
VariantClear
VariantInit
SysStringLen
SysAllocStringLen
SysFreeString
SysAllocString
VarUI4FromStr

bib

ord11
ord4
ord5

msvcp140

?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEBA?AVlocale@2@XZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXXZ
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGD@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@G@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_alloc@std@@YAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_Xout_of_range@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
_Thrd_id
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
?unshift@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?id@?$ctype@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?empty@locale@std@@SA?AV12@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ

wsock32

shutdown
gethostbyname
setsockopt
sendto
send
select
recvfrom
recv
ntohl
ioctlsocket
htons
getsockopt
inet_ntoa
connect
bind
socket
accept
__WSAFDIsSet
closesocket
WSAStartup
WSAGetLastError

vcruntime140

__RTDynamicCast
memmove
__std_exception_copy
__std_exception_destroy
memcpy
_CxxThrowException
_purecall
memcmp
memchr
memset
__C_specific_handler
strrchr
strchr
strstr
wcsstr
__current_exception
__current_exception_context
__std_type_info_destroy_list
__std_terminate

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

signal
_invalid_parameter_noinfo
_errno
_set_invalid_parameter_handler
_resetstkoflw
raise
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_exit
_configure_narrow_argv
_initialize_narrow_environment
_set_errno
_initialize_onexit_table
_initterm_e
_initterm
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function

api-ms-win-crt-string-l1-1-0

strncat
_stricmp
strpbrk
isalnum
isalpha
strcat
strcpy
_strdup
strncmp
isdigit
wcsncpy
isxdigit
strncpy_s
isspace
strncpy
strcmp
wcscpy_s
wcslen
_strnicmp
strlen
wcsncmp
tolower
wcscmp
strncat_s
islower
strtok
isupper
toupper

api-ms-win-crt-convert-l1-1-0

strtoul
strtod
_strtoi64
_strtoui64
_itoa_s
mbtowc
strtol
_i64toa_s
_ultoa_s
_ltoa_s
_wtoi
wctomb
atof
atol
atoi

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
_close
__stdio_common_vsprintf
_read
_sopen_dispatch
__stdio_common_vsnprintf_s
_write
__stdio_common_vsprintf_s
__acrt_iob_func
_wfopen
feof
ferror
fflush
fgets
ungetc
setvbuf
_fseeki64
fsetpos
fgetpos
_get_stream_buffer_pointers
__stdio_common_vfwprintf
ungetwc
fputwc
__stdio_common_vsscanf
fopen
fputs
fclose
fputc
_fileno
fgetc
fread
fseek
ftell
fwrite
_setmode
fgetwc
__stdio_common_vswprintf

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
realloc
_recalloc
free
calloc

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-filesystem-l1-1-0

_fstat64i32
_unlock_file
_lock_file

api-ms-win-crt-multibyte-l1-1-0

_mbsnbcpy_s
_mbsrchr
_mbsnbicmp
_mbsstr

api-ms-win-crt-math-l1-1-0

acos
cos
sin
_isnan
sqrt
pow
ceilf
floor

api-ms-win-crt-time-l1-1-0

_mktime64
_gmtime64
_localtime64
_gmtime64_s
_time64
_difftime64
strftime
_ftime64

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func
_free_locale
setlocale

api-ms-win-crt-utility-l1-1-0

_lrotl
_lrotr
abs
rand
qsort

api-ms-win-crt-conio-l1-1-0

_getch

Exports

Exports

?iEDCSetTestPerms@@YAPEAXPEAU_t_PDDoc@@PEAU_t_ASCabinet@@@Z
PlugInMain

Sections

.text
Size: 6.5MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

fipstx
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 409KB - Virtual size: 433KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fipsda
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fipsro
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

fipsrd
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 986KB - Virtual size: 985KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/ReadOutLoud.api
.dll windows:6 windows x64

cd9435243abe650c66df92cd2e60a519

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bb:05:01:61:30:e2:67:1b:32:51:bb:b2:15:4a:f9:c6:3b:d5:32:3c:d7:9a:2f:49:9a:e2:4a:b6:57:4c:ee:cd
Signer

Actual PE Digest

bb:05:01:61:30:e2:67:1b:32:51:bb:b2:15:4a:f9:c6:3b:d5:32:3c:d7:9a:2f:49:9a:e2:4a:b6:57:4c:ee:cd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
MultiByteToWideChar
WideCharToMultiByte
GetVersionExA
FreeLibrary
GetProcAddress
GetUserDefaultLangID
FreeResource
LoadResource
LockResource
FindResourceA
GetModuleFileNameA
SizeofResource
lstrcpynA
lstrcatA
CreateActCtxW
DisableThreadLibraryCalls
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
GetModuleHandleW
CreateEventW
InitializeCriticalSectionAndSpinCount
CloseHandle
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
OutputDebugStringW
LoadLibraryW
GetModuleHandleExW
GetModuleFileNameW
DeleteCriticalSection
ActivateActCtx
InitializeCriticalSectionEx
SetLastError
GetLastError
lstrlenA
OutputDebugStringA

user32

GetMessageA
TranslateMessage
DispatchMessageA
OemToCharA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

ole32

CLSIDFromProgID
CoCreateInstance
CoTaskMemFree

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

shlwapi

StrToIntExA

vcruntime140

__C_specific_handler
memchr
__std_exception_destroy
__std_exception_copy
_purecall
_CxxThrowException
strrchr
memset
memcpy
memcmp
__std_terminate
__std_type_info_destroy_list
memmove

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

wcscat
strncat
_stricmp
isdigit
wcsncpy
tolower
wcslen
wcscpy
wcscmp
strlen
strcmp

api-ms-win-crt-runtime-l1-1-0

_errno
_invalid_parameter_noinfo_noreturn
_set_invalid_parameter_handler
_initterm_e
_invalid_parameter_noinfo
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_crt_atexit
_cexit
_register_onexit_function

api-ms-win-crt-convert-l1-1-0

_itoa_s
wcstol
atoi
strtol

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-math-l1-1-0

log
pow

api-ms-win-crt-stdio-l1-1-0

_getcwd

api-ms-win-crt-filesystem-l1-1-0

_findnext64i32
_findfirst64i32
_findclose
_chdir

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

Exports

Exports

PlugInMain

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/SaveAsRTF.api
.dll windows:6 windows x64

3c1cef428192fb7f550d3c2357cac860

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

76:94:c0:14:de:86:29:02:d0:b3:3c:98:6c:73:d8:66:f3:25:03:38:d0:fc:25:75:f2:94:ee:0f:1e:14:b2:58
Signer

Actual PE Digest

76:94:c0:14:de:86:29:02:d0:b3:3c:98:6c:73:d8:66:f3:25:03:38:d0:fc:25:75:f2:94:ee:0f:1e:14:b2:58

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

_CxxThrowException
memset
__std_type_info_destroy_list
__std_terminate
__current_exception_context
__current_exception
memcmp
memchr
memcpy
memmove
_purecall
strchr
strrchr
__C_specific_handler
__std_exception_destroy
__std_exception_copy
strstr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strpbrk
strcmp
wcscpy_s
isdigit
tolower
_stricmp
strncmp
strlen
isalpha

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_initterm
_invalid_parameter_noinfo_noreturn
_cexit
terminate
_initterm_e
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table
_set_invalid_parameter_handler
_errno
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

api-ms-win-crt-convert-l1-1-0

_ultoa_s
atoi
_ltoa_s
atof

api-ms-win-crt-time-l1-1-0

_time64
_localtime64
_gmtime64

api-ms-win-crt-locale-l1-1-0

localeconv
setlocale

api-ms-win-crt-utility-l1-1-0

abs

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

kernel32

OutputDebugStringW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
DeleteCriticalSection
InitializeCriticalSectionEx
GetACP
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetDllDirectoryW
SetDllDirectoryW
LoadLibraryW
GetProcAddress
GetModuleHandleExW
GetModuleFileNameW
FreeLibrary
SetLastError
GetLastError
GetTickCount
FindAtomW
OutputDebugStringA
lstrlenA
lstrcpyA
FindResourceA
SizeofResource
LockResource
LoadResource
GetModuleFileNameA
FreeResource
DisableThreadLibraryCalls

user32

MoveWindow
SetFocus
GetFocus
GetPropW
GetWindowRect
FindWindowA
wsprintfA
SetPropW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

Exports

Exports

PlugInMain

Sections

.text
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/Search.api
.dll regsvr32 windows:6 windows x64

24951367d3f93eef44882d0d57d23ab0

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

93:1a:95:ca:b6:1d:52:66:b9:d8:c1:df:6a:ef:63:37:ff:e7:a5:c5:98:a1:c4:38:9a:3f:f3:d9:c5:dc:4a:c6
Signer

Actual PE Digest

93:1a:95:ca:b6:1d:52:66:b9:d8:c1:df:6a:ef:63:37:ff:e7:a5:c5:98:a1:c4:38:9a:3f:f3:d9:c5:dc:4a:c6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyW
RegSetValueExA
RegQueryInfoKeyA
CreateProcessAsUserW
OpenProcessToken
CreateRestrictedToken

kernel32

ResumeThread
GetTickCount
SetEvent
ResetEvent
OutputDebugStringA
DecodePointer
RaiseException
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetProcAddress
LoadLibraryExA
LoadResource
SizeofResource
LoadLibraryW
lstrcmpiA
FindResourceA
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
SetThreadPriority
WideCharToMultiByte
IsDBCSLeadByte
GetModuleHandleW
VerSetConditionMask
VerifyVersionInfoW
FreeResource
LockResource
lstrcpyA
lstrlenA
DisableThreadLibraryCalls
GetShortPathNameW
FindAtomW
CreateEventW
WaitForMultipleObjects
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
CreateFileMappingW
MapViewOfFile
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
TerminateThread
CreateThread
Sleep
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
MultiByteToWideChar

user32

SetPropW
GetWindowRect
FindWindowA
CharNextA
CharNextW
DdeUnaccessData
DdeAccessData
DdeCmpStringHandles
DdeFreeStringHandle
DdeCreateStringHandleA
DdeNameService
DdeDisconnect
DdeUninitialize
DdeInitializeA
GetPropW
GetFocus
SetFocus
MoveWindow
SendMessageA

ole32

CoCreateInstance
StringFromGUID2
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree

oleaut32

RegisterTypeLi
SysAllocString
LoadTypeLi
VarUI4FromStr
VariantClear
VariantInit
SysStringLen
SysFreeString
LoadRegTypeLi
UnRegisterTypeLi

msvcp140

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memcmp
memcpy
_purecall
__C_specific_handler
__RTDynamicCast
strrchr
strchr
__std_exception_destroy
__current_exception
__current_exception_context
__std_type_info_destroy_list
memmove
_CxxThrowException
memset
__std_terminate
strstr
__std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_crt_atexit
_set_invalid_parameter_handler
_register_onexit_function
_resetstkoflw
_cexit
_seh_filter_dll
_errno
_invalid_parameter_noinfo
terminate
_initialize_onexit_table
_configure_narrow_argv
_initialize_narrow_environment
_initterm
_initterm_e

api-ms-win-crt-string-l1-1-0

wcslen
wcsnlen
strcat_s
strncmp
_stricmp
strcpy_s
strcmp
strlen
wcsncpy_s
tolower
isdigit
strpbrk
wcscpy_s

api-ms-win-crt-convert-l1-1-0

atoi
_itoa_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s

api-ms-win-crt-heap-l1-1-0

calloc
_callnewh
free
malloc
_recalloc

api-ms-win-crt-multibyte-l1-1-0

_mbsnbcpy_s
_mbsstr

api-ms-win-crt-time-l1-1-0

_time64
_utime64
_localtime64
_gmtime64

Exports

Exports

?myASUCSToLower@@YAGG@Z
?myASUCSToLowerBE@@YAGG@Z
?myASUCSlowercase@@YAPEAGPEAG@Z
DllRegisterServer
DllUnregisterServer
PlugInMain
ixAbortIndexingSession
ixCloseIndex
ixConvertQuery
ixCreateIndexCreationParams
ixCreateIndexEx
ixCreateIndexManager
ixCreateStemmer
ixDeleteIndexCreationParams
ixDeleteIndexManager
ixDeleteRecordNum
ixDeleteResultVector
ixDeleteStemmer
ixEndIndexingSession
ixEndRetrievalSession
ixForceCloseOfTemporaryFiles
ixGetTempDiskSpaceUsage
ixIncrementRecord
ixIndexNumber
ixIndexWord
ixIndexWordSpecial
ixIsRecordDeleted
ixNumHits
ixNumberOfRecordsInIndex
ixOpenIndex
ixProcessQuery
ixRetrieveMoreRecordData
ixRetrieveRecordData
ixSetBaseDistributedIndexDirectory
ixSetFinalIndexDataFileNameAndPosition
ixSetIndexCreationParams
ixSetLocationForTemporaryFiles
ixStartIndexingSession
ixStartRetrievalSession
ixStem8BitWord
ixStoreMoreRecordData
ixStoreRecordData
ixVectorCurrentHit
ixVectorNextHit

Sections

.text
Size: 394KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/SendMail.api
.dll windows:6 windows x64

d50b14e8de4d43216efeaae4651c07e8

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1c:08:9b:43:72:4f:22:b6:83:58:55:9b:c2:90:31:a5:f4:b6:11:26:bc:01:22:17:31:c3:69:71:62:8e:05:70
Signer

Actual PE Digest

1c:08:9b:43:72:4f:22:b6:83:58:55:9b:c2:90:31:a5:f4:b6:11:26:bc:01:22:17:31:c3:69:71:62:8e:05:70

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

GetCurrentProcessId
CreateFileA
FlushFileBuffers
ReadFile
WriteFile
DisconnectNamedPipe
SetNamedPipeHandleState
GetOverlappedResult
SetEvent
ResetEvent
CreateEventA
WaitForMultipleObjects
LocalFree
WaitNamedPipeA
DisableThreadLibraryCalls
GetModuleHandleW
GetFileSize
SetFilePointer
lstrcatA
MultiByteToWideChar
WideCharToMultiByte
Sleep
ExpandEnvironmentStringsA
GetModuleFileNameA
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceA
lstrcpyA
InitializeCriticalSectionEx
FindAtomW
GetTickCount
OutputDebugStringW
InitializeSListHead
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
CreateProcessW
GetCurrentThread
CreateSemaphoreA
LocalAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
LoadLibraryExA
VirtualQuery
VirtualProtect
GetCurrentProcess
CloseHandle
DeleteCriticalSection
RaiseException
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
lstrlenA
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleExW
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryA
SetLastError
GetLastError
OutputDebugStringA
GetSystemInfo

user32

FindWindowA
SetPropW
GetPropW
GetFocus
SetFocus
MoveWindow
TranslateMessage
DispatchMessageA
PeekMessageA
EnableWindow
IsWindowEnabled
GetParent
wsprintfA
GetWindowRect
GetMessageA

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorA
ConvertSidToStringSidA
GetTokenInformation
OpenThreadToken
RegOpenKeyExA
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoCreateInstance

oleaut32

SafeArrayAccessData
SafeArrayDestroy
SysFreeString
SysAllocString

msvcp140

?id@?$ctype@D@std@@2V0locale@2@A
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

vcruntime140

_purecall
__std_type_info_destroy_list
strstr
strchr
strrchr
__C_specific_handler
memchr
memcmp
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memmove
memcpy
__std_terminate
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strcpy
wcsncpy_s
wcscat_s
strtok_s
_stricmp
_strnicmp
isalpha
tolower
strlen
strcmp
wcslen
strncmp
wcscpy_s
isspace
isxdigit
isdigit
strpbrk

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vsprintf
__stdio_common_vswscanf
__stdio_common_vsnwprintf_s

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_set_invalid_parameter_handler
_initterm_e
_invalid_parameter_noinfo
_initterm
_execute_onexit_table
_cexit
_crt_atexit
_configure_narrow_argv
_initialize_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_errno
_initialize_narrow_environment

api-ms-win-crt-convert-l1-1-0

wcstombs_s
_wtoi
atoi
_itoa_s

api-ms-win-crt-math-l1-1-0

pow
floor

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-multibyte-l1-1-0

_mbsstr
_mbstowcs_s_l

api-ms-win-crt-locale-l1-1-0

_free_locale
_create_locale

api-ms-win-crt-time-l1-1-0

_gmtime64
_localtime64
_time64

Exports

Exports

?ASstrcpy_safe@@YAPEADPEADPEBD@Z
PlugInMain
SendExec

Sections

.text
Size: 376KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/Spelling.api
.dll windows:6 windows x64

27a32a8cdd6946abdec9b43eb09623a8

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:cc:42:c4:f7:d7:ee:3c:39:e6:3e:42:df:01:ff:6c:16:ad:25:5d:7b:1c:49:bd:eb:2d:0a:3e:f7:cc:54:5d
Signer

Actual PE Digest

49:cc:42:c4:f7:d7:ee:3c:39:e6:3e:42:df:01:ff:6c:16:ad:25:5d:7b:1c:49:bd:eb:2d:0a:3e:f7:cc:54:5d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

adobelinguistic

?SetBibProc@LinguisticManager@devtech@@QEAAXPEAX@Z
?SetFlagAXE8_ExpatInited@LinguisticManager@devtech@@QEAAX_N@Z
?RunInsideAppSandBox@LinguisticManager@devtech@@SAXXZ
??0LM_UniString@devtech@@QEAA@PEBD@Z
?compare@LM_UniString@devtech@@QEBAHAEBV12@@Z
??4?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QEAAAEAV01@AEBV01@@Z
?GetProviderList@LinguisticManager@devtech@@QEAAXAEAV?$list@PEAVIProvider@devtech@@V?$allocator@PEAVIProvider@devtech@@@std@@@std@@@Z
??0LinguisticManager@devtech@@QEAA@PEAXAEBVLM_FileSpec@1@@Z
?GetLanguageName@LinguisticManager@devtech@@QEAA?BVLM_UniString@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?FindUserDictionarySetForLanguage@LinguisticManager@devtech@@QEAAPEAVIDictionarySet@2@G@Z
?CreateUserDictionary@LinguisticManager@devtech@@QEAAPEAVIDictionary@2@AEBVLM_UniString@2@G_N@Z
?DeleteUserDictionary@LinguisticManager@devtech@@QEAAXPEAVIDictionary@2@@Z
?OpenUserDictionary@LinguisticManager@devtech@@QEAAPEAVIDictionary@2@AEBVLM_FileSpec@2@AEBVLM_UniString@2@PEAVIProvider@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?CloseUserDictionary@LinguisticManager@devtech@@QEAAXPEAVIDictionary@2@@Z
?ExportUserDictionary@LinguisticManager@devtech@@QEAAXPEAVIDictionary@2@AEAVLM_FileSpec@2@PEAVIProvider@2@@Z
?CreateUnicode@LinguisticManager@devtech@@QEAAPEAVLM_LinguisticService@2@PEAVIDictionarySet@2@PEAVIProvider@2@@Z
??YLM_FileSpec@devtech@@QEAAAEAV01@AEBV01@@Z
??1LM_FileSpec@devtech@@UEAA@XZ
??0LM_FileSpec@devtech@@QEAA@PEB_W@Z
??0LM_FileSpec@devtech@@QEAA@XZ
?ReleaseLinguisticService@LinguisticManager@devtech@@QEAAXPEAVLM_LinguisticService@2@@Z
??1LinguisticManager@devtech@@QEAA@XZ
?CreateLinguisticService@LinguisticManager@devtech@@QEAAPEAVLM_LinguisticService@2@PEAVIProvider@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetDefaultProvider@LinguisticManager@devtech@@QEAAPEAVIProvider@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@G@Z
??1LM_UniString@devtech@@QEAA@XZ
??C?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QEBAPEAUStringValue@LM_UniString@1@XZ
??0LM_UniString@devtech@@QEAA@PEBG_K@Z
??0LM_UniString@devtech@@QEAA@XZ

kernel32

GetModuleFileNameA
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceA
lstrcpyA
GetTickCount
DisableThreadLibraryCalls
FindAtomW
WaitForSingleObjectEx
CreateThread
GetModuleHandleW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
VirtualQuery
VirtualProtect
GetSystemInfo
OutputDebugStringW
CreateFileW
GetFinalPathNameByHandleW
CloseHandle
GetCurrentProcess
QueryFullProcessImageNameW
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
FreeLibrary
GetProcAddress
lstrlenA

user32

GetPropW
GetFocus
SetPropW
FindWindowA
SetFocus
MoveWindow
GetWindowRect
wsprintfA
GetSystemMetrics

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW

bib

ord5

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z

vcruntime140

__current_exception
strstr
strchr
strrchr
__C_specific_handler
memcmp
__current_exception_context
memmove
__RTDynamicCast
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
__std_terminate
_purecall
__std_type_info_destroy_list
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_errno
_crt_atexit
_cexit
_invalid_parameter_noinfo
_set_invalid_parameter_handler
terminate
_execute_onexit_table

api-ms-win-crt-string-l1-1-0

strncmp
_stricmp
isdigit
iswalpha
strpbrk
iswcntrl
isalpha
tolower
wcslen
_wcsdup
strcmp
strlen
towlower

api-ms-win-crt-time-l1-1-0

_time64
_localtime64
_gmtime64

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s

api-ms-win-crt-convert-l1-1-0

atof
atoi

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

Exports

Exports

EditDialogShow
PlugInMain
SpellDialogShow

Sections

.text
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/StorageConnectors.api
.dll windows:6 windows x64

b2560846ee4152c882439051388dbe7a

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

00:3f:aa:84:cf:ae:74:be:4b:5d:b2:01:26:09:a9:60:e8:12:c1:bb:61:a9:b1:ad:d0:52:7d:b5:50:27:74:25
Signer

Actual PE Digest

00:3f:aa:84:cf:ae:74:be:4b:5d:b2:01:26:09:a9:60:e8:12:c1:bb:61:a9:b1:ad:d0:52:7d:b5:50:27:74:25

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcp140

?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
??Bid@locale@std@@QEAA_KXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Xbad_alloc@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
__RTDynamicCast
memset
memmove
memcpy
__std_terminate
_purecall
_CxxThrowException
__std_exception_copy
__std_exception_destroy
memcmp
memchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initterm_e
_initterm
_invalid_parameter_noinfo_noreturn
_set_invalid_parameter_handler
_cexit
_seh_filter_dll

api-ms-win-crt-string-l1-1-0

strlen
isspace
strncmp
isdigit
isxdigit
strcmp

api-ms-win-crt-stdio-l1-1-0

fgetc
fsetpos
_fseeki64
__stdio_common_vsprintf_s
fwrite
__stdio_common_vsnprintf_s
_get_stream_buffer_pointers
setvbuf
ungetc
fputc
fflush
fread
fclose
fgetpos

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

api-ms-win-crt-convert-l1-1-0

atol
_i64toa_s
_itoa_s
atoi
_ui64toa_s
strtoll

api-ms-win-crt-time-l1-1-0

_ctime64
_gmtime64
_localtime64
strftime
_time64

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc
_callnewh

api-ms-win-crt-math-l1-1-0

pow
_dsign
_fdtest
_ldtest
_dtest

api-ms-win-crt-locale-l1-1-0

localeconv

kernel32

SizeofResource
FindResourceA
lstrlenA
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LockResource
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
LoadResource
GetModuleFileNameA
FreeResource
SetEvent
DisableThreadLibraryCalls

Exports

Exports

PlugInMain

Sections

.text
Size: 478KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/Updater.api
.dll windows:6 windows x64

5ea0c87c69ee19a37101699550b45894

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9e:71:9a:25:be:60:ef:94:a2:c4:0e:53:2c:69:c9:9f:4d:7b:f5:08:0b:53:79:d8:9d:76:8a:11:f2:0c:32:33
Signer

Actual PE Digest

9e:71:9a:25:be:60:ef:94:a2:c4:0e:53:2c:69:c9:9f:4d:7b:f5:08:0b:53:79:d8:9d:76:8a:11:f2:0c:32:33

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetExitCodeProcess
GetCurrentThread
GetSystemTimeAsFileTime
lstrlenA
lstrlenW
FreeLibrary
GetProcAddress
GetModuleFileNameA
VerSetConditionMask
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceA
VerifyVersionInfoW
lstrcpyA
DisableThreadLibraryCalls
GetSystemInfo
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CreateFileW
GetEnvironmentVariableW
OutputDebugStringW
GetModuleFileNameW
Sleep
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
GetCurrentProcess
CloseHandle
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead

user32

wsprintfA

advapi32

RegQueryValueExA
OpenProcessToken
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
OpenThreadToken
CopySid
DuplicateToken
EqualSid
GetLengthSid
GetSidLengthRequired
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
InitializeSid
IsValidSid
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyExA

shell32

ShellExecuteExW
ShellExecuteW

msvcp140

_Thrd_detach
?_Xlength_error@std@@YAXPEBD@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit

userenv

UnloadUserProfile

vcruntime140

__std_type_info_destroy_list
wcsstr
_purecall
__current_exception_context
__C_specific_handler
memcmp
__current_exception
memset
__std_terminate
memcpy
memmove
__std_exception_copy
__std_exception_destroy
_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_errno
terminate
_set_invalid_parameter_handler
_beginthreadex
_invalid_parameter_noinfo
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_resetstkoflw
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function

api-ms-win-crt-string-l1-1-0

tolower
wcslen
isdigit
strcmp
strlen
_stricmp
strncpy_s
strcpy_s
isalpha
strncmp

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-convert-l1-1-0

atof
atoi
_ltoa_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s

api-ms-win-crt-utility-l1-1-0

abs

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

api-ms-win-crt-time-l1-1-0

_time64
_localtime64
_gmtime64

Exports

Exports

PlugInMain

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/eBook.api
.dll windows:6 windows x64

de0c158f5830a071bf581ffffa2b7de8

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8f:5b:6f:49:53:c2:7f:d3:bb:af:90:c0:f3:c6:58:c3:2b:94:22:63:d7:4e:86:5d:55:00:7a:8c:6e:1e:c0:00
Signer

Actual PE Digest

8f:5b:6f:49:53:c2:7f:d3:bb:af:90:c0:f3:c6:58:c3:2b:94:22:63:d7:4e:86:5d:55:00:7a:8c:6e:1e:c0:00

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
GetProcAddress
CreateEventW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
CloseHandle
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
FindResourceA
SizeofResource
LockResource
LoadResource
FreeResource
GetModuleFileNameA
GetModuleHandleW
GetLastError

advapi32

RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegQueryValueExW
RegQueryValueExA

shell32

ShellExecuteExW

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
__std_exception_destroy
memcpy
memset
__std_terminate
__std_exception_copy
_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo
_configure_narrow_argv
_errno
_set_invalid_parameter_handler
_seh_filter_dll

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Exports

Exports

PlugInMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/mip_ClientTelemetry.dll
.dll windows:6 windows x64

e751651bca153ab52cfdc41b20a6be45

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9d:da:9f:ab:c2:ce:58:3c:d1:42:3f:99:56:79:f4:f7:d2:b2:96:60:f8:01:66:7a:57:a9:e3:c4:29:a8:61:db
Signer

Actual PE Digest

9d:da:9f:ab:c2:ce:58:3c:d1:42:3f:99:56:79:f4:f7:d2:b2:96:60:f8:01:66:7a:57:a9:e3:c4:29:a8:61:db

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

wininet

InternetOpenW
HttpQueryInfoA
HttpSendRequestW
HttpAddRequestHeadersA
HttpOpenRequestA
InternetSetStatusCallbackW
InternetQueryOptionW
InternetReadFile
InternetConnectA
InternetCloseHandle
InternetCrackUrlA

crypt32

CertVerifyCertificateChainPolicy
CertFreeCertificateChain

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
CreateEventW
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
GetModuleHandleExW
OutputDebugStringA
Sleep
GetCurrentThreadId
GetSystemTime
GetSystemTimeAsFileTime
CreateFileW
DeleteFileW
GetFileAttributesW
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
GetTempPathW
GetCurrentProcessId
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
GetNativeSystemInfo
GetSystemPowerStatus
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTimeZoneInformation
InitOnceExecuteOnce
CreateFileA
ReadFile
IsProcessorFeaturePresent
WriteFile
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
FreeLibrary
SystemTimeToFileTime
GetFileSize
LockFileEx
LocalFree
UnlockFile
HeapDestroy
HeapCompact
LoadLibraryW
GetSystemInfo
HeapReAlloc
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
HeapSize
HeapValidate
UnmapViewOfFile
WaitForSingleObject
CreateMutexW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
LockFile
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
AreFileApisANSI
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
IsDebuggerPresent
SetFilePointer

advapi32

RegGetValueA

ole32

CoCreateGuid

msvcp140

?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Random_device@std@@YAIXZ
?_Xbad_function_call@std@@YAXXZ
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
_Xtime_get_ticks
?uncaught_exception@std@@YA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?classic@locale@std@@SAAEBV12@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
_Thrd_yield
_Query_perf_counter
_Query_perf_frequency
_Mtx_current_owns
_Mtx_trylock
_Cnd_timedwait
?_Throw_Cpp_error@std@@YAXH@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
_Thrd_detach
_Thrd_join
_Thrd_id
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z

iphlpapi

GetAdaptersInfo

vcruntime140

memcmp
__std_type_info_destroy_list
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__current_exception_context
memchr
memmove
memset
_purecall
__std_terminate
__current_exception
memcpy
__std_type_info_name
strchr
strstr
strrchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_errno
_initterm_e
_beginthreadex
terminate
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_endthreadex

api-ms-win-crt-heap-l1-1-0

free
calloc
_callnewh
realloc
_msize
malloc

api-ms-win-crt-convert-l1-1-0

strtoul
strtoull
strtod
strtoll
strtol

api-ms-win-crt-stdio-l1-1-0

_fseeki64
fsetpos
fread
__stdio_common_vsprintf
fgetpos
fgetc
fwrite
setvbuf
ungetc
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
fputs
fflush
fclose
fgets
_get_stream_buffer_pointers
_wfopen_s
fputc
__stdio_common_vsscanf

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-math-l1-1-0

ceil
ceilf
pow
log2
_dsign
floor
_dclass

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-time-l1-1-0

_gmtime64_s
_localtime64_s

api-ms-win-crt-string-l1-1-0

strcmp
tolower
strncmp
isalnum
strcspn

Exports

Exports

?$TSS0@?1??stateLock@DebugEventSource@Events@Applications@Microsoft@@KAAEAVrecursive_mutex@std@@XZ@4HA
??0CorrelationVector@Events@Applications@Microsoft@@QEAA@XZ
??0DebugEventDispatcher@Events@Applications@Microsoft@@QEAA@AEBV0123@@Z
??0DebugEventDispatcher@Events@Applications@Microsoft@@QEAA@XZ
??0DebugEventListener@Events@Applications@Microsoft@@QEAA@AEBV0123@@Z
??0DebugEventListener@Events@Applications@Microsoft@@QEAA@XZ
??0DebugEventSource@Events@Applications@Microsoft@@QEAA@$$QEAV0123@@Z
??0DebugEventSource@Events@Applications@Microsoft@@QEAA@AEBV0123@@Z
??0DebugEventSource@Events@Applications@Microsoft@@QEAA@XZ
??0EventProperties@Events@Applications@Microsoft@@QEAA@AEBV0123@@Z
??0EventProperties@Events@Applications@Microsoft@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0EventProperties@Events@Applications@Microsoft@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Events@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Events@Applications@Microsoft@@@std@@@2@@5@@Z
??0EventProperties@Events@Applications@Microsoft@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@E@Z
??0EventProperties@Events@Applications@Microsoft@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$initializer_list@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Events@Applications@Microsoft@@@std@@@5@@Z
??0EventProperties@Events@Applications@Microsoft@@QEAA@XZ
??0EventProperty@Events@Applications@Microsoft@@QEAA@$$QEAU0123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@AEAV?$vector@NV?$allocator@N@std@@@std@@W4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@AEAV?$vector@UGUID_t@Events@Applications@Microsoft@@V?$allocator@UGUID_t@Events@Applications@Microsoft@@@std@@@std@@W4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@AEAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@W4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@AEAV?$vector@_JV?$allocator@_J@std@@@std@@W4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@AEBU0123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@CW4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@EW4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@FW4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@GW4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@HW4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@IW4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@JW4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@NW4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@PEBDW4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@UGUID_t@123@W4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@Utime_ticks_t@123@W4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@XZ
??0EventProperty@Events@Applications@Microsoft@@QEAA@_JW4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@_KW4PiiKind@123@W4DataCategory@123@@Z
??0EventProperty@Events@Applications@Microsoft@@QEAA@_NW4PiiKind@123@W4DataCategory@123@@Z
??0GUID_t@Events@Applications@Microsoft@@QEAA@$$QEAU0123@@Z
??0GUID_t@Events@Applications@Microsoft@@QEAA@AEBU0123@@Z
??0GUID_t@Events@Applications@Microsoft@@QEAA@HHHAEBV?$initializer_list@E@std@@@Z
??0GUID_t@Events@Applications@Microsoft@@QEAA@PEBD@Z
??0GUID_t@Events@Applications@Microsoft@@QEAA@QEBE_N@Z
??0GUID_t@Events@Applications@Microsoft@@QEAA@U_GUID@@@Z
??0GUID_t@Events@Applications@Microsoft@@QEAA@XZ
??0IAuthTokensController@Events@Applications@Microsoft@@QEAA@AEBV0123@@Z
??0IAuthTokensController@Events@Applications@Microsoft@@QEAA@XZ
??0ILogConfiguration@Events@Applications@Microsoft@@QEAA@$$QEAV0123@@Z
??0ILogConfiguration@Events@Applications@Microsoft@@QEAA@AEBV0123@@Z
??0ILogConfiguration@Events@Applications@Microsoft@@QEAA@AEBV?$initializer_list@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VVariant@Events@Applications@Microsoft@@@std@@@std@@@Z
??0ILogConfiguration@Events@Applications@Microsoft@@QEAA@XZ
??0ILogController@Events@Applications@Microsoft@@QEAA@$$QEAV0123@@Z
??0ILogController@Events@Applications@Microsoft@@QEAA@AEBV0123@@Z
??0ILogController@Events@Applications@Microsoft@@QEAA@XZ
??0ILogManager@Events@Applications@Microsoft@@QEAA@AEBV0123@@Z
??0ILogManager@Events@Applications@Microsoft@@QEAA@XZ
??0ILogger@Events@Applications@Microsoft@@QEAA@AEBV0123@@Z
??0ILogger@Events@Applications@Microsoft@@QEAA@XZ
??0IModule@Events@Applications@Microsoft@@QEAA@AEBV0123@@Z
??0IModule@Events@Applications@Microsoft@@QEAA@XZ
??0ISemanticContext@Events@Applications@Microsoft@@QEAA@AEBV0123@@Z
??0ISemanticContext@Events@Applications@Microsoft@@QEAA@XZ
??0JsonFormatter@Events@Applications@Microsoft@@QEAA@XZ
??0LogConfiguration@Telemetry@Applications@Microsoft@@QEAA@$$QEAU0123@@Z
??0LogConfiguration@Telemetry@Applications@Microsoft@@QEAA@AEBU0123@@Z
??0LogConfiguration@Telemetry@Applications@Microsoft@@QEAA@XZ
??0time_ticks_t@Events@Applications@Microsoft@@QEAA@$$QEAU0123@@Z
??0time_ticks_t@Events@Applications@Microsoft@@QEAA@AEBU0123@@Z
??0time_ticks_t@Events@Applications@Microsoft@@QEAA@PEB_J@Z
??0time_ticks_t@Events@Applications@Microsoft@@QEAA@XZ
??0time_ticks_t@Events@Applications@Microsoft@@QEAA@_K@Z
??1DebugEventDispatcher@Events@Applications@Microsoft@@UEAA@XZ
??1DebugEventListener@Events@Applications@Microsoft@@UEAA@XZ
??1DebugEventSource@Events@Applications@Microsoft@@UEAA@XZ
??1EventProperties@Events@Applications@Microsoft@@UEAA@XZ
??1EventProperty@Events@Applications@Microsoft@@UEAA@XZ
??1IAuthTokensController@Events@Applications@Microsoft@@UEAA@XZ
??1ILogConfiguration@Events@Applications@Microsoft@@QEAA@XZ
??1ILogManager@Events@Applications@Microsoft@@UEAA@XZ
??1ILogger@Events@Applications@Microsoft@@UEAA@XZ
??1IModule@Events@Applications@Microsoft@@UEAA@XZ
??1ISemanticContext@Events@Applications@Microsoft@@UEAA@XZ
??1LogConfiguration@Telemetry@Applications@Microsoft@@QEAA@XZ
??4DebugEventDispatcher@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV0123@@Z
??4DebugEventListener@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV0123@@Z
??4DebugEventSource@Events@Applications@Microsoft@@QEAAAEAV0123@$$QEAV0123@@Z
??4DebugEventSource@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV0123@@Z
??4EventProperties@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV0123@@Z
??4EventProperties@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Events@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Events@Applications@Microsoft@@@std@@@2@@std@@@Z
??4EventProperties@Events@Applications@Microsoft@@QEAAAEAV0123@V?$initializer_list@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Events@Applications@Microsoft@@@std@@@std@@@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@AEBU0123@@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@AEBV?$vector@NV?$allocator@N@std@@@std@@@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@AEBV?$vector@UGUID_t@Events@Applications@Microsoft@@V?$allocator@UGUID_t@Events@Applications@Microsoft@@@std@@@std@@@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@AEBV?$vector@_JV?$allocator@_J@std@@@std@@@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@C@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@E@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@F@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@G@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@H@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@I@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@J@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@N@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@PEBD@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@UGUID_t@123@@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@Utime_ticks_t@123@@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@_J@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@_K@Z
??4EventProperty@Events@Applications@Microsoft@@QEAAAEAU0123@_N@Z
??4GUID_t@Events@Applications@Microsoft@@QEAAAEAU0123@$$QEAU0123@@Z
??4GUID_t@Events@Applications@Microsoft@@QEAAAEAU0123@AEBU0123@@Z
??4IAuthTokensController@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV0123@@Z
??4ILogConfiguration@Events@Applications@Microsoft@@QEAAAEAV0123@$$QEAV0123@@Z
??4ILogConfiguration@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV0123@@Z
??4ILogController@Events@Applications@Microsoft@@QEAAAEAV0123@$$QEAV0123@@Z
??4ILogController@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV0123@@Z
??4ILogManager@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV0123@@Z
??4ILogger@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV0123@@Z
??4IModule@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV0123@@Z
??4ISemanticContext@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV0123@@Z
??4JsonFormatter@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV0123@@Z
??4LogConfiguration@Telemetry@Applications@Microsoft@@QEAAAEAU0123@$$QEAU0123@@Z
??4LogConfiguration@Telemetry@Applications@Microsoft@@QEAAAEAU0123@AEBU0123@@Z
??4LogManagerProvider@Events@Applications@Microsoft@@QEAAAEAV0123@$$QEAV0123@@Z
??4LogManagerProvider@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV0123@@Z
??4time_ticks_t@Events@Applications@Microsoft@@QEAAAEAU0123@$$QEAU0123@@Z
??4time_ticks_t@Events@Applications@Microsoft@@QEAAAEAU0123@AEBU0123@@Z
??8EventProperty@Events@Applications@Microsoft@@QEBA_NAEBU0123@@Z
??8GUID_t@Events@Applications@Microsoft@@QEBA_NAEBU0123@@Z
??AILogConfiguration@Events@Applications@Microsoft@@QEAAAEAVVariant@123@PEBD@Z
??DILogConfiguration@Events@Applications@Microsoft@@QEAAAEAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VVariant@Events@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VVariant@Events@Applications@Microsoft@@@std@@@2@@std@@XZ
??MGUID_t@Events@Applications@Microsoft@@QEBA_NAEBU0123@@Z
??YEventProperties@Events@Applications@Microsoft@@QEAAAEAV0123@AEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Events@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Events@Applications@Microsoft@@@std@@@2@@std@@@Z
??_7DebugEventDispatcher@Events@Applications@Microsoft@@6B@
??_7DebugEventListener@Events@Applications@Microsoft@@6B@
??_7DebugEventSource@Events@Applications@Microsoft@@6B@
??_7EventProperties@Events@Applications@Microsoft@@6B@
??_7EventProperty@Events@Applications@Microsoft@@6B@
??_7IAuthTokensController@Events@Applications@Microsoft@@6B@
??_7ILogController@Events@Applications@Microsoft@@6B@
??_7ILogManager@Events@Applications@Microsoft@@6BDebugEventDispatcher@123@@
??_7ILogManager@Events@Applications@Microsoft@@6BIContextProvider@123@@
??_7ILogManager@Events@Applications@Microsoft@@6BILogController@123@@
??_7ILogger@Events@Applications@Microsoft@@6B@
??_7IModule@Events@Applications@Microsoft@@6B@
??_7ISemanticContext@Events@Applications@Microsoft@@6B@
?AddEventListener@DebugEventSource@Events@Applications@Microsoft@@UEAAXW4DebugEventType@234@AEAVDebugEventListener@234@@Z
?AddModule@ILogConfiguration@Events@Applications@Microsoft@@QEAAXPEBDAEBV?$shared_ptr@VIModule@Events@Applications@Microsoft@@@std@@@Z
?AttachEventSource@DebugEventSource@Events@Applications@Microsoft@@UEAA_NAEAV1234@@Z
?CanExtend@CorrelationVector@Events@Applications@Microsoft@@QEAA_NXZ
?CanIncrement@CorrelationVector@Events@Applications@Microsoft@@QEAA_NXZ
?ClearExperimentIds@ISemanticContext@Events@Applications@Microsoft@@UEAAXXZ
?CreateLogManager@LogManagerProvider@Events@Applications@Microsoft@@SAPEAVILogManager@234@AEAVILogConfiguration@234@AEAW4status_t@234@@Z
?CreateLogManager@LogManagerProvider@Events@Applications@Microsoft@@SAPEAVILogManager@234@PEBDAEAW4status_t@234@_K@Z
?CreateLogManager@LogManagerProvider@Events@Applications@Microsoft@@SAPEAVILogManager@234@PEBD_NAEAVILogConfiguration@234@AEAW4status_t@234@_K@Z
?DestroyLogManager@LogManagerProvider@Events@Applications@Microsoft@@SA?AW4status_t@234@PEBD@Z
?DetachEventSource@DebugEventSource@Events@Applications@Microsoft@@UEAA_NAEAV1234@@Z
?DispatchEvent@DebugEventSource@Events@Applications@Microsoft@@UEAA_NVDebugEvent@234@@Z
?DispatchEventBroadcast@ILogManager@Events@Applications@Microsoft@@SA_NVDebugEvent@234@@Z
?Extend@CorrelationVector@Events@Applications@Microsoft@@QEAA_NXZ
?FromJSON@Events@Applications@Microsoft@@YA?AVILogConfiguration@123@PEBD@Z
?FromLogConfiguration@Events@Applications@Microsoft@@YA?AVILogConfiguration@123@AEAULogConfiguration@Telemetry@23@@Z
?Get@LogManagerProvider@Events@Applications@Microsoft@@CAPEAVILogManager@234@AEAVILogConfiguration@234@AEAW4status_t@234@@Z
?Get@LogManagerProvider@Events@Applications@Microsoft@@CAPEAVILogManager@234@PEBDAEAW4status_t@234@@Z
?GetDataInspector@ILogManager@Events@Applications@Microsoft@@UEAA?AV?$shared_ptr@VIDataInspector@Events@Applications@Microsoft@@@std@@XZ
?GetDefaultConfiguration@Events@Applications@Microsoft@@YAAEBVILogConfiguration@123@XZ
?GetLatency@EventProperties@Events@Applications@Microsoft@@QEBA?AW4EventLatency@234@XZ
?GetModule@ILogConfiguration@Events@Applications@Microsoft@@QEAA?AV?$shared_ptr@VIModule@Events@Applications@Microsoft@@@std@@PEBD@Z
?GetModules@ILogConfiguration@Events@Applications@Microsoft@@QEAAAEAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$shared_ptr@VIModule@Events@Applications@Microsoft@@@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$shared_ptr@VIModule@Events@Applications@Microsoft@@@2@@std@@@2@@std@@XZ
?GetName@EventProperties@Events@Applications@Microsoft@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetNextValue@CorrelationVector@Events@Applications@Microsoft@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetPersistence@EventProperties@Events@Applications@Microsoft@@QEBA?AW4EventPersistence@234@XZ
?GetPiiProperties@EventProperties@Events@Applications@Microsoft@@QEBA?BV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PiiKind@Events@Applications@Microsoft@@@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PiiKind@Events@Applications@Microsoft@@@2@@std@@@2@@std@@W4DataCategory@234@@Z
?GetPolicyBitFlags@EventProperties@Events@Applications@Microsoft@@QEBA_KXZ
?GetPopSample@EventProperties@Events@Applications@Microsoft@@QEBANXZ
?GetPriority@EventProperties@Events@Applications@Microsoft@@QEBA?AW4EventPriority@234@XZ
?GetProperties@EventProperties@Events@Applications@Microsoft@@QEBAAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Events@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@Events@Applications@Microsoft@@@std@@@2@@std@@W4DataCategory@234@@Z
?GetTimestamp@EventProperties@Events@Applications@Microsoft@@QEBA_JXZ
?GetType@EventProperties@Events@Applications@Microsoft@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetValue@CorrelationVector@Events@Applications@Microsoft@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?HasConfig@ILogConfiguration@Events@Applications@Microsoft@@QEAA_NPEBD@Z
?Hash@GUID_t@Events@Applications@Microsoft@@QEBA_KXZ
?Increment@CorrelationVector@Events@Applications@Microsoft@@QEAA_NXZ
?Initialize@CorrelationVector@Events@Applications@Microsoft@@QEAA_NH@Z
?Initialize@IModule@Events@Applications@Microsoft@@UEAAXPEAVILogManager@234@@Z
?IsInitialized@CorrelationVector@Events@Applications@Microsoft@@QEAA_NXZ
?Release@LogManagerProvider@Events@Applications@Microsoft@@SA?AW4status_t@234@AEAVILogConfiguration@234@@Z
?Release@LogManagerProvider@Events@Applications@Microsoft@@SA?AW4status_t@234@PEBD@Z
?RemoveEventListener@DebugEventSource@Events@Applications@Microsoft@@UEAAXW4DebugEventType@234@AEAVDebugEventListener@234@@Z
?SetAppEnv@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetAppExperimentETag@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetAppExperimentIds@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetAppExperimentImpressionId@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetAppId@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetAppLanguage@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetAppName@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetAppVersion@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetCommercialId@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetCommonField@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBUEventProperty@234@@Z
?SetCustomField@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBUEventProperty@234@@Z
?SetDeviceClass@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetDeviceId@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetDeviceMake@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetDeviceModel@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetDeviceOrgId@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetEventExperimentIds@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?SetLatency@EventProperties@Events@Applications@Microsoft@@QEAAXW4EventLatency@234@@Z
?SetLevel@EventProperties@Events@Applications@Microsoft@@QEAAXE@Z
?SetName@EventProperties@Events@Applications@Microsoft@@QEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetNetworkCost@ISemanticContext@Events@Applications@Microsoft@@UEAAXW4NetworkCost@234@@Z
?SetNetworkProvider@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetNetworkType@ISemanticContext@Events@Applications@Microsoft@@UEAAXW4NetworkType@234@@Z
?SetOsBuild@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetOsName@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetOsVersion@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetPersistence@EventProperties@Events@Applications@Microsoft@@QEAAXW4EventPersistence@234@@Z
?SetPolicyBitFlags@EventProperties@Events@Applications@Microsoft@@QEAAX_K@Z
?SetPopsample@EventProperties@Events@Applications@Microsoft@@QEAAXN@Z
?SetPriority@EventProperties@Events@Applications@Microsoft@@QEAAXW4EventPriority@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV?$vector@NV?$allocator@N@std@@@6@W4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV?$vector@UGUID_t@Events@Applications@Microsoft@@V?$allocator@UGUID_t@Events@Applications@Microsoft@@@std@@@6@W4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@6@W4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV?$vector@_JV?$allocator@_J@std@@@6@W4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CW4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@EW4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@FW4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GW4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HW4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IW4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NW4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBDW4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UEventProperty@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UGUID_t@234@W4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Utime_ticks_t@234@W4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_JW4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_KW4PiiKind@234@W4DataCategory@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NW4PiiKind@234@W4DataCategory@234@@Z
?SetTicket@ISemanticContext@Events@Applications@Microsoft@@UEAAXW4TicketType@234@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetTimestamp@EventProperties@Events@Applications@Microsoft@@QEAAX_J@Z
?SetType@EventProperties@Events@Applications@Microsoft@@QEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetUserANID@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetUserAdvertisingId@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetUserId@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4PiiKind@234@@Z
?SetUserLanguage@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetUserMsaId@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetUserTimeZone@ISemanticContext@Events@Applications@Microsoft@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetValue@CorrelationVector@Events@Applications@Microsoft@@QEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Teardown@IModule@Events@Applications@Microsoft@@UEAAXXZ
?TryGetLevel@EventProperties@Events@Applications@Microsoft@@QEBA?AV?$tuple@_NE@std@@XZ
?Uninitialize@CorrelationVector@Events@Applications@Microsoft@@QEAAXXZ
?__autoclassinit2@DebugEventSource@Events@Applications@Microsoft@@QEAAX_K@Z
?__autoclassinit2@EventProperties@Events@Applications@Microsoft@@QEAAX_K@Z
?__autoclassinit2@ILogConfiguration@Events@Applications@Microsoft@@QEAAX_K@Z
?clear@EventProperty@Events@Applications@Microsoft@@QEAAXXZ
?convertUintVectorToGUID@GUID_t@Events@Applications@Microsoft@@SA?AU_GUID@@AEBV?$vector@EV?$allocator@E@std@@@std@@@Z
?copydata@EventProperty@Events@Applications@Microsoft@@AEAAXPEBU1234@@Z
?empty@EventProperty@Events@Applications@Microsoft@@QEAA_NXZ
?erase@EventProperties@Events@Applications@Microsoft@@QEAA_KAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4DataCategory@234@@Z
?getJsonFormattedEvent@JsonFormatter@Events@Applications@Microsoft@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBQEAVIncomingEventContext@234@@Z
?lock@?1??stateLock@DebugEventSource@Events@Applications@Microsoft@@KAAEAVrecursive_mutex@std@@XZ@4V67@A
?pack@EventProperties@Events@Applications@Microsoft@@QEAAPEAUevt_prop@@XZ
?stateLock@DebugEventSource@Events@Applications@Microsoft@@KAAEAVrecursive_mutex@std@@XZ
?to_bytes@GUID_t@Events@Applications@Microsoft@@QEBAXAEAY0BA@E@Z
?to_string@EventProperty@Events@Applications@Microsoft@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?to_string@GUID_t@Events@Applications@Microsoft@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?type_name@EventProperty@Events@Applications@Microsoft@@SAPEBDI@Z
?unpack@EventProperties@Events@Applications@Microsoft@@QEAA_NPEAUevt_prop@@_K@Z
evt_api_call_default

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/mip_core.dll
.dll windows:6 windows x64

e8e11469cbb45ed414eaaadde4455e59

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

be:83:d2:86:c1:a3:00:cd:8c:14:07:37:9b:ce:09:a0:8c:9d:ce:81:c1:32:5e:d6:92:74:84:d1:d1:4a:11:7e
Signer

Actual PE Digest

be:83:d2:86:c1:a3:00:cd:8c:14:07:37:9b:ce:09:a0:8c:9d:ce:81:c1:32:5e:d6:92:74:84:d1:d1:4a:11:7e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ws2_32

closesocket
WSASetLastError
send
recv
WSAGetLastError
WSACleanup

rpcrt4

UuidCreate

msvcp140

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
_Thrd_sleep
?_Xinvalid_argument@std@@YAXPEBD@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?exceptions@ios_base@std@@QEAAXH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Strcoll
_Strxfrm
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?classic@locale@std@@SAAEBV12@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?__ExceptionPtrCompare@@YA_NPEBX0@Z
?_Winerror_map@std@@YAHH@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
_Cnd_broadcast
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Thrd_join
_Cnd_timedwait
_Mtx_current_owns
_Cnd_signal
_Cnd_wait
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Xbad_alloc@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
_Unlock_shared_ptr_spin_lock
_Lock_shared_ptr_spin_lock
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
_Xtime_get_ticks
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
_Thrd_id
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Query_perf_frequency
_Query_perf_counter
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

concrt140

??0_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ
?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ
?_Release@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ
??1_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ

kernel32

IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
SetEvent
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
GetEnvironmentVariableW
FindNextFileW
FindFirstFileW
DeleteFiber
GetModuleHandleExW
InitializeCriticalSectionAndSpinCount
GetFileType
GetStdHandle
SetLastError
TryEnterCriticalSection
AreFileApisANSI
ReadFile
HeapCreate
HeapFree
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
CreateFileW
UnmapViewOfFile
HeapValidate
HeapSize
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
InitializeSListHead
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
LocalFree
LockFileEx
GetFileSize
GetProcessHeap
WideCharToMultiByte
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
MultiByteToWideChar
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
Sleep
CreateMutexA
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
GlobalFree
SystemTimeToFileTime
FormatMessageW
GetModuleHandleA
GetSystemTime
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
GetSystemTimeAsFileTime
GetFileAttributesW
GetEnvironmentVariableA
GetModuleHandleW
GetModuleFileNameA
GetCurrentProcessId
GetCurrentThreadId
RaiseException
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
VerifyVersionInfoW
VerSetConditionMask
InitOnceBeginInitialize
InitOnceComplete
HeapReAlloc
ConvertFiberToThread
FindClose

vcruntime140

_purecall
__std_terminate
memcmp
memcpy
memmove
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
__current_exception_context
memchr
__std_type_info_compare
__C_specific_handler
strchr
strstr
strrchr
wcsstr
__current_exception
memset

vcruntime140_1

__CxxFrameHandler4

Exports

Exports

?AddContext@ApiContextStorage@mipns@@SAXV?$shared_ptr@VApiContext@mipns@@@std@@@Z
?ApplyGlobalAuditCustomSettings@mipns@@YAXAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
?ApplyGlobalAuditMaskingFilter@mipns@@YAXAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@@std@@@2@@std@@@Z
?ApplyGlobalTelemetryCustomSettings@mipns@@YAXAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
?ApplyGlobalTelemetryMaskingFilter@mipns@@YAXAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@@std@@@2@@std@@@Z
?CheckLastErrorAndThrow@mipns@@YAXXZ
?CrackBlock@mipns@@YA?AV?$vector@EV?$allocator@E@std@@@std@@AEBVCryptoDelegate@1@AEBV23@I111PEBEIW4RSAPadding@1@W4CryptoHashAlgorithm@1@@Z
?Create@HttpClient@mipns@@SA?AV?$shared_ptr@VHttpClient@mipns@@@std@@XZ
?Create@JsonDelegateImpl@mipns@@SA?AV?$shared_ptr@VJsonDelegateImpl@mipns@@@std@@XZ
?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@@Z
?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBV?$shared_ptr@$$CBVMipConfiguration@mipns@@@4@@Z
?Create@OpenSslCryptoDelegateImpl@mipns@@SA?AV?$shared_ptr@VOpenSslCryptoDelegateImpl@mipns@@@std@@XZ
?Create@StorageDelegateImpl@mipns@@SA?AV?$shared_ptr@VStorageDelegate@mipns@@@std@@AEBVStorageSettings@StorageDelegate@2@@Z
?Create@Win32CryptoDelegateImpl@mipns@@SA?AV?$shared_ptr@VWin32CryptoDelegateImpl@mipns@@@std@@XZ
?Create@XmlDelegateImpl@xml@mipns@@SA?AV?$shared_ptr@VXmlDelegateImpl@xml@mipns@@@std@@XZ
?CreateAsymmetricCryptoProvider@mipns@@YA?AV?$shared_ptr@VRsaCryptoProvider@mipns@@@std@@AEBV?$shared_ptr@VCryptoDelegate@mipns@@@3@W4CryptoAlgorithm@1@AEBV?$vector@EV?$allocator@E@std@@@3@I@Z
?CreateAuditEvent@mipns@@YA?AV?$shared_ptr@VAuditEvent@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?CreateAuditManager@mipns@@YA?AV?$shared_ptr@VAuditManager@mipns@@@std@@AEBUDiagnosticConfiguration@1@V?$shared_ptr@VAuditDelegate@mipns@@@3@1@Z
?CreateAuditOnlyEventProperty@mipns@@YA?AV?$shared_ptr@VEventProperty@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@0@Z
?CreateAuthRequestTransformer@mipns@@YA?AV?$shared_ptr@VRequestTransformer@mipns@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@3@AEBVIdentity@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@AEBV?$shared_ptr@VAuthDelegate@mipns@@@3@AEBV?$shared_ptr@VAuthChallengeProvider@mipns@@@3@AEBV?$shared_ptr@VHttpProvider@mipns@@@3@@Z
?CreateAutoTelemetryEvent@mipns@@YA?AV?$unique_ptr@VAutoTelemetryEvent@mipns@@U?$default_delete@VAutoTelemetryEvent@mipns@@@std@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@W4EventLevel@1@AEBV?$shared_ptr@VTelemetryContext@mipns@@@3@AEBV?$shared_ptr@VTelemetryManager@mipns@@@3@@Z
?CreateAutoTelemetryEvent@mipns@@YA?AV?$unique_ptr@VAutoTelemetryEvent@mipns@@U?$default_delete@VAutoTelemetryEvent@mipns@@@std@@@std@@AEBV?$shared_ptr@VTelemetryEvent@mipns@@@3@AEBV?$shared_ptr@VTelemetryContext@mipns@@@3@AEBV?$shared_ptr@VTelemetryManager@mipns@@@3@@Z
?CreateCryptoProvider@mipns@@YA?AV?$shared_ptr@VCryptoProvider@mipns@@@std@@AEBVCryptoDelegate@1@W4CipherMode@1@AEBVCryptoKey@1@@Z
?CreateDefaultAuditDelegate@mipns@@YA?AV?$shared_ptr@VAuditDelegate@mipns@@@std@@AEBV?$shared_ptr@VOneDSAriaHelper@mipns@@@3@AEBUDiagnosticConfiguration@1@@Z
?CreateDefaultLoggerDelegate@logger@mipns@@YA?AV?$shared_ptr@VLoggerDelegate@mipns@@@std@@XZ
?CreateDefaultTelemetryDelegate@mipns@@YA?AV?$shared_ptr@VTelemetryDelegate@mipns@@@std@@AEBV?$shared_ptr@VOneDSAriaHelper@mipns@@@3@AEBUDiagnosticConfiguration@1@@Z
?CreateDomainFromEmail@mipns@@YA?AV?$shared_ptr@VDomain@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?CreateDomainFromUrl@mipns@@YA?AV?$shared_ptr@VDomain@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?CreateEmptyAuditDelegate@mipns@@YA?AV?$shared_ptr@VAuditDelegate@mipns@@@std@@XZ
?CreateEmptyTelemetryDelegate@mipns@@YA?AV?$shared_ptr@VTelemetryDelegate@mipns@@@std@@XZ
?CreateEventContext@mipns@@YA?AV?$shared_ptr@VEventContext@mipns@@@std@@W4Cloud@1@W4DataBoundary@1@AEBVMipContext@1@@Z
?CreateEventFactory@mipns@@YA?AV?$shared_ptr@VDiagnosticEventFactory@mipns@@@std@@XZ
?CreateEventFailureProperties@mipns@@YA?AV?$vector@V?$shared_ptr@VEventProperty@mipns@@@std@@V?$allocator@V?$shared_ptr@VEventProperty@mipns@@@std@@@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@00H@Z
?CreateEventFailureProperties@mipns@@YA?AV?$vector@V?$shared_ptr@VEventProperty@mipns@@@std@@V?$allocator@V?$shared_ptr@VEventProperty@mipns@@@std@@@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@00HAEBVError@1@@Z
?CreateEventFailureProperties@mipns@@YA?AV?$vector@V?$shared_ptr@VEventProperty@mipns@@@std@@V?$allocator@V?$shared_ptr@VEventProperty@mipns@@@std@@@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@00HAEBVexception_ptr@3@@Z
?CreateEventProperty@mipns@@YA?AV?$shared_ptr@VEventProperty@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@0W4Pii@1@@Z
?CreateEventProperty@mipns@@YA?AV?$shared_ptr@VEventProperty@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@NW4Pii@1@@Z
?CreateEventProperty@mipns@@YA?AV?$shared_ptr@VEventProperty@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@_JW4Pii@1@@Z
?CreateEventProperty@mipns@@YA?AV?$shared_ptr@VEventProperty@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@_N@Z
?CreateHttpDirector@mipns@@YA?AV?$shared_ptr@VHttpDirector@mipns@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@3@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@AEBVIdentity@1@AEBV?$shared_ptr@VHttpDelegate@mipns@@@3@AEBV?$shared_ptr@VHttpProvider@mipns@@@3@AEBV?$shared_ptr@VTelemetryContext@mipns@@@3@@Z
?CreateHttpRequest@mipns@@YA?AV?$shared_ptr@VHttpRequestBase@mipns@@@std@@AEBVHttpRequestBase@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?CreateHttpRequest@mipns@@YA?AV?$shared_ptr@VHttpRequestBase@mipns@@@std@@W4TransportLayerSecurityMinimumVersion@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@W4HttpRequestType@1@1@Z
?CreateMipContext@mipns@@YA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBV?$shared_ptr@$$CBVMipConfiguration@mipns@@@3@@Z
?CreateOneDSAriaHelper@mipns@@YA?AV?$shared_ptr@VOneDSAriaHelper@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@AEBUDiagnosticConfiguration@1@AEBV?$shared_ptr@VCloudManager@mipns@@@3@@Z
?CreatePersistentStore@mipns@@YA?AV?$unique_ptr@VPersistentStore@mipns@@U?$default_delete@VPersistentStore@mipns@@@std@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@3@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@W4MipComponent@1@1AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@33AEBV?$shared_ptr@VStorageDelegate@mipns@@@3@_N@Z
?CreateRedirectRequestTransformer@mipns@@YA?AV?$shared_ptr@VRequestTransformer@mipns@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@3@AEBVIdentity@1@AEBV?$shared_ptr@VRedirectProvider@mipns@@@3@AEBV?$shared_ptr@VHttpProvider@mipns@@@3@@Z
?CreateStreamFromBuffer@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@PEAE_J@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_iostream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_istream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_ostream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateTelemetryContext@mipns@@YA?AV?$shared_ptr@VTelemetryContext@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@0AEBV?$shared_ptr@VEventContext@mipns@@@3@AEBV23@@Z
?CreateTelemetryEvent@mipns@@YA?AV?$shared_ptr@VTelemetryEvent@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@W4EventLevel@1@@Z
?CreateTelemetryManager@mipns@@YA?AV?$shared_ptr@VTelemetryManager@mipns@@@std@@AEBUDiagnosticConfiguration@1@V?$shared_ptr@VTelemetryDelegate@mipns@@@3@1@Z
?CreateTelemetrySchemaValidator@mipns@@YA?AV?$shared_ptr@VTelemetrySchemaValidator@mipns@@@std@@_N@Z
?CreateUri@mipns@@YA?AV?$unique_ptr@VUri@mipns@@U?$default_delete@VUri@mipns@@@std@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?CreateWithCustomFeatureSettings@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@AEBV?$map@W4FlightingFeature@mipns@@_NU?$less@W4FlightingFeature@mipns@@@std@@V?$allocator@U?$pair@$$CBW4FlightingFeature@mipns@@_N@std@@@4@@4@@Z
?DecryptBuffer@bufferprotector@mipns@@YA_JAEBVCryptoDelegate@2@W4CipherMode@2@AEBVCryptoKey@2@2_JPEBE3PEAE3_NAEBV?$vector@U?$ByteData@_J@mipns@@V?$allocator@U?$ByteData@_J@mipns@@@std@@@std@@@Z
?DecryptBuffer@bufferprotector@mipns@@YA_JAEBVCryptoDelegate@2@W4CipherMode@2@AEBVCryptoKey@2@_JPEBE3PEAE3_N@Z
?EncryptBuffer@bufferprotector@mipns@@YA_JAEBVCryptoDelegate@2@W4CipherMode@2@AEBVCryptoKey@2@2_JPEBE3PEAE3_NAEAV?$vector@V?$vector@EV?$allocator@E@std@@@std@@V?$allocator@V?$vector@EV?$allocator@E@std@@@std@@@2@@std@@@Z
?EncryptBuffer@bufferprotector@mipns@@YA_JAEBVCryptoDelegate@2@W4CipherMode@2@AEBVCryptoKey@2@_JPEBE3PEAE3_N@Z
?GenerateAESKey@mipns@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVCryptoDelegate@1@@Z
?GenerateAESKeyAsBytes@mipns@@YA?AV?$vector@EV?$allocator@E@std@@@std@@AEBVCryptoDelegate@1@I@Z
?GetContext@ApiContextStorage@mipns@@SA?AV?$shared_ptr@VApiContext@mipns@@@std@@XZ
?GetCryptoDelegate@mipns@@YA?AV?$shared_ptr@VCryptoDelegate@mipns@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@3@@Z
?GetHashSize@mipns@@YA_KW4CryptoHashAlgorithm@1@@Z
?GetLogLevel@logger@mipns@@YA?AW4LogLevel@2@XZ
?GetLoggerDelegateInstance@logger@mipns@@YAAEBV?$shared_ptr@VLoggerDelegate@mipns@@@std@@XZ
?GetSanitizedUrl@mipns@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV23@@Z
?IsMipCoreLite@mipns@@YA_NXZ
?IsValidAesKey@mipns@@YA_NAEBVCryptoKey@1@@Z
?RemoveContext@ApiContextStorage@mipns@@SAXV?$shared_ptr@VApiContext@mipns@@@std@@@Z
?SetLastError@mipns@@YAXV?$shared_ptr@VDelegateResponseError@mipns@@@std@@@Z
?SetLogLevel@logger@mipns@@YAXW4LogLevel@2@@Z
?SetLoggerDelegateInstance@logger@mipns@@YAXAEBV?$shared_ptr@VLoggerDelegate@mipns@@@std@@@Z
?SetOneDSHttpDelegate@mipns@@YAXAEBV?$shared_ptr@VHttpDelegate@mipns@@@std@@@Z
?SetOneDSIsTls12Enforced@mipns@@YAX_N@Z
?SetOneDSTaskDispatcherDelegate@mipns@@YAXAEBV?$shared_ptr@VTaskDispatcherDelegate@mipns@@@std@@@Z
MIP_CC_CreateDictionary
MIP_CC_CreateHttpDelegate
MIP_CC_CreateLoggerDelegate
MIP_CC_CreateLoggerDelegateMessageData
MIP_CC_CreateMipContext
MIP_CC_CreateMipContextWithCustomFeatureSettings
MIP_CC_CreateProtectionDescriptorFromTemplate
MIP_CC_CreateProtectionDescriptorFromUserRights
MIP_CC_CreateProtectionDescriptorFromUserRoles
MIP_CC_CreateStream
MIP_CC_CreateStringList
MIP_CC_CreateTaskDispatcherDelegate
MIP_CC_CreateTelemetryConfiguration
MIP_CC_Dictionary_GetEntries
MIP_CC_ExecuteDispatchedTask
MIP_CC_NotifyHttpDelegateResponse
MIP_CC_ProtectionDescriptor_DoesAllowOfflineAccess
MIP_CC_ProtectionDescriptor_DoesContentExpire
MIP_CC_ProtectionDescriptor_GetContentId
MIP_CC_ProtectionDescriptor_GetContentValidUntil
MIP_CC_ProtectionDescriptor_GetDescription
MIP_CC_ProtectionDescriptor_GetDescriptionSize
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrl
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrlSize
MIP_CC_ProtectionDescriptor_GetLabelId
MIP_CC_ProtectionDescriptor_GetName
MIP_CC_ProtectionDescriptor_GetNameSize
MIP_CC_ProtectionDescriptor_GetOwner
MIP_CC_ProtectionDescriptor_GetOwnerSize
MIP_CC_ProtectionDescriptor_GetProtectionType
MIP_CC_ProtectionDescriptor_GetReferrer
MIP_CC_ProtectionDescriptor_GetReferrerSize
MIP_CC_ProtectionDescriptor_GetTemplateId
MIP_CC_ReleaseDictionary
MIP_CC_ReleaseHttpDelegate
MIP_CC_ReleaseLoggerDelegate
MIP_CC_ReleaseMipContext
MIP_CC_ReleaseProtectionDescriptor
MIP_CC_ReleaseStream
MIP_CC_ReleaseStringList
MIP_CC_ReleaseTaskDispatcherDelegate
MIP_CC_ReleaseTelemetryConfiguration
MIP_CC_StringList_GetStrings
MIP_CC_TelemetryConfiguration_AddMaskedProperty
MIP_CC_TelemetryConfiguration_SetCustomSettings
MIP_CC_TelemetryConfiguration_SetHostName
MIP_CC_TelemetryConfiguration_SetHttpDelegate
MIP_CC_TelemetryConfiguration_SetIsFastShutdownEnabled
MIP_CC_TelemetryConfiguration_SetIsLocalCachingEnabled
MIP_CC_TelemetryConfiguration_SetIsNetworkDetectionEnabled
MIP_CC_TelemetryConfiguration_SetIsTelemetryOptedOut
MIP_CC_TelemetryConfiguration_SetIsTraceLoggingEnabled
MIP_CC_TelemetryConfiguration_SetLibraryName
MIP_CC_TelemetryConfiguration_SetTaskDispatcherDelegate

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1001KB - Virtual size: 1001KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/mip_protection_sdk.dll
.dll windows:6 windows x64

7aba416bbb11a0a5469a0ceb5920c866

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

10:ac:84:4f:cd:f8:c8:9a:96:a9:81:b3:e3:67:97:23:96:18:13:6d:1a:48:58:d8:1b:82:16:96:90:0f:e3:5a
Signer

Actual PE Digest

10:ac:84:4f:cd:f8:c8:9a:96:a9:81:b3:e3:67:97:23:96:18:13:6d:1a:48:58:d8:1b:82:16:96:90:0f:e3:5a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

rpcrt4

UuidCreate

msvcp140

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
_Query_perf_counter
_Query_perf_frequency
_Mtx_current_owns
_Cnd_timedwait
?_Throw_Cpp_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
_Thrd_id
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
_Cnd_signal
_Thrd_join
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
??0codecvt_base@std@@QEAA@_K@Z
??1codecvt_base@std@@UEAA@XZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?do_encoding@codecvt_base@std@@MEBAHXZ
?do_max_length@codecvt_base@std@@MEBAHXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?exceptions@ios_base@std@@QEAAXH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?_Xbad_function_call@std@@YAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Throw_C_error@std@@YAXH@Z
_Cnd_broadcast
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
_Xtime_get_ticks
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

kernel32

InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
InitOnceComplete
InitOnceBeginInitialize
LoadLibraryExA
GetProcAddress
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
GetModuleHandleW
GetVersion
GetCurrentProcessId
GetLastError
GetCurrentThreadId
RaiseException
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
QueryPerformanceCounter

vcruntime140

_purecall
__std_terminate
memcmp
memcpy
memmove
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
memchr
memset
strstr
__C_specific_handler
__current_exception
__current_exception_context

vcruntime140_1

__CxxFrameHandler4

Exports

Exports

?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@@Z
?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBV?$shared_ptr@$$CBVMipConfiguration@mipns@@@4@@Z
?Create@ParsedPublishingLicenseBuilder@mipns@@SA?AV?$shared_ptr@VParsedPublishingLicenseBuilder@mipns@@@std@@XZ
?CreateDelegationLicenseSettings@DelegationLicenseSettings@mipns@@SA?AV?$shared_ptr@VDelegationLicenseSettings@mipns@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@4@AEBVPublishingLicenseInfo@2@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@_N@Z
?CreateDelegationLicenseSettings@DelegationLicenseSettings@mipns@@SA?AV?$shared_ptr@VDelegationLicenseSettings@mipns@@@std@@AEBVPublishingLicenseInfo@2@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@_N@Z
?CreateFromLicenseType@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@W4LicenseType@12@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@AEBV?$vector@VUserRights@mipns@@V?$allocator@VUserRights@mipns@@@std@@@4@@Z
?CreateFromProtectionDescriptor@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBVProtectionDescriptor@2@@Z
?CreateFromSerializedTemplate@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$vector@EV?$allocator@E@std@@@4@@Z
?CreateFromTemplate@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?CreateFromUserRights@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$vector@VUserRights@mipns@@V?$allocator@VUserRights@mipns@@@std@@@4@@Z
?CreateFromUserRoles@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$vector@VUserRoles@mipns@@V?$allocator@VUserRoles@mipns@@@std@@@4@@Z
?CreateGetTemplatesSettings@GetTemplatesSettings@mipns@@SA?AV?$shared_ptr@VGetTemplatesSettings@mipns@@@std@@XZ
?CreatePublishingUseLicenseRequest@PublishingUseLicenseRequest@mipns@@SA?AV?$shared_ptr@VPublishingUseLicenseRequest@mipns@@@std@@XZ
?CreateStreamFromBuffer@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@PEAE_J@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_iostream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_istream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_ostream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateWithCustomFeatureSettings@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@AEBV?$map@W4FlightingFeature@mipns@@_NU?$less@W4FlightingFeature@mipns@@@std@@V?$allocator@U?$pair@$$CBW4FlightingFeature@mipns@@_N@std@@@4@@4@@Z
?GetBlockSize@CustomProtectedStream@mipns@@SA_JV?$shared_ptr@VProtectionHandler@mipns@@@std@@@Z
?GetPublishingLicenseInfo@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VPublishingLicenseInfo@mipns@@@std@@AEBV?$vector@EV?$allocator@E@std@@@4@@Z
?GetPublishingLicenseInfo@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VPublishingLicenseInfo@mipns@@@std@@AEBV?$vector@EV?$allocator@E@std@@@4@AEBV?$shared_ptr@VMipContext@mipns@@@4@@Z
?GetVersion@ProtectionProfile@mipns@@SAPEBDXZ
?Load@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VProtectionProfile@mipns@@@std@@AEBVSettings@12@@Z
?LoadAsync@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VAsyncControl@mipns@@@std@@AEBVSettings@12@AEBV?$shared_ptr@X@4@@Z
MIP_CC_CreateDictionary
MIP_CC_CreateHttpDelegate
MIP_CC_CreateLoggerDelegate
MIP_CC_CreateLoggerDelegateMessageData
MIP_CC_CreateMipContext
MIP_CC_CreateMipContextWithCustomFeatureSettings
MIP_CC_CreateProtectionDescriptorFromTemplate
MIP_CC_CreateProtectionDescriptorFromUserRights
MIP_CC_CreateProtectionDescriptorFromUserRoles
MIP_CC_CreateProtectionEngineSettingsWithEngineId
MIP_CC_CreateProtectionEngineSettingsWithEngineIdAndAuthCallback
MIP_CC_CreateProtectionEngineSettingsWithIdentity
MIP_CC_CreateProtectionEngineSettingsWithIdentityAndAuthCallback
MIP_CC_CreateProtectionHandlerConsumptionSettings
MIP_CC_CreateProtectionHandlerConsumptionSettingsWithPreLicense
MIP_CC_CreateProtectionHandlerPublishingSettings
MIP_CC_CreateProtectionProfileSettings
MIP_CC_CreateStream
MIP_CC_CreateStringList
MIP_CC_CreateTaskDispatcherDelegate
MIP_CC_CreateTelemetryConfiguration
MIP_CC_Dictionary_GetEntries
MIP_CC_ExecuteDispatchedTask
MIP_CC_LoadProtectionProfile
MIP_CC_NotifyHttpDelegateResponse
MIP_CC_ProtectionDescriptor_DoesAllowOfflineAccess
MIP_CC_ProtectionDescriptor_DoesContentExpire
MIP_CC_ProtectionDescriptor_GetContentId
MIP_CC_ProtectionDescriptor_GetContentValidUntil
MIP_CC_ProtectionDescriptor_GetDescription
MIP_CC_ProtectionDescriptor_GetDescriptionSize
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrl
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrlSize
MIP_CC_ProtectionDescriptor_GetLabelId
MIP_CC_ProtectionDescriptor_GetName
MIP_CC_ProtectionDescriptor_GetNameSize
MIP_CC_ProtectionDescriptor_GetOwner
MIP_CC_ProtectionDescriptor_GetOwnerSize
MIP_CC_ProtectionDescriptor_GetProtectionType
MIP_CC_ProtectionDescriptor_GetReferrer
MIP_CC_ProtectionDescriptor_GetReferrerSize
MIP_CC_ProtectionDescriptor_GetTemplateId
MIP_CC_ProtectionEngineSettings_SetAllowCloudServiceOnly
MIP_CC_ProtectionEngineSettings_SetClientData
MIP_CC_ProtectionEngineSettings_SetCloud
MIP_CC_ProtectionEngineSettings_SetCloudEndpointBaseUrl
MIP_CC_ProtectionEngineSettings_SetCustomSettings
MIP_CC_ProtectionEngineSettings_SetSessionId
MIP_CC_ProtectionEngineSettings_SetTemplateRefreshArgs
MIP_CC_ProtectionEngineSettings_SetUnderlyingApplicationId
MIP_CC_ProtectionEngine_CreateProtectionHandlerForConsumption
MIP_CC_ProtectionEngine_CreateProtectionHandlerForPublishing
MIP_CC_ProtectionEngine_GetClientData
MIP_CC_ProtectionEngine_GetClientDataSize
MIP_CC_ProtectionEngine_GetEngineId
MIP_CC_ProtectionEngine_GetEngineIdSize
MIP_CC_ProtectionEngine_GetRightsForLabelId
MIP_CC_ProtectionEngine_GetTemplates
MIP_CC_ProtectionEngine_GetTemplatesSize
MIP_CC_ProtectionHandlerConsumptionSettings_SetDelegatedUserEmail
MIP_CC_ProtectionHandlerConsumptionSettings_SetIsOfflineOnly
MIP_CC_ProtectionHandlerPublishingSettings_SetDelegatedUserEmail
MIP_CC_ProtectionHandlerPublishingSettings_SetIsAuditedExtractionAllowed
MIP_CC_ProtectionHandlerPublishingSettings_SetIsDeprecatedAlgorithmPreferred
MIP_CC_ProtectionHandlerPublishingSettings_SetIsPublishingFormatJson
MIP_CC_ProtectionHandlerPublishingSettings_SetPreLicenseUserEmail
MIP_CC_ProtectionHandler_DecryptBuffer
MIP_CC_ProtectionHandler_DoesUseDeprecatedAlgorithm
MIP_CC_ProtectionHandler_EncryptBuffer
MIP_CC_ProtectionHandler_GetBlockSize
MIP_CC_ProtectionHandler_GetCipherMode
MIP_CC_ProtectionHandler_GetContentId
MIP_CC_ProtectionHandler_GetIssuedUser
MIP_CC_ProtectionHandler_GetIssuedUserSize
MIP_CC_ProtectionHandler_GetOwner
MIP_CC_ProtectionHandler_GetOwnerSize
MIP_CC_ProtectionHandler_GetProtectedContentSize
MIP_CC_ProtectionHandler_GetProtectionDescriptor
MIP_CC_ProtectionHandler_GetRights
MIP_CC_ProtectionHandler_GetSerializedPreLicense
MIP_CC_ProtectionHandler_GetSerializedPreLicenseSize
MIP_CC_ProtectionHandler_GetSerializedPublishingLicense
MIP_CC_ProtectionHandler_GetSerializedPublishingLicenseSize
MIP_CC_ProtectionProfileSettings_SetCanCacheLicenses
MIP_CC_ProtectionProfileSettings_SetCustomSettings
MIP_CC_ProtectionProfileSettings_SetHttpDelegate
MIP_CC_ProtectionProfileSettings_SetSessionId
MIP_CC_ProtectionProfileSettings_SetTaskDispatcherDelegate
MIP_CC_ProtectionProfile_AddEngine
MIP_CC_ReleaseDictionary
MIP_CC_ReleaseHttpDelegate
MIP_CC_ReleaseLoggerDelegate
MIP_CC_ReleaseMipContext
MIP_CC_ReleaseProtectionDescriptor
MIP_CC_ReleaseProtectionEngine
MIP_CC_ReleaseProtectionEngineSettings
MIP_CC_ReleaseProtectionHandler
MIP_CC_ReleaseProtectionHandlerConsumptionSettings
MIP_CC_ReleaseProtectionHandlerPublishingSettings
MIP_CC_ReleaseProtectionProfile
MIP_CC_ReleaseProtectionProfileSettings
MIP_CC_ReleaseStream
MIP_CC_ReleaseStringList
MIP_CC_ReleaseTaskDispatcherDelegate
MIP_CC_ReleaseTelemetryConfiguration
MIP_CC_ReleaseTemplateDescriptor
MIP_CC_StringList_GetStrings
MIP_CC_TelemetryConfiguration_AddMaskedProperty
MIP_CC_TelemetryConfiguration_SetCustomSettings
MIP_CC_TelemetryConfiguration_SetHostName
MIP_CC_TelemetryConfiguration_SetHttpDelegate
MIP_CC_TelemetryConfiguration_SetIsFastShutdownEnabled
MIP_CC_TelemetryConfiguration_SetIsLocalCachingEnabled
MIP_CC_TelemetryConfiguration_SetIsNetworkDetectionEnabled
MIP_CC_TelemetryConfiguration_SetIsTelemetryOptedOut
MIP_CC_TelemetryConfiguration_SetIsTraceLoggingEnabled
MIP_CC_TelemetryConfiguration_SetLibraryName
MIP_CC_TelemetryConfiguration_SetTaskDispatcherDelegate
MIP_CC_TemplateDescriptor_GetDescription
MIP_CC_TemplateDescriptor_GetDescriptionSize
MIP_CC_TemplateDescriptor_GetId
MIP_CC_TemplateDescriptor_GetName
MIP_CC_TemplateDescriptor_GetNameSize

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 458KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/mip_upe_sdk.dll
.dll windows:6 windows x64

e93e6d5783388f0ebc4dc15b244bfa07

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:26:89:b6:fb:71:be:ba:74:6d:8b:46:58:3e:89:fe:91:52:6b:f3:69:62:75:df:b7:c9:35:de:ac:b2:f3:a5
Signer

Actual PE Digest

05:26:89:b6:fb:71:be:ba:74:6d:8b:46:58:3e:89:fe:91:52:6b:f3:69:62:75:df:b7:c9:35:de:ac:b2:f3:a5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

rpcrt4

UuidCreate

msvcp140

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Mtx_current_owns
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_timedwait
_Cnd_broadcast
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Strcoll
_Strxfrm
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??Bid@locale@std@@QEAA_KXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
_Thrd_id
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
_Thrd_join
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xbad_alloc@std@@YAXXZ
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
_Cnd_signal
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ

kernel32

InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
LoadLibraryExA
GetProcAddress
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
GetModuleHandleW
GetModuleFileNameA
GetVersion
GetComputerNameExW
GetCurrentProcessId
GetLastError
GetCurrentThreadId
RaiseException
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
QueryPerformanceCounter

vcruntime140

_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
memcmp
memcpy
memmove
_CxxThrowException
__std_type_info_destroy_list
memchr
__std_type_info_compare
memset
strchr
__C_specific_handler
__current_exception
__current_exception_context

vcruntime140_1

__CxxFrameHandler4

Exports

Exports

?Create@ComputeEngine@mipns@@SA?AV?$shared_ptr@VComputeEngine@mipns@@@std@@AEBVSyncFilePolicyData@2@AEBVSettings@12@@Z
?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@@Z
?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBV?$shared_ptr@$$CBVMipConfiguration@mipns@@@4@@Z
?CreateContext@ComputeEngine@mipns@@SA?AV?$shared_ptr@VComputeEngineContext@mipns@@@std@@AEBV?$map@W4FlightingFeature@mipns@@_NU?$less@W4FlightingFeature@mipns@@@std@@V?$allocator@U?$pair@$$CBW4FlightingFeature@mipns@@_N@std@@@4@@4@_N@Z
?CreateWithCustomFeatureSettings@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@AEBV?$map@W4FlightingFeature@mipns@@_NU?$less@W4FlightingFeature@mipns@@@std@@V?$allocator@U?$pair@$$CBW4FlightingFeature@mipns@@_N@std@@@4@@4@@Z
?GetVersion@PolicyProfile@mipns@@SAPEBDXZ
?IsLabeled@PolicyHandler@mipns@@SA_NAEBV?$vector@VMetadataEntry@mipns@@V?$allocator@VMetadataEntry@mipns@@@std@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@4@@Z
?IsLabeled@PolicyHandler@mipns@@SA_NAEBV?$vector@VMetadataEntry@mipns@@V?$allocator@VMetadataEntry@mipns@@@std@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@4@AEBV?$shared_ptr@X@4@@Z
?Load@PolicyProfile@mipns@@SA?AV?$shared_ptr@VPolicyProfile@mipns@@@std@@AEBVSettings@12@@Z
?LoadAsync@PolicyProfile@mipns@@SA?AV?$shared_ptr@VAsyncControl@mipns@@@std@@AEBVSettings@12@AEBV?$shared_ptr@X@4@@Z
MIP_CC_ActionResult_GetActions
MIP_CC_Action_GetId
MIP_CC_Action_GetType
MIP_CC_AddContentFooterAction_GetAlignment
MIP_CC_AddContentFooterAction_GetFontColor
MIP_CC_AddContentFooterAction_GetFontColorSize
MIP_CC_AddContentFooterAction_GetFontName
MIP_CC_AddContentFooterAction_GetFontNameSize
MIP_CC_AddContentFooterAction_GetFontSize
MIP_CC_AddContentFooterAction_GetMargin
MIP_CC_AddContentFooterAction_GetText
MIP_CC_AddContentFooterAction_GetTextSize
MIP_CC_AddContentFooterAction_GetUIElementName
MIP_CC_AddContentFooterAction_GetUIElementNameSize
MIP_CC_AddContentHeaderAction_GetAlignment
MIP_CC_AddContentHeaderAction_GetFontColor
MIP_CC_AddContentHeaderAction_GetFontColorSize
MIP_CC_AddContentHeaderAction_GetFontName
MIP_CC_AddContentHeaderAction_GetFontNameSize
MIP_CC_AddContentHeaderAction_GetFontSize
MIP_CC_AddContentHeaderAction_GetMargin
MIP_CC_AddContentHeaderAction_GetText
MIP_CC_AddContentHeaderAction_GetTextSize
MIP_CC_AddContentHeaderAction_GetUIElementName
MIP_CC_AddContentHeaderAction_GetUIElementNameSize
MIP_CC_AddWatermarkAction_GetFontColor
MIP_CC_AddWatermarkAction_GetFontColorSize
MIP_CC_AddWatermarkAction_GetFontName
MIP_CC_AddWatermarkAction_GetFontNameSize
MIP_CC_AddWatermarkAction_GetFontSize
MIP_CC_AddWatermarkAction_GetLayout
MIP_CC_AddWatermarkAction_GetText
MIP_CC_AddWatermarkAction_GetTextSize
MIP_CC_AddWatermarkAction_GetUIElementName
MIP_CC_AddWatermarkAction_GetUIElementNameSize
MIP_CC_ContentLabel_GetAssignmentMethod
MIP_CC_ContentLabel_GetCreationTime
MIP_CC_ContentLabel_GetExtendedProperties
MIP_CC_ContentLabel_GetLabel
MIP_CC_ContentLabel_IsProtectionAppliedFromLabel
MIP_CC_CreateDictionary
MIP_CC_CreateHttpDelegate
MIP_CC_CreateLoggerDelegate
MIP_CC_CreateLoggerDelegateMessageData
MIP_CC_CreateMetadataDictionary
MIP_CC_CreateMipContext
MIP_CC_CreateMipContextWithCustomFeatureSettings
MIP_CC_CreatePolicyEngineSettingsWithEngineId
MIP_CC_CreatePolicyEngineSettingsWithEngineIdAndAuthCallback
MIP_CC_CreatePolicyEngineSettingsWithIdentity
MIP_CC_CreatePolicyEngineSettingsWithIdentityAndAuthCallback
MIP_CC_CreatePolicyProfileSettings
MIP_CC_CreateProtectionDescriptorFromTemplate
MIP_CC_CreateProtectionDescriptorFromUserRights
MIP_CC_CreateProtectionDescriptorFromUserRoles
MIP_CC_CreateStream
MIP_CC_CreateStringList
MIP_CC_CreateTaskDispatcherDelegate
MIP_CC_CreateTelemetryConfiguration
MIP_CC_CustomAction_GetName
MIP_CC_CustomAction_GetNameSize
MIP_CC_CustomAction_GetProperties
MIP_CC_Dictionary_GetEntries
MIP_CC_ExecuteDispatchedTask
MIP_CC_Label_GetAutoTooltip
MIP_CC_Label_GetAutoTooltipSize
MIP_CC_Label_GetChildren
MIP_CC_Label_GetChildrenSize
MIP_CC_Label_GetColor
MIP_CC_Label_GetColorSize
MIP_CC_Label_GetCustomSettings
MIP_CC_Label_GetDescription
MIP_CC_Label_GetDescriptionSize
MIP_CC_Label_GetId
MIP_CC_Label_GetName
MIP_CC_Label_GetNameSize
MIP_CC_Label_GetParent
MIP_CC_Label_GetSensitivity
MIP_CC_Label_GetTooltip
MIP_CC_Label_GetTooltipSize
MIP_CC_Label_IsActive
MIP_CC_LoadPolicyProfile
MIP_CC_MetadataAction_GetMetadataToAdd
MIP_CC_MetadataAction_GetMetadataToRemove
MIP_CC_MetadataDictionary_GetEntries
MIP_CC_NotifyHttpDelegateResponse
MIP_CC_PolicyEngineSettings_ConfigureFunctionality
MIP_CC_PolicyEngineSettings_SetClientData
MIP_CC_PolicyEngineSettings_SetCloud
MIP_CC_PolicyEngineSettings_SetCloudEndpointBaseUrl
MIP_CC_PolicyEngineSettings_SetCustomSettings
MIP_CC_PolicyEngineSettings_SetDelegatedUserEmail
MIP_CC_PolicyEngineSettings_SetLabelFilter
MIP_CC_PolicyEngineSettings_SetSessionId
MIP_CC_PolicyEngine_CreatePolicyHandler
MIP_CC_PolicyEngine_GetClientData
MIP_CC_PolicyEngine_GetClientDataSize
MIP_CC_PolicyEngine_GetEngineId
MIP_CC_PolicyEngine_GetEngineIdSize
MIP_CC_PolicyEngine_GetLabelById
MIP_CC_PolicyEngine_GetLastPolicyFetchTime
MIP_CC_PolicyEngine_GetMoreInfoUrl
MIP_CC_PolicyEngine_GetMoreInfoUrlSize
MIP_CC_PolicyEngine_GetPolicyDataXml
MIP_CC_PolicyEngine_GetPolicyDataXmlSize
MIP_CC_PolicyEngine_GetPolicyFileId
MIP_CC_PolicyEngine_GetPolicyFileIdSize
MIP_CC_PolicyEngine_GetSensitivityFileId
MIP_CC_PolicyEngine_GetSensitivityFileIdSize
MIP_CC_PolicyEngine_GetSensitivityLabels
MIP_CC_PolicyEngine_GetSensitivityLabelsSize
MIP_CC_PolicyEngine_GetSensitivityTypes
MIP_CC_PolicyEngine_GetSensitivityTypesDataXml
MIP_CC_PolicyEngine_GetSensitivityTypesDataXmlSize
MIP_CC_PolicyEngine_GetSensitivityTypesSize
MIP_CC_PolicyEngine_GetTenantId
MIP_CC_PolicyEngine_GetTenantIdSize
MIP_CC_PolicyEngine_HasClassificationRules
MIP_CC_PolicyEngine_HasWorkloadConsent
MIP_CC_PolicyEngine_IsDowngradeJustificationRequired
MIP_CC_PolicyEngine_IsLabelingRequired
MIP_CC_PolicyEngine_SendApplicationAuditEvent
MIP_CC_PolicyHandler_ComputeActions
MIP_CC_PolicyHandler_GetSensitivityLabel
MIP_CC_PolicyHandler_NotifyCommittedActions
MIP_CC_PolicyProfileSettings_SetCustomSettings
MIP_CC_PolicyProfileSettings_SetHttpDelegate
MIP_CC_PolicyProfileSettings_SetSessionId
MIP_CC_PolicyProfileSettings_SetTaskDispatcherDelegate
MIP_CC_PolicyProfile_AcquireAuthToken
MIP_CC_PolicyProfile_AddEngine
MIP_CC_ProtectAdhocDkAction_GetDoubleKeyEncryptionUrl
MIP_CC_ProtectAdhocDkAction_GetDoubleKeyEncryptionUrlSize
MIP_CC_ProtectByEncryptOnlyAction_GetTemplateId
MIP_CC_ProtectByTemplateAction_GetDoubleKeyEncryptionUrl
MIP_CC_ProtectByTemplateAction_GetDoubleKeyEncryptionUrlSize
MIP_CC_ProtectByTemplateAction_GetTemplateId
MIP_CC_ProtectByTemplateAction_IsDoubleKey
MIP_CC_ProtectDoNotForwardDkAction_GetDoubleKeyEncryptionUrl
MIP_CC_ProtectDoNotForwardDkAction_GetDoubleKeyEncryptionUrlSize
MIP_CC_ProtectionDescriptor_DoesAllowOfflineAccess
MIP_CC_ProtectionDescriptor_DoesContentExpire
MIP_CC_ProtectionDescriptor_GetContentId
MIP_CC_ProtectionDescriptor_GetContentValidUntil
MIP_CC_ProtectionDescriptor_GetDescription
MIP_CC_ProtectionDescriptor_GetDescriptionSize
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrl
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrlSize
MIP_CC_ProtectionDescriptor_GetLabelId
MIP_CC_ProtectionDescriptor_GetName
MIP_CC_ProtectionDescriptor_GetNameSize
MIP_CC_ProtectionDescriptor_GetOwner
MIP_CC_ProtectionDescriptor_GetOwnerSize
MIP_CC_ProtectionDescriptor_GetProtectionType
MIP_CC_ProtectionDescriptor_GetReferrer
MIP_CC_ProtectionDescriptor_GetReferrerSize
MIP_CC_ProtectionDescriptor_GetTemplateId
MIP_CC_ReleaseActionResult
MIP_CC_ReleaseContentLabel
MIP_CC_ReleaseDictionary
MIP_CC_ReleaseHttpDelegate
MIP_CC_ReleaseLabel
MIP_CC_ReleaseLoggerDelegate
MIP_CC_ReleaseMetadataDictionary
MIP_CC_ReleaseMipContext
MIP_CC_ReleasePolicyEngine
MIP_CC_ReleasePolicyEngineSettings
MIP_CC_ReleasePolicyHandler
MIP_CC_ReleasePolicyProfile
MIP_CC_ReleasePolicyProfileSettings
MIP_CC_ReleaseProtectionDescriptor
MIP_CC_ReleaseSensitivityType
MIP_CC_ReleaseStream
MIP_CC_ReleaseStringList
MIP_CC_ReleaseTaskDispatcherDelegate
MIP_CC_ReleaseTelemetryConfiguration
MIP_CC_RemoveContentFooterAction_GetUIElementNames
MIP_CC_RemoveContentHeaderAction_GetUIElementNames
MIP_CC_RemoveWatermarkAction_GetUIElementNames
MIP_CC_SensitivityType_GetRulePackage
MIP_CC_SensitivityType_GetRulePackageId
MIP_CC_SensitivityType_GetRulePackageIdSize
MIP_CC_SensitivityType_GetRulePackageSize
MIP_CC_StringList_GetStrings
MIP_CC_TelemetryConfiguration_AddMaskedProperty
MIP_CC_TelemetryConfiguration_SetCustomSettings
MIP_CC_TelemetryConfiguration_SetHostName
MIP_CC_TelemetryConfiguration_SetHttpDelegate
MIP_CC_TelemetryConfiguration_SetIsFastShutdownEnabled
MIP_CC_TelemetryConfiguration_SetIsLocalCachingEnabled
MIP_CC_TelemetryConfiguration_SetIsNetworkDetectionEnabled
MIP_CC_TelemetryConfiguration_SetIsTelemetryOptedOut
MIP_CC_TelemetryConfiguration_SetIsTraceLoggingEnabled
MIP_CC_TelemetryConfiguration_SetLibraryName
MIP_CC_TelemetryConfiguration_SetTaskDispatcherDelegate

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/pi_brokers/32BitMAPIBroker.exe
.exe windows:6 windows x86

091a0fc8d558b447568ec3029a7b24d9

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ab:4e:ef:ae:b4:3e:5e:e0:81:be:9d:80:47:d9:e9:03:44:00:38:66:75:4a:e1:1c:5c:17:9f:28:0c:16:a2:9d
Signer

Actual PE Digest

ab:4e:ef:ae:b4:3e:5e:e0:81:be:9d:80:47:d9:e9:03:44:00:38:66:75:4a:e1:1c:5c:17:9f:28:0c:16:a2:9d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CreateFileW
DisconnectNamedPipe
CreateEventW
GetLastError
SetEvent
CloseHandle
CreateThread
ResetEvent
GetProcAddress
LocalFree
DeleteCriticalSection
GetCurrentProcessId
GetModuleHandleW
TransactNamedPipe
GetFileType
CreateEventA
WaitNamedPipeW
ConnectNamedPipe
LocalAlloc
GetCurrentThreadId
VerSetConditionMask
VerifyVersionInfoW
CreateNamedPipeA
WaitForMultipleObjects
PeekNamedPipe
OpenProcess
GetOverlappedResult
CreateMutexW
InitializeCriticalSectionEx
LoadLibraryA
FreeLibrary
WideCharToMultiByte
Sleep
GetCommandLineA
MultiByteToWideChar
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateSemaphoreA
GetCurrentThread
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
ReadFile
InitializeCriticalSection
LeaveCriticalSection
CreateNamedPipeW
WriteFile
GetCurrentProcess
EnterCriticalSection
SetLastError
SetNamedPipeHandleState
FlushFileBuffers
OutputDebugStringW

user32

DispatchMessageA
GetMessageA
TranslateMessage

advapi32

GetTokenInformation
OpenProcessToken
OpenThreadToken
ConvertSidToStringSidA
ConvertStringSecurityDescriptorToSecurityDescriptorA

shell32

SHGetFileInfoW

ole32

CoWaitForMultipleHandles

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

memset
__current_exception
__current_exception_context
_except_handler4_common
_CxxThrowException
memchr
memmove
memcpy
__CxxFrameHandler3
memcmp
__std_terminate
__std_exception_destroy
__std_exception_copy
_purecall

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_register_onexit_function
_invalid_parameter_noinfo
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_c_exit
_register_thread_local_exe_atexit_callback
_errno
_invalid_parameter_noinfo_noreturn
terminate
_controlfp_s
_set_invalid_parameter_handler
_configure_wide_argv
_initialize_onexit_table

api-ms-win-crt-string-l1-1-0

strlen
wcslen
wcstok_s
wcscat_s
wcscpy_s
strtok_s

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath_s

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
_callnewh
malloc

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode
__stdio_common_vswscanf
__stdio_common_vsnwprintf_s

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/pi_brokers/64BitMAPIBroker.exe
.exe windows:6 windows x64

489ef533670b3d85b4af66aba61dcfa3

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b6:f5:58:96:1d:1e:61:b7:e2:b1:b8:6d:c6:6d:40:9a:6e:52:31:4c:bb:8a:f0:a1:58:b9:f6:7e:a6:5f:1b:7d
Signer

Actual PE Digest

b6:f5:58:96:1d:1e:61:b7:e2:b1:b8:6d:c6:6d:40:9a:6e:52:31:4c:bb:8a:f0:a1:58:b9:f6:7e:a6:5f:1b:7d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WaitForSingleObject
CreateFileW
DisconnectNamedPipe
CreateEventW
GetLastError
SetEvent
CloseHandle
CreateThread
ResetEvent
GetProcAddress
LocalFree
DeleteCriticalSection
GetCurrentProcessId
GetModuleHandleW
TransactNamedPipe
GetFileType
CreateEventA
WaitNamedPipeW
ConnectNamedPipe
LocalAlloc
GetCurrentThreadId
VerSetConditionMask
VerifyVersionInfoW
InitializeCriticalSectionEx
RaiseException
CreateMutexW
CreateNamedPipeA
WaitForMultipleObjects
PeekNamedPipe
OpenProcess
GetOverlappedResult
FlushFileBuffers
LoadLibraryA
FreeLibrary
WideCharToMultiByte
GetCommandLineA
Sleep
InitializeCriticalSection
LeaveCriticalSection
CreateNamedPipeW
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
HeapReAlloc
HeapSize
GetStringTypeW
SetStdHandle
GetProcessHeap
WriteFile
GetCurrentProcess
EnterCriticalSection
SetLastError
SetNamedPipeHandleState
ReadFile
LCMapStringW
MultiByteToWideChar
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateSemaphoreA
GetCurrentThread
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RtlUnwindEx
RtlPcToFileHeader
EncodePointer
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW

user32

GetMessageA
DispatchMessageA
TranslateMessage

advapi32

OpenProcessToken
GetTokenInformation
OpenThreadToken
ConvertSidToStringSidA
ConvertStringSecurityDescriptorToSecurityDescriptorA

shell32

SHGetFileInfoW

ole32

CoWaitForMultipleHandles

Sections

.text
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/pi_brokers/MSRMSPIBroker.exe
.exe windows:6 windows x64

6a59cbbd57f60f4e1ccfde5ec9312b9b

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f3:3c:da:21:a6:03:94:6f:94:df:b0:77:bc:21:11:aa:65:ad:c6:c4:ac:65:bd:c8:15:90:97:31:cb:32:e1:fe
Signer

Actual PE Digest

f3:3c:da:21:a6:03:94:6f:94:df:b0:77:bc:21:11:aa:65:ad:c6:c4:ac:65:bd:c8:15:90:97:31:cb:32:e1:fe

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateThread
OpenProcess
GetCommandLineW
GetModuleFileNameW
SetDllDirectoryW
ReadFile
WriteFile
DisconnectNamedPipe
GetLastError
GetOverlappedResult
ConnectNamedPipe
WaitForMultipleObjects
DuplicateHandle
Sleep
GetCurrentProcessId
GetTickCount
WaitNamedPipeW
GetSystemTimeAsFileTime
QueryPerformanceCounter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventA
ResetEvent
SetEvent
CreateNamedPipeW
OutputDebugStringA
GetCurrentProcess
CreateFileW
CloseHandle
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentThreadId
CreateEventW
WaitForSingleObjectEx
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExA
GetProcAddress
GetModuleHandleW
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
InitializeSListHead

user32

wsprintfW
PeekMessageA
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageA

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
InitiateSystemShutdownA

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

msvcp140

?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPEBD@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_current_owns
_Mtx_lock
_Mtx_unlock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_timedwait
_Cnd_broadcast
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xbad_function_call@std@@YAXXZ
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

vcruntime140

__std_exception_copy
__std_exception_destroy
_CxxThrowException
memmove
memset
_purecall
__std_terminate
memcmp
memcpy
wcsstr
__C_specific_handler
__current_exception
__current_exception_context
__std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback
_c_exit
_register_onexit_function
_initialize_onexit_table
_crt_atexit
_invalid_parameter_noinfo_noreturn
_exit
exit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_invalid_parameter_noinfo
_configure_wide_argv
_set_app_type
_seh_filter_exe
terminate
_cexit
_crt_at_quick_exit
_errno
_initterm_e

api-ms-win-crt-string-l1-1-0

strlen
strtok
wcslen

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__stdio_common_vsprintf
__p__commode

api-ms-win-crt-math-l1-1-0

_dtest
__setusermatherr
_dsign
ceilf

api-ms-win-crt-heap-l1-1-0

malloc
free
calloc
_set_new_mode
_callnewh

api-ms-win-crt-convert-l1-1-0

strtol
strtoull
strtod
strtoll
_wtol

api-ms-win-crt-locale-l1-1-0

localeconv
_configthreadlocale

Sections

.text
Size: 343KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msvcjmc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/reflow.api
.dll windows:6 windows x64

22cf5068c89072af570d6d2e8966cc20

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:f6:2a:0c:c7:2a:5d:0a:6c:65:2c:e0:1b:2f:68:fe:96:c5:68:61:9e:47:7e:76:09:d8:32:ae:aa:e9:3a:aa
Signer

Actual PE Digest

fe:f6:2a:0c:c7:2a:5d:0a:6c:65:2c:e0:1b:2f:68:fe:96:c5:68:61:9e:47:7e:76:09:d8:32:ae:aa:e9:3a:aa

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FindResourceA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
LockResource
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
InitializeSListHead
SizeofResource
LoadResource
FreeResource
GetModuleFileNameA

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z

vcruntime140

__std_terminate
__std_type_info_destroy_list
__current_exception_context
__current_exception
__C_specific_handler
strchr
__std_exception_destroy
__std_exception_copy
memchr
_CxxThrowException
strstr
memset
memmove
memcpy
memcmp

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strcmp
toupper
strncpy
strncmp
tolower
strlen

api-ms-win-crt-runtime-l1-1-0

terminate
_initterm_e
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vsscanf

api-ms-win-crt-math-l1-1-0

sqrt

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

Exports

Exports

PlugInMain

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins/weblink.api
.dll windows:6 windows x64

77058922cea9aa04a66422059c8df7ae

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

55:f3:a5:03:ed:27:7d:5a:e8:18:df:36:35:3d:9f:ca:fa:26:d4:a8:d0:bd:12:89:a6:33:08:3b:64:10:63:28
Signer

Actual PE Digest

55:f3:a5:03:ed:27:7d:5a:e8:18:df:36:35:3d:9f:ca:fa:26:d4:a8:d0:bd:12:89:a6:33:08:3b:64:10:63:28

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpynA
lstrcpyA
lstrcatA
lstrlenA
GetModuleFileNameA
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceA
GetTickCount
Sleep
CreateProcessA
CreateProcessW
WinExec
FindAtomW
VerSetConditionMask
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
InitializeSListHead
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
LoadLibraryA
GetProcAddress
VerifyVersionInfoW
GetModuleHandleExW
GetModuleHandleA
GetModuleFileNameW
SetLastError
GetLastError
DisableThreadLibraryCalls
OutputDebugStringA

user32

DdeCreateDataHandle
DdeInitializeW
MoveWindow
SetFocus
GetFocus
GetPropW
DdeClientTransaction
DdeQueryStringA
GetWindowTextA
DdeConnect
GetWindowThreadProcessId
EnumThreadWindows
SetForegroundWindow
DdeCmpStringHandles
SetPropW
DdeNameService
DdeDisconnect
DdeUninitialize
DdeInitializeA
DdeFreeStringHandle
DdeCreateStringHandleA
DdeGetData
LoadIconA
DdeGetLastError
DdeFreeDataHandle
DestroyIcon
DestroyCursor
LoadCursorA
GetSystemMetrics
GetWindowRect
wsprintfA
FindWindowA

advapi32

RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegQueryValueA
RegOpenKeyExA
RegCloseKey
RegOpenKeyA

shell32

ShellExecuteW
ShellExecuteExW
ShellExecuteA

ole32

CoCreateInstance

shlwapi

UrlIsW
StrStrIA
PathCreateFromUrlW
AssocQueryStringW
PathIsURLW
PathIsDirectoryW

ws2_32

gethostbyname
WSACleanup
WSAStartup

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z

vcruntime140

__std_type_info_destroy_list
__std_terminate
_purecall
memchr
strchr
__C_specific_handler
__std_exception_destroy
__std_exception_copy
memcmp
_CxxThrowException
strstr
strrchr
memset
memmove
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strpbrk
strncmp
strncat
strlen
_stricmp
wcsncpy
_strlwr
wcslen
isupper
strncpy_s
toupper
strncpy
tolower
_strnicmp
wcscpy_s
isalnum
isxdigit
isdigit
isalpha
strcmp

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_invalid_parameter_noinfo
_crt_atexit
_execute_onexit_table
_errno
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_initialize_onexit_table
_cexit
_initialize_narrow_environment
_set_invalid_parameter_handler
_initterm
_seh_filter_dll
_configure_narrow_argv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vsprintf

api-ms-win-crt-convert-l1-1-0

atof
atoi
atol
_fcvt

api-ms-win-crt-time-l1-1-0

_difftime64
_time64

api-ms-win-crt-multibyte-l1-1-0

_mbsstr
_mbscmp

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

Exports

Exports

PlugInMain

Sections

.text
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins3d/2d.x3d
.dll windows:6 windows x64

96b43c2360f3e699e31ff829aee77817

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1b:d8:85:74:38:58:86:07:5d:47:fd:3c:f6:0f:a9:3f:0f:cb:de:68:1f:88:03:32:8a:22:c4:7f:af:f4:05:08
Signer

Actual PE Digest

1b:d8:85:74:38:58:86:07:5d:47:fd:3c:f6:0f:a9:3f:0f:cb:de:68:1f:88:03:32:8a:22:c4:7f:af:f4:05:08

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
MultiByteToWideChar

vcruntime140

memcmp
memset
memcpy
_CxxThrowException
longjmp
__std_exception_destroy
_purecall
memmove
__std_exception_copy
__C_specific_handler
__intrinsic_setjmp
__std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vswprintf
__acrt_iob_func
ferror
__stdio_common_vfprintf
__stdio_common_vsprintf
fwrite
fflush
fclose
fread
fopen

api-ms-win-crt-string-l1-1-0

wcsncpy_s
wcscpy
wcslen
strcmp
_strnicmp
strlen
strcpy
_stricmp
strncpy
strncmp

api-ms-win-crt-heap-l1-1-0

_callnewh
realloc
malloc
free
calloc

api-ms-win-crt-math-l1-1-0

exp
frexp
modf
fabs
floor
log
sqrt
ceil
pow
atan2

api-ms-win-crt-runtime-l1-1-0

strerror
_errno
abort
_cexit
_execute_onexit_table
exit
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-utility-l1-1-0

rand
abs
qsort
bsearch

api-ms-win-crt-convert-l1-1-0

atof
atoi

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-time-l1-1-0

_gmtime64

Exports

Exports

??0e3_interface@@QEAA@XZ
?AddRef@e3_interface@@UEAAIXZ
?AtoW@@YAXPEBDPEAG@Z
?AtoWex@@YAHPEBDPEAGH@Z
?GetInterfaceVersion@e3_EXTENSION@@UEAAHXZ
?GetParam@e3_EXTENSION@@UEAA_KH_KW4e3_VALUETYPE@@@Z
?Invoke@e3_EXTENSION@@UEAA?AW4E3RESULT@@HPEAVe3_PARAM@@PEAVe3_CONTEXT@@@Z
?IsTypeOf@e3_EXTENSION@@UEAA_NPEBD@Z
?QueryAtoWBufSize@@YAHPEBD@Z
?QueryInfo@e3_EXTENSION@@UEAA?AW4E3RESULT@@PEAVe3_XMLNODE@@I@Z
?QueryWtoABufSize@@YAHPEBG@Z
?Release@e3_interface@@UEAAIXZ
?SetParam@e3_EXTENSION@@UEAA_KH_KW4e3_VALUETYPE@@@Z
?UTF8toWideString@@YAHPEBDPEAGH@Z
?WidetoUTF8String@@YAHPEBGPEADH@Z
?WtoA@@YAXPEBGPEAD@Z
?WtoAex@@YAHPEBGPEADH@Z
?e3sprintf@@YAHPEAG_KPEBGZZ
E3DLLFunc
adler32
adler32_combine
adler32_z
crc32
crc32_combine
crc32_combine_gen
crc32_combine_op
crc32_z
deflate
deflateBound
deflateCopy
deflateEnd
deflateGetDictionary
deflateInit2_
deflateInit_
deflateParams
deflatePending
deflatePrime
deflateReset
deflateResetKeep
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
inflate
inflateCodesUsed
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
inflateValidate
png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_convert_to_rfc1123_buffer
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_XYZ
png_get_cHRM_XYZ_fixed
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_current_pass_number
png_get_current_row_number
png_get_eXIf
png_get_eXIf_1
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_type
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_palette_max
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_progressive_ptr
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_image_begin_read_from_file
png_image_begin_read_from_memory
png_image_begin_read_from_stdio
png_image_finish_read
png_image_free
png_image_write_to_file
png_image_write_to_memory
png_image_write_to_stdio
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_process_data
png_process_data_pause
png_process_data_skip
png_progressive_combine_row
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_alpha_mode
png_set_alpha_mode_fixed
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_XYZ
png_set_cHRM_XYZ_fixed
png_set_cHRM_fixed
png_set_check_for_invalid_index
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_eXIf
png_set_eXIf_1
png_set_error_fn
png_set_expand
png_set_expand_16
png_set_expand_gray_1_2_4_to_8
png_set_extract_alpha
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_filter_heuristics_fixed
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mem_fn
png_set_oFFs
png_set_option
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_progressive_read_fn
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_scale_16
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_text_compression_level
png_set_text_compression_mem_level
png_set_text_compression_method
png_set_text_compression_strategy
png_set_text_compression_window_bits
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 468KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins3d/3difr.x3d
.dll windows:6 windows x64

c949b96fbe13c38552508be9932dafdf

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

31:18:da:7f:70:3c:3b:c2:a4:2b:bf:f6:60:6e:85:b1:45:6b:9c:d9:c7:68:5c:97:c7:e2:98:8a:9c:43:a0:5b
Signer

Actual PE Digest

31:18:da:7f:70:3c:3b:c2:a4:2b:bf:f6:60:6e:85:b1:45:6b:9c:d9:c7:68:5c:97:c7:e2:98:8a:9c:43:a0:5b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalAlloc
lstrlenW
FormatMessageW
GetShortPathNameA
LocalFree
FindResourceW
SizeofResource
LockResource
LoadResource
GetLastError
CloseHandle
GetTempFileNameA
GetTempPathA
GetTempPathW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetTempFileNameW
GetShortPathNameW
GetLogicalDriveStringsW
GetFileTime
GetFileSize
GetDriveTypeW
FlushFileBuffers
FindFirstFileW
FindFirstFileA
FindClose
DeleteFileW
DeleteFileA
CreateFileW
WideCharToMultiByte
InitializeSListHead

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

strstr
wcsstr
memcpy
wcschr
__std_type_info_destroy_list
__C_specific_handler
__current_exception_context
__current_exception
_CxxThrowException
_purecall
memset
__std_terminate
memcmp
__std_exception_destroy
memmove
__std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

realloc
free
malloc
_callnewh

api-ms-win-crt-string-l1-1-0

wcscspn
wcsncmp
wcsncpy_s
_strnicmp
_stricmp
toupper
wcscat
wcscpy
wcslen
wcsncpy
wcspbrk
_wcsicmp
strcmp
wcscmp
strcat
_wcsnicmp
strcpy
strlen

api-ms-win-crt-convert-l1-1-0

wcstol
wcstod
atof
atoi

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsscanf
__stdio_common_vswscanf
__stdio_common_vsprintf

api-ms-win-crt-math-l1-1-0

sqrt
sin
pow
log10
cos
asin
atan
atan2
sqrtf
floor
sinf
acosf
fabs
acos

api-ms-win-crt-utility-l1-1-0

bsearch
abs
qsort

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_seh_filter_dll
_cexit
terminate
_initterm_e
_initterm

Exports

Exports

??0ANGLEAXIS@@QEAA@AEBUMATRIX3D@@@Z
??0ANGLEAXIS@@QEAA@AEBUPOINT3D@@@Z
??0ANGLEAXIS@@QEAA@AEBUQUAT@@@Z
??0MATRIX3D@@QEAA@PEBMH@Z
??0MATRIX3D@@QEAA@PEBNH@Z
??0POINT3D@@QEAA@AEBUQUAT@@@Z
??0QUAT@@QEAA@AEBUANGLEAXIS@@@Z
??0QUAT@@QEAA@AEBUMATRIX3D@@@Z
??0QUAT@@QEAA@AEBUPOINT3D@@@Z
??0QUAT@@QEAA@MAEAU0@0H@Z
??0e3_COLLECTION@@IEAA@HH@Z
??0e3_REFSOURCE@@QEAA@XZ
??0e3_SORTEDCOLLECTION@@IEAA@P6AHQEAX0_K@ZHH@Z
??0e3_STREAM@@IEAA@XZ
??0e3_STRING@@QEAA@AEBV0@@Z
??0e3_interface@@QEAA@XZ
??0matrix3d@@QEAA@AEBUMATRIX3D@@@Z
??1e3_COLLECTION@@MEAA@XZ
??1e3_REFSOURCE@@IEAA@XZ
??1e3_STREAM@@IEAA@XZ
??1e3_STRING@@QEAA@XZ
??4e3_STRING@@QEAAAEAV0@AEBV0@@Z
??D@YA?AUQUAT@@AEBU0@0@Z
??K@YA?AUQUAT@@AEBU0@0@Z
?ABS@POINT3D@@QEAAXXZ
?ABS@_point3d@@QEAAXXZ
?Add@e3_STRING@@QEAA_NAEBV1@@Z
?Add@e3_STRING@@QEAA_NG@Z
?Add@e3_STRING@@QEAA_NPEBD@Z
?Add@e3_STRING@@QEAA_NPEBG@Z
?AddRef@e3_interface@@UEAAIXZ
?AddRefTarget@e3_REFSOURCE@@UEAA_NPEAVe3_REFTARGET@@@Z
?AffineCompose@MATRIX3D@@QEAAXAEBUAFFINEPARTS@@@Z
?AffineDecompose@MATRIX3D@@QEBAXAEAUAFFINEPARTS@@@Z
?At@e3_COLLECTION@@UEAAPEAX_J@Z
?AtDelete@e3_COLLECTION@@UEAA_N_J@Z
?AtFree@e3_COLLECTION@@UEAA_N_J@Z
?AtInsert@e3_COLLECTION@@UEAA_N_JPEAX@Z
?AtPut@e3_COLLECTION@@UEAA_N_JPEAX@Z
?AtoW@@YAXPEBDPEAG@Z
?AtoWex@@YAHPEBDPEAGH@Z
?CanReadChunk@e3_STREAM@@UEAA_NXZ
?CloseChunk@e3_STREAM@@UEAA_NXZ
?CmpNameExW@@YAHPEBG0@Z
?CmpPatternAndName@@YAHPEBG0@Z
?Compare@e3_GUID@@QEBA_NAEBU1@@Z
?Compare@e3_STRING@@QEBAHAEBV1@@Z
?Compare@e3_STRING@@QEBAHPEBG@Z
?CompareNoCase@e3_STRING@@QEBAHAEBV1@@Z
?CopyTo@e3_STREAM@@UEAA_JPEAV1@_J1@Z
?Create@e3_COLLECTION@@SAPEAV1@HH@Z
?Create@e3_SORTEDCOLLECTION@@SAPEAV1@P6AHQEAX0_K@ZHH@Z
?CreateFromMemory@e3_STREAM@@SAPEAV1@PEAX_K@Z
?CreateW@e3_STREAM@@SAPEAV1@PEAUHINSTANCE__@@PEBGI@Z
?DecodeNormal@POINT3D@@QEAAXII@Z
?Decompose@MATRIX3D@@QEBA_NPEAUPOINT3D@@000PEAUPOINT4D@@@Z
?Decompose@MATRIX3D@@QEBA_NPEAU_point3d@@000PEAU_point4d@@@Z
?DeleteAll@e3_COLLECTION@@UEAAXXZ
?DeleteItem@e3_COLLECTION@@UEAA_NPEAX@Z
?DeleteThis@e3_COLLECTION@@MEAAXXZ
?Det@MATRIX3D@@QEBANXZ
?Done@e3_STRING@@QEAAXXZ
?EnableDuplicates@e3_SORTEDCOLLECTION@@UEAA_N_N@Z
?EncodeNormal@POINT3D@@QEBAII@Z
?Equal@MATRIX3D@@QEBA_NAEBU1@N@Z
?Flip@MATRIX3D@@QEAAXXZ
?Flip@QUAT@@QEAAXXZ
?FreeAll@e3_COLLECTION@@UEAAXXZ
?FreeItem@e3_COLLECTION@@UEAA_NPEAX@Z
?FromStr@e3_GUID@@QEAA_NPEBD@Z
?FromStr@e3_GUID@@QEAA_NPEBG@Z
?Get@e3_STREAM@@UEAAPEAVe3_REFSOURCE@@PEAVe3_CONTEXT@@@Z
?Get@e3_STRING@@QEBAHPEADH@Z
?Get@e3_STRING@@QEBAHPEAGH@Z
?GetAngleByXY@@YANNN@Z
?GetBinaryMode@e3_STREAM@@UEAA?AW4E3_STREAM_BINARY_MODE@@XZ
?GetBuffer@e3_STRING@@QEBAPEBGXZ
?GetByNameA@e3_COLLECTION@@UEAAPEAVe3_GENERIC@@PEBDH@Z
?GetByNameW@e3_COLLECTION@@UEAAPEAVe3_GENERIC@@PEBGH@Z
?GetCStr@e3_STRING@@QEBAPEBGXZ
?GetCurrentChunkID@e3_STREAM@@UEAAGXZ
?GetCurrentChunkSize@e3_STREAM@@UEAA_JXZ
?GetEulerAngles@MATRIX3D@@QEBA?AUPOINT3D@@H@Z
?GetEulerAngles@QUAT@@QEAA?AUPOINT3D@@H@Z
?GetFileNameA@e3_STREAM@@UEAA_NPEADHI@Z
?GetFileNameW@e3_STREAM@@UEAA_NPEAGHI@Z
?GetFileTime@e3_STREAM@@UEAA?AW4E3RESULT@@AEAU_FILETIME@@@Z
?GetHANDLE@e3_STREAM@@UEAAPEAXXZ
?GetInterfaceName@e3_STREAM@@UEAAPEBDXZ
?GetInterfaceVersion@e3_EXTENSION@@UEAAHXZ
?GetMemoryBase@e3_STREAM@@UEAAPEAXXZ
?GetObjectTable@e3_STREAM@@UEAAPEAVe3_COLLECTION@@XZ
?GetParam@e3_EXTENSION@@UEAA_KH_KW4e3_VALUETYPE@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAUANGLEAXIS@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAUPOINT3D@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAUQUAT@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAU_point3d@@@Z
?GetScale@MATRIX3D@@QEBA?AUPOINT3D@@XZ
?GetStatus@e3_STREAM@@UEAAHXZ
?GetVersion@e3_STREAM@@UEAAIXZ
?IdentityMatrix@MATRIX3D@@QEAAXXZ
?IndexOf@e3_COLLECTION@@UEAA_JPEAX@Z
?IndexOf@e3_SORTEDCOLLECTION@@UEAA_JPEAX@Z
?Insert@e3_COLLECTION@@UEAA_JPEAX@Z
?Insert@e3_SORTEDCOLLECTION@@UEAA_JPEAX@Z
?Invert@MATRIX3D@@QEAAXAEBU1@@Z
?Invert@MATRIX3D@@QEAAXXZ
?Invert@QUAT@@QEAAXXZ
?Invoke@e3_EXTENSION@@UEAA?AW4E3RESULT@@HPEAVe3_PARAM@@PEAVe3_CONTEXT@@@Z
?IsEOF@e3_STREAM@@UEAA_NXZ
?IsFlipped@MATRIX3D@@QEBA_NXZ
?IsIdentity@MATRIX3D@@QEBA_NN@Z
?IsIndexValid@e3_COLLECTION@@UEAA_N_J@Z
?IsNull@e3_GUID@@QEBA_NXZ
?IsNumeric@e3_STRING@@QEBA_NXZ
?IsTypeOf@e3_EXTENSION@@UEAA_NPEBD@Z
?IsTypeOf@e3_REFSOURCE@@UEAA_NPEBD@Z
?IsTypeOf@e3_REFTARGET@@UEAA_NPEBD@Z
?IsTypeOf@e3_STREAM@@UEAA_NPEBD@Z
?Length@POINT2D@@QEBAMXZ
?Length@POINT3D@@QEBAMXZ
?Length@QUAT@@QEAAMXZ
?Length@_point3d@@QEBANXZ
?Length@e3_STRING@@QEBAHXZ
?Limit@POINT3D@@QEAAXMM@Z
?Limit@_point3d@@QEAAXNN@Z
?Load@MATRIX3D@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?Load@POINT3D@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?Load@e3_GUID@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?Load@e3_REFSOURCE@@UEAA?AW4E3RESULT@@PEAVe3_STREAM@@PEAVe3_CONTEXT@@@Z
?Load@e3_STRING@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?MoveTo@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?NewChunk@e3_STREAM@@MEAA_NXZ
?NewChunk@e3_STREAM@@UEAA_NG@Z
?NoRotate@MATRIX3D@@QEAAXXZ
?NoScale@MATRIX3D@@QEAAXXZ
?NoTranslate@MATRIX3D@@QEAAXXZ
?Normalize@POINT3D@@QEAAXXZ
?Normalize@QUAT@@QEAAXXZ
?Normalize@_point3d@@QEAAXXZ
?Notify@e3_REFSOURCE@@UEAA_KI_K@Z
?Offset@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?OnNotify@e3_REFTARGET@@UEAA_KPEAVe3_REFSOURCE@@I_K@Z
?OpenChunk@e3_STREAM@@UEAAGPEA_J@Z
?PointTransform@MATRIX3D@@QEBA?AUPOINT3D@@AEBU2@@Z
?PointTransform@MATRIX3D@@QEBA?AU_point3d@@AEBU2@@Z
?PrintA@e3_STREAM@@UEAAHPEBDZZ
?PrintW@e3_STREAM@@UEAAHPEBGZZ
?Put@e3_STREAM@@UEAA?AW4E3RESULT@@PEAVe3_REFSOURCE@@PEAVe3_CONTEXT@@G@Z
?QueryAtoWBufSize@@YAHPEBD@Z
?QueryInfo@e3_EXTENSION@@UEAA?AW4E3RESULT@@PEAVe3_XMLNODE@@I@Z
?QueryWtoABufSize@@YAHPEBG@Z
?ReadFloat@e3_STREAM@@UEAAMXZ
?ReadLn@e3_STREAM@@UEAAHPEADH@Z
?ReadLnW@e3_STREAM@@UEAAHPEAGH@Z
?ReadLong@e3_STREAM@@UEAAIXZ
?ReadWord@e3_STREAM@@UEAAGXZ
?Release@e3_interface@@UEAAIXZ
?RemoveRefTarget@e3_REFSOURCE@@UEAA_NPEAVe3_REFTARGET@@@Z
?Reset@e3_STREAM@@UEAA_NXZ
?Rotate@MATRIX3D@@QEAAXAEBUANGLEAXIS@@@Z
?Rotate@MATRIX3D@@QEAAXAEBUANGLEAXISex@@@Z
?Rotate@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?Rotate@MATRIX3D@@QEAAXAEBUQUAT@@@Z
?Rotate@MATRIX3D@@QEAAXAEBU_point3d@@@Z
?RotateX@MATRIX3D@@QEAAXN@Z
?RotateY@MATRIX3D@@QEAAXN@Z
?RotateZ@MATRIX3D@@QEAAXN@Z
?Round@POINT3D@@QEAAXM@Z
?Round@_point3d@@QEAAXN@Z
?Save@MATRIX3D@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G_N@Z
?Save@POINT3D@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G@Z
?Save@e3_GUID@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G@Z
?Save@e3_REFSOURCE@@UEAA?AW4E3RESULT@@PEAVe3_STREAM@@PEAVe3_CONTEXT@@@Z
?Save@e3_STRING@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G@Z
?Scale@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?Search@e3_SORTEDCOLLECTION@@UEAA_NPEAXAEA_J@Z
?Set3DSCamera@MATRIX3D@@QEAAXAEAUPOINT3D@@M@Z
?Set@e3_STRING@@QEAA_NAEBV1@@Z
?Set@e3_STRING@@QEAA_NPEBD@Z
?Set@e3_STRING@@QEAA_NPEBG@Z
?SetAlignVectors@MATRIX3D@@QEAAXUPOINT3D@@0@Z
?SetBUFFER@e3_STREAM@@UEAA_NH@Z
?SetBinaryMode@e3_STREAM@@UEAA_NW4E3_STREAM_BINARY_MODE@@@Z
?SetContext@e3_STREAM@@UEAA_NPEAVe3_CONTEXT@@@Z
?SetLocalMatrix@MATRIX3D@@QEAAXAEBU1@0@Z
?SetM1@MATRIX3D@@QEAAXAEBU1@0@Z
?SetM2@MATRIX3D@@QEAAXAEBU1@0@Z
?SetMul@MATRIX3D@@QEAAXAEBU1@0@Z
?SetNull@e3_GUID@@QEAAXXZ
?SetObjectTable@e3_STREAM@@UEAA_NPEAVe3_COLLECTION@@@Z
?SetParam@e3_EXTENSION@@UEAA_KH_KW4e3_VALUETYPE@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUANGLEAXIS@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUANGLEAXISex@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUQUAT@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBU_point3d@@0N@Z
?SetRotate@MATRIX3D@@QEAAXAEBU_point3d@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBU_point3d@@N@Z
?SetRotateX@MATRIX3D@@QEAAXN@Z
?SetRotateY@MATRIX3D@@QEAAXN@Z
?SetRotateYPW@MATRIX3D@@QEAAXMMM@Z
?SetRotateZ@MATRIX3D@@QEAAXN@Z
?SetScale@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?SetTranslate@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?SetTranslate@MATRIX3D@@QEAAXAEBU_point3d@@@Z
?SetVersion@e3_STREAM@@UEAA_NI@Z
?SetView@MATRIX3D@@QEAAXAEAUPOINT3D@@00@Z
?Sign@MATRIX3D@@QEBAMXZ
?Swap@POINT3D@@QEAAXH@Z
?Swap@e3_COLLECTION@@UEAAX_J0@Z
?ToFloat@e3_STRING@@QEBANPEA_N@Z
?ToInt@e3_STRING@@QEBAHPEA_N@Z
?ToStr@e3_GUID@@QEBAPEADPEAD@Z
?Transform@MATRIX3D@@QEAAXAEBU1@@Z
?TransformPoints@MATRIX3D@@QEBAXPEAUPOINT3D@@H@Z
?TransformPoints@MATRIX3D@@QEBAXPEAU_point3d@@H@Z
?TransformPoints@MATRIX3D@@QEBAXPEBUPOINT3D@@PEAU2@H@Z
?TransformPoints@MATRIX3D@@QEBAXPEBU_point3d@@PEAU2@H@Z
?TransformPoints@matrix3d@@QEBAXPEBUPOINT3D@@PEAU2@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEAUPOINT3D@@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEAU_point3d@@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEBUPOINT3D@@PEAU2@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEBU_point3d@@PEAU2@H@Z
?Transpose@MATRIX3D@@QEAAXXZ
?UTF8toWideString@@YAHPEBDPEAGH@Z
?VectorTransform@MATRIX3D@@QEBA?AUPOINT3D@@AEBU2@@Z
?VectorTransform@MATRIX3D@@QEBA?AU_point3d@@AEBU2@@Z
?WidetoUTF8String@@YAHPEBGPEADH@Z
?WriteFloat@e3_STREAM@@UEAA_NM@Z
?WriteLnA@e3_STREAM@@UEAA_NPEBD@Z
?WriteLnW@e3_STREAM@@UEAA_NPEBG@Z
?WriteLong@e3_STREAM@@UEAA_NI@Z
?WriteWord@e3_STREAM@@UEAA_NG@Z
?WtoA@@YAXPEBGPEAD@Z
?WtoAex@@YAHPEBGPEADH@Z
?_CLOSEFILE@e3_STREAM@@UEAAXXZ
?_FromUpDir@MATRIX3D@@QEAAXAEAU1@AEAUPOINT3D@@11@Z
?_GetFileName@e3_STREAM@@MEAAPEBGI@Z
?_ReadData@e3_STREAM@@UEAA_NPEAX_JH@Z
?_WriteData@e3_STREAM@@UEAA_NPEBX_JH@Z
?e3DeleteFile@@YA_NPEBG@Z
?e3GetAbsoluteName@@YA_NPEBG0PEAG@Z
?e3GetFileTime@@YA_NPEBGAEAU_FILETIME@@@Z
?e3GetPathFromFile@@YA_NPEBDPEAD@Z
?e3GetPathFromFile@@YA_NPEBGPEAG@Z
?e3GetRelativePath@@YA_NPEBG0PEAG@Z
?e3GetShortPathName@@YAHPEBGPEADH@Z
?e3GetTempFileName@@YAHPEAG0H0@Z
?e3GetTempPath@@YAHHPEAG@Z
?e3IsAbsolutePath@@YAHPEBG@Z
?e3IsFileExist@@YA_NPEBG@Z
?e3IsFolderExist@@YA_NPEBG@Z
?e3_FlipBytes@@YA_NPEAXHH@Z
?e3_MEM_Alloc@@YAPEAXI_N@Z
?e3_MEM_Free@@YA_NPEAX@Z
?e3_MEM_IsMemoryLow@@YA_N_N@Z
?e3_MEM_Lock@@YAPEAXPEAX@Z
?e3_MEM_Resize@@YAPEAXPEAXI@Z
?e3_MEM_Size@@YAIPEAX@Z
?e3_MEM_Unlock@@YA_NPEAX@Z
?e3sprintf@@YAHPEAG_KPEBGZZ
?p_Transform@MATRIX3D@@AEBAXAEBUPOINT3D@@AEAU2@@Z
?p_Transform@MATRIX3D@@AEBAXAEBU_point3d@@AEAU2@@Z
?p_Transform@matrix3d@@QEBAXAEBUPOINT3D@@AEAU2@@Z
?v_Transform@MATRIX3D@@AEBAXAEBUPOINT3D@@AEAU2@@Z
?v_Transform@MATRIX3D@@AEBAXAEBU_point3d@@AEAU2@@Z
?v_Transform@matrix3d@@QEBAXAEBUPOINT3D@@AEAU2@@Z
E3DLLFunc

Sections

.text
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins3d/drvDX9.x3d
.dll windows:6 windows x64

bf2a766aaaffbd174de0468545f75f1b

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:4a:33:84:58:68:7b:a2:39:ae:51:a7:0d:73:79:3d:3d:94:6c:18:5f:91:67:e9:e9:0f:53:b5:67:9f:ad:f8
Signer

Actual PE Digest

16:4a:33:84:58:68:7b:a2:39:ae:51:a7:0d:73:79:3d:3d:94:6c:18:5f:91:67:e9:e9:0f:53:b5:67:9f:ad:f8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

d3dx9_43

D3DXMatrixScaling
D3DXFilterTexture
D3DXAssembleShader
D3DXMatrixInverse
D3DXMatrixTranspose
D3DXMatrixTranslation
D3DXLoadSurfaceFromSurface
D3DXCreateFontW
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoLH
D3DXMatrixPerspectiveFovLH
D3DXMatrixMultiply

kernel32

ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
GetTickCount
GetSystemDirectoryA
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryW
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
LoadLibraryA
GetProcAddress
GetModuleHandleExW
GetModuleFileNameW
FreeLibrary
SetLastError
GetLastError
OutputDebugStringA
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
CreateActCtxW
RtlVirtualUnwind
IsProcessorFeaturePresent
EnterCriticalSection
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalAlloc
lstrlenW
FormatMessageW
GetShortPathNameA
LocalFree
FindResourceW
SizeofResource
LockResource
LoadResource
CloseHandle
GetTempFileNameA
GetTempPathA
GetTempPathW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetTempFileNameW
GetShortPathNameW
GetLogicalDriveStringsW
GetFileTime
GetFileSize
GetFileAttributesW
GetFileAttributesA
GetDriveTypeW
FlushFileBuffers
FindFirstFileW
FindFirstFileA
FindClose
DeleteFileW
DeleteFileA
CreateFileW
GetTimeFormatW
GetTimeFormatA
GetDateFormatW
GetDateFormatA
FileTimeToSystemTime
LoadLibraryExW
LoadLibraryExA
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
DisableThreadLibraryCalls
InitializeSListHead
GetCurrentProcessId

user32

EnableWindow
IsDlgButtonChecked
CheckDlgButton
LoadImageA
GetDlgItem
LoadBitmapW
DestroyIcon
CreateIcon
GetDC
GetDCEx
MessageBoxA
GetClientRect
ReleaseDC

gdi32

SetDIBitsToDevice
MoveToEx
SetROP2
SelectObject
LineTo
GetStockObject
GetDIBits
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateDIBSection

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

vcruntime140

memset
__C_specific_handler
wcsstr
wcsrchr
__current_exception
memcpy
_purecall
__std_exception_copy
__std_exception_destroy
memcmp
_CxxThrowException
__std_type_info_destroy_list
wcschr
strchr
__current_exception_context

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

wcscpy_s
strcat
strcpy
strlen
strncpy
wcsncpy_s
wcscpy
strncmp
wcsncmp
_wcsnicmp
wcscmp
_strnicmp
_wcsicmp
wcspbrk
wcsncpy
wcslen
wcscat
toupper
strnlen
strcmp

api-ms-win-crt-math-l1-1-0

fmodf
floor
acosf
cos
atan2
asin
acos
fabs
sqrt
sqrtf
sin
pow
atan
cosf
log

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vswprintf
__stdio_common_vsscanf
__stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

malloc
free
realloc
_callnewh

api-ms-win-crt-convert-l1-1-0

wcstod
wcstol
atol
strtol

api-ms-win-crt-utility-l1-1-0

abs

api-ms-win-crt-runtime-l1-1-0

_cexit
_initterm
_initterm_e
terminate
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_crt_atexit

Exports

Exports

??0ANGLEAXIS@@QEAA@AEBUMATRIX3D@@@Z
??0ANGLEAXIS@@QEAA@AEBUPOINT3D@@@Z
??0ANGLEAXIS@@QEAA@AEBUQUAT@@@Z
??0DRIVER3D@@QEAA@XZ
??0MATRIX3D@@QEAA@PEBMH@Z
??0MATRIX3D@@QEAA@PEBNH@Z
??0POINT3D@@QEAA@AEBUQUAT@@@Z
??0QUAT@@QEAA@AEBUANGLEAXIS@@@Z
??0QUAT@@QEAA@AEBUMATRIX3D@@@Z
??0QUAT@@QEAA@AEBUPOINT3D@@@Z
??0QUAT@@QEAA@MAEAU0@0H@Z
??0e3_COLLECTION@@IEAA@HH@Z
??0e3_REFSOURCE@@QEAA@XZ
??0e3_SORTEDCOLLECTION@@IEAA@P6AHQEAX0_K@ZHH@Z
??0e3_STREAM@@IEAA@XZ
??0e3_STRING@@QEAA@AEBV0@@Z
??0e3_interface@@QEAA@XZ
??0matrix3d@@QEAA@AEBUMATRIX3D@@@Z
??1e3_COLLECTION@@MEAA@XZ
??1e3_REFSOURCE@@IEAA@XZ
??1e3_STREAM@@IEAA@XZ
??1e3_STRING@@QEAA@XZ
??4e3_STRING@@QEAAAEAV0@AEBV0@@Z
??D@YA?AUQUAT@@AEBU0@0@Z
??K@YA?AUQUAT@@AEBU0@0@Z
?ABS@POINT3D@@QEAAXXZ
?ABS@_point3d@@QEAAXXZ
?Add@e3_STRING@@QEAA_NAEBV1@@Z
?Add@e3_STRING@@QEAA_NG@Z
?Add@e3_STRING@@QEAA_NPEBD@Z
?Add@e3_STRING@@QEAA_NPEBG@Z
?AddRef@e3_interface@@UEAAIXZ
?AddRefTarget@e3_REFSOURCE@@UEAA_NPEAVe3_REFTARGET@@@Z
?AffineCompose@MATRIX3D@@QEAAXAEBUAFFINEPARTS@@@Z
?AffineDecompose@MATRIX3D@@QEBAXAEAUAFFINEPARTS@@@Z
?At@e3_COLLECTION@@UEAAPEAX_J@Z
?AtDelete@e3_COLLECTION@@UEAA_N_J@Z
?AtFree@e3_COLLECTION@@UEAA_N_J@Z
?AtInsert@e3_COLLECTION@@UEAA_N_JPEAX@Z
?AtPut@e3_COLLECTION@@UEAA_N_JPEAX@Z
?AtoW@@YAXPEBDPEAG@Z
?AtoWex@@YAHPEBDPEAGH@Z
?CanReadChunk@e3_STREAM@@UEAA_NXZ
?ChooseDriver@@YA_NPEAPEAVDRIVER3D@@PEBD@Z
?CloseChunk@e3_STREAM@@UEAA_NXZ
?CmpNameExW@@YAHPEBG0@Z
?CmpPatternAndName@@YAHPEBG0@Z
?Compare@e3_GUID@@QEBA_NAEBU1@@Z
?Compare@e3_STRING@@QEBAHAEBV1@@Z
?Compare@e3_STRING@@QEBAHPEBG@Z
?CompareNoCase@e3_STRING@@QEBAHAEBV1@@Z
?CopyTo@e3_STREAM@@UEAA_JPEAV1@_J1@Z
?Create@e3_COLLECTION@@SAPEAV1@HH@Z
?Create@e3_INFO_LIST@@SAPEAV1@XZ
?Create@e3_SORTEDCOLLECTION@@SAPEAV1@P6AHQEAX0_K@ZHH@Z
?CreateFromMemory@e3_STREAM@@SAPEAV1@PEAX_K@Z
?CreateW@e3_STREAM@@SAPEAV1@PEAUHINSTANCE__@@PEBGI@Z
?DecodeNormal@POINT3D@@QEAAXII@Z
?Decompose@MATRIX3D@@QEBA_NPEAUPOINT3D@@000PEAUPOINT4D@@@Z
?Decompose@MATRIX3D@@QEBA_NPEAU_point3d@@000PEAU_point4d@@@Z
?DeleteAll@e3_COLLECTION@@UEAAXXZ
?DeleteItem@e3_COLLECTION@@UEAA_NPEAX@Z
?DeleteThis@e3_COLLECTION@@MEAAXXZ
?Det@MATRIX3D@@QEBANXZ
?Done@e3_STRING@@QEAAXXZ
?DoneRescale@@YA_NPEAUPIXWEIGHT@@@Z
?EnableDuplicates@e3_SORTEDCOLLECTION@@UEAA_N_N@Z
?EncodeNormal@POINT3D@@QEBAII@Z
?Equal@MATRIX3D@@QEBA_NAEBU1@N@Z
?Flip@MATRIX3D@@QEAAXXZ
?Flip@QUAT@@QEAAXXZ
?FreeAll@e3_COLLECTION@@UEAAXXZ
?FreeItem@e3_COLLECTION@@UEAA_NPEAX@Z
?FromStr@e3_GUID@@QEAA_NPEBD@Z
?FromStr@e3_GUID@@QEAA_NPEBG@Z
?Func2d@FILETYPE@@QEAA_KIPEAVe3_STREAM@@PEAVe3_PICTURE@@PEAVe3_interface@@@Z
?Func3d@FILETYPE@@QEAA_KIPEAVe3_STREAM@@PEAVe3_SCENE@@PEAVe3_interface@@@Z
?FuncArc@FILETYPE@@QEAA_KI_K0@Z
?FuncV@FILETYPE@@QEAA_KIPEAUe3_VIDEOINFO@@PEAVe3_interface@@@Z
?Get@e3_STREAM@@UEAAPEAVe3_REFSOURCE@@PEAVe3_CONTEXT@@@Z
?Get@e3_STRING@@QEBAHPEADH@Z
?Get@e3_STRING@@QEBAHPEAGH@Z
?GetAngleByXY@@YANNN@Z
?GetBinaryMode@e3_STREAM@@UEAA?AW4E3_STREAM_BINARY_MODE@@XZ
?GetBuffer@e3_STRING@@QEBAPEBGXZ
?GetByNameA@e3_COLLECTION@@UEAAPEAVe3_GENERIC@@PEBDH@Z
?GetByNameW@e3_COLLECTION@@UEAAPEAVe3_GENERIC@@PEBGH@Z
?GetCStr@e3_STRING@@QEBAPEBGXZ
?GetCurrentChunkID@e3_STREAM@@UEAAGXZ
?GetCurrentChunkSize@e3_STREAM@@UEAA_JXZ
?GetEulerAngles@MATRIX3D@@QEBA?AUPOINT3D@@H@Z
?GetEulerAngles@QUAT@@QEAA?AUPOINT3D@@H@Z
?GetFileINFO@@YAPEAVFILETYPE@@AEBUe3_GUID@@I@Z
?GetFileIcon@@YAHAEAUe3_GUID@@@Z
?GetFileNameA@e3_STREAM@@UEAA_NPEADHI@Z
?GetFileNameW@e3_STREAM@@UEAA_NPEAGHI@Z
?GetFileTime@e3_STREAM@@UEAA?AW4E3RESULT@@AEAU_FILETIME@@@Z
?GetFileTypeByExt@@YAPEAVFILETYPE@@PEBD0PEAUFTINFO@@@Z
?GetFileTypeByExt@@YAPEAVFILETYPE@@PEBG0PEAUFTINFO@@@Z
?GetFileTypeName@@YAPEBGAEAUe3_GUID@@@Z
?GetHANDLE@e3_STREAM@@UEAAPEAXXZ
?GetInterfaceName@e3_STREAM@@UEAAPEBDXZ
?GetInterfaceVersion@e3_EXTENSION@@UEAAHXZ
?GetMemoryBase@e3_STREAM@@UEAAPEAXXZ
?GetObjectTable@e3_STREAM@@UEAAPEAVe3_COLLECTION@@XZ
?GetParam@e3_EXTENSION@@UEAA_KH_KW4e3_VALUETYPE@@@Z
?GetPicture@@YAHPEAPEAVTPicture@@PEBGPEAUe3_GUID@@PEAVe3_CONTEXT@@I@Z
?GetRotate@MATRIX3D@@QEBAXAEAUANGLEAXIS@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAUPOINT3D@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAUQUAT@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAU_point3d@@@Z
?GetScale@MATRIX3D@@QEBA?AUPOINT3D@@XZ
?GetStatus@e3_STREAM@@UEAAHXZ
?GetTypeByName@@YAPEAVFILETYPE@@PEBG@Z
?GetVersion@e3_STREAM@@UEAAIXZ
?IdentityMatrix@MATRIX3D@@QEAAXXZ
?IndexOf@e3_COLLECTION@@UEAA_JPEAX@Z
?IndexOf@e3_SORTEDCOLLECTION@@UEAA_JPEAX@Z
?InitLanguage@e3_GAPI@@UEAA_NPEAUHINSTANCE__@@PEBG11@Z
?Insert@e3_COLLECTION@@UEAA_JPEAX@Z
?Insert@e3_SORTEDCOLLECTION@@UEAA_JPEAX@Z
?Invert@MATRIX3D@@QEAAXAEBU1@@Z
?Invert@MATRIX3D@@QEAAXXZ
?Invert@QUAT@@QEAAXXZ
?Invoke@e3_EXTENSION@@UEAA?AW4E3RESULT@@HPEAVe3_PARAM@@PEAVe3_CONTEXT@@@Z
?IsEOF@e3_STREAM@@UEAA_NXZ
?IsEnabled@FILETYPE@@QEAA_NXZ
?IsFileOfThisType@FILETYPE@@QEAA_NPEBG0@Z
?IsFlipped@MATRIX3D@@QEBA_NXZ
?IsIdentity@MATRIX3D@@QEBA_NN@Z
?IsIndexValid@e3_COLLECTION@@UEAA_N_J@Z
?IsNull@e3_GUID@@QEBA_NXZ
?IsNumeric@e3_STRING@@QEBA_NXZ
?IsTypeOf@e3_EXTENSION@@UEAA_NPEBD@Z
?IsTypeOf@e3_REFSOURCE@@UEAA_NPEBD@Z
?IsTypeOf@e3_REFTARGET@@UEAA_NPEBD@Z
?IsTypeOf@e3_STREAM@@UEAA_NPEBD@Z
?LGetString@e3_GAPI@@UEAAPEBG_KH@Z
?LGetStringEx@e3_GAPI@@UEAAPEBG_KHPEBG@Z
?Length@POINT2D@@QEBAMXZ
?Length@POINT3D@@QEBAMXZ
?Length@QUAT@@QEAAMXZ
?Length@_point3d@@QEBANXZ
?Length@e3_STRING@@QEBAHXZ
?Limit@POINT3D@@QEAAXMM@Z
?Limit@_point3d@@QEAAXNN@Z
?Load@FILETYPE@@QEAA_NXZ
?Load@MATRIX3D@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?Load@POINT3D@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?Load@e3_GUID@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?Load@e3_REFSOURCE@@UEAA?AW4E3RESULT@@PEAVe3_STREAM@@PEAVe3_CONTEXT@@@Z
?Load@e3_STRING@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?LoadFiletypeConfig@e3_GAPI@@UEAA_NPEAVe3_STREAM@@@Z
?MoveTo@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?NewChunk@e3_STREAM@@MEAA_NXZ
?NewChunk@e3_STREAM@@UEAA_NG@Z
?NoRotate@MATRIX3D@@QEAAXXZ
?NoScale@MATRIX3D@@QEAAXXZ
?NoTranslate@MATRIX3D@@QEAAXXZ
?Normalize@POINT3D@@QEAAXXZ
?Normalize@QUAT@@QEAAXXZ
?Normalize@_point3d@@QEAAXXZ
?Notify@e3_REFSOURCE@@UEAA_KI_K@Z
?Offset@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?OnNotify@e3_REFTARGET@@UEAA_KPEAVe3_REFSOURCE@@I_K@Z
?OpenChunk@e3_STREAM@@UEAAGPEA_J@Z
?PointTransform@MATRIX3D@@QEBA?AUPOINT3D@@AEBU2@@Z
?PointTransform@MATRIX3D@@QEBA?AU_point3d@@AEBU2@@Z
?PreSortFileTypes@@YAPEAVe3_SORTEDCOLLECTION@@PEAVe3_COLLECTION@@@Z
?PrepareRescale@@YAPEAUPIXWEIGHT@@HHAEAH@Z
?PrintA@e3_STREAM@@UEAAHPEBDZZ
?PrintW@e3_STREAM@@UEAAHPEBGZZ
?Put@e3_STREAM@@UEAA?AW4E3RESULT@@PEAVe3_REFSOURCE@@PEAVe3_CONTEXT@@G@Z
?QueryAtoWBufSize@@YAHPEBD@Z
?QueryFormatInfo@FILETYPE@@QEAA?AW4E3RESULT@@AEAPEAVe3_XMLNODE@@I@Z
?QueryFormatInfo@e3_GAPI@@UEAA?AW4E3RESULT@@PEAUe3_GUID@@AEAPEAVe3_XMLNODE@@I@Z
?QueryInfo@e3_EXTENSION@@UEAA?AW4E3RESULT@@PEAVe3_XMLNODE@@I@Z
?QueryWtoABufSize@@YAHPEBG@Z
?ReadFloat@e3_STREAM@@UEAAMXZ
?ReadLn@e3_STREAM@@UEAAHPEADH@Z
?ReadLnW@e3_STREAM@@UEAAHPEAGH@Z
?ReadLong@e3_STREAM@@UEAAIXZ
?ReadWord@e3_STREAM@@UEAAGXZ
?RegisterICON@e3_GAPI@@EEAAH_K0H@Z
?RegisterICON@e3_GAPI@@UEAAHPEAUHINSTANCE__@@PEBGPEBUe3_GUID@@@Z
?RegisterType@e3_GAPI@@MEAAPEAVFILETYPE@@PEBG0HIAEAUe3_GUID@@@Z
?Release@e3_interface@@UEAAIXZ
?RemoveDriver@@YA_NAEAPEAVDRIVER3D@@_N@Z
?RemoveRefTarget@e3_REFSOURCE@@UEAA_NPEAVe3_REFTARGET@@@Z
?Reset@e3_STREAM@@UEAA_NXZ
?Rotate@MATRIX3D@@QEAAXAEBUANGLEAXIS@@@Z
?Rotate@MATRIX3D@@QEAAXAEBUANGLEAXISex@@@Z
?Rotate@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?Rotate@MATRIX3D@@QEAAXAEBUQUAT@@@Z
?Rotate@MATRIX3D@@QEAAXAEBU_point3d@@@Z
?RotateX@MATRIX3D@@QEAAXN@Z
?RotateY@MATRIX3D@@QEAAXN@Z
?RotateZ@MATRIX3D@@QEAAXN@Z
?Round@POINT3D@@QEAAXM@Z
?Round@_point3d@@QEAAXN@Z
?Save@MATRIX3D@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G_N@Z
?Save@POINT3D@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G@Z
?Save@e3_GUID@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G@Z
?Save@e3_REFSOURCE@@UEAA?AW4E3RESULT@@PEAVe3_STREAM@@PEAVe3_CONTEXT@@@Z
?Save@e3_STRING@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G@Z
?SaveFiletypeConfig@e3_GAPI@@UEAA_NPEAVe3_STREAM@@@Z
?Scale@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?Search@e3_SORTEDCOLLECTION@@UEAA_NPEAXAEA_J@Z
?Set3DSCamera@MATRIX3D@@QEAAXAEAUPOINT3D@@M@Z
?Set@e3_STRING@@QEAA_NAEBV1@@Z
?Set@e3_STRING@@QEAA_NPEBD@Z
?Set@e3_STRING@@QEAA_NPEBG@Z
?SetAlignVectors@MATRIX3D@@QEAAXUPOINT3D@@0@Z
?SetBUFFER@e3_STREAM@@UEAA_NH@Z
?SetBinaryMode@e3_STREAM@@UEAA_NW4E3_STREAM_BINARY_MODE@@@Z
?SetBkImage@DRIVER3D@@UEAA?AW4E3RESULT@@PEAVTPicture@@@Z
?SetContext@e3_STREAM@@UEAA_NPEAVe3_CONTEXT@@@Z
?SetLocalMatrix@MATRIX3D@@QEAAXAEBU1@0@Z
?SetM1@MATRIX3D@@QEAAXAEBU1@0@Z
?SetM2@MATRIX3D@@QEAAXAEBU1@0@Z
?SetMul@MATRIX3D@@QEAAXAEBU1@0@Z
?SetNull@e3_GUID@@QEAAXXZ
?SetObjectTable@e3_STREAM@@UEAA_NPEAVe3_COLLECTION@@@Z
?SetParam@e3_EXTENSION@@UEAA_KH_KW4e3_VALUETYPE@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUANGLEAXIS@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUANGLEAXISex@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUQUAT@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBU_point3d@@0N@Z
?SetRotate@MATRIX3D@@QEAAXAEBU_point3d@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBU_point3d@@N@Z
?SetRotateX@MATRIX3D@@QEAAXN@Z
?SetRotateY@MATRIX3D@@QEAAXN@Z
?SetRotateYPW@MATRIX3D@@QEAAXMMM@Z
?SetRotateZ@MATRIX3D@@QEAAXN@Z
?SetScale@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?SetTranslate@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?SetTranslate@MATRIX3D@@QEAAXAEBU_point3d@@@Z
?SetVersion@e3_STREAM@@UEAA_NI@Z
?SetView@MATRIX3D@@QEAAXAEAUPOINT3D@@00@Z
?Sign@MATRIX3D@@QEBAMXZ
?SortFileTypes@e3_GAPI@@UEAA_NXZ
?Swap@POINT3D@@QEAAXH@Z
?Swap@e3_COLLECTION@@UEAAX_J0@Z
?ToFloat@e3_STRING@@QEBANPEA_N@Z
?ToInt@e3_STRING@@QEBAHPEA_N@Z
?ToStr@e3_GUID@@QEBAPEADPEAD@Z
?Transform@MATRIX3D@@QEAAXAEBU1@@Z
?TransformPoints@MATRIX3D@@QEBAXPEAUPOINT3D@@H@Z
?TransformPoints@MATRIX3D@@QEBAXPEAU_point3d@@H@Z
?TransformPoints@MATRIX3D@@QEBAXPEBUPOINT3D@@PEAU2@H@Z
?TransformPoints@MATRIX3D@@QEBAXPEBU_point3d@@PEAU2@H@Z
?TransformPoints@matrix3d@@QEBAXPEBUPOINT3D@@PEAU2@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEAUPOINT3D@@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEAU_point3d@@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEBUPOINT3D@@PEAU2@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEBU_point3d@@PEAU2@H@Z
?Transpose@MATRIX3D@@QEAAXXZ
?UTF8toWideString@@YAHPEBDPEAGH@Z
?VectorTransform@MATRIX3D@@QEBA?AUPOINT3D@@AEBU2@@Z
?VectorTransform@MATRIX3D@@QEBA?AU_point3d@@AEBU2@@Z
?WidetoUTF8String@@YAHPEBGPEADH@Z
?WriteFloat@e3_STREAM@@UEAA_NM@Z
?WriteLnA@e3_STREAM@@UEAA_NPEBD@Z
?WriteLnW@e3_STREAM@@UEAA_NPEBG@Z
?WriteLong@e3_STREAM@@UEAA_NI@Z
?WriteWord@e3_STREAM@@UEAA_NG@Z
?WtoA@@YAXPEBGPEAD@Z
?WtoAex@@YAHPEBGPEADH@Z
?_CLOSEFILE@e3_STREAM@@UEAAXXZ
?_FromUpDir@MATRIX3D@@QEAAXAEAU1@AEAUPOINT3D@@11@Z
?_GetFileName@e3_STREAM@@MEAAPEBGI@Z
?_ReadData@e3_STREAM@@UEAA_NPEAX_JH@Z
?_WriteData@e3_STREAM@@UEAA_NPEBX_JH@Z
?e3DeleteFile@@YA_NPEBG@Z
?e3FormatSize@@YAXHPEAG@Z
?e3FormatTime@@YAXAEBU_FILETIME@@PEAG@Z
?e3GetAbsoluteName@@YA_NPEBG0PEAG@Z
?e3GetFileFormat@@YAPEAVFILETYPE@@PEAVe3_STREAM@@PEAUFTINFO@@@Z
?e3GetFileFormat@@YAPEAVFILETYPE@@PEBGPEAUFTINFO@@@Z
?e3GetFileTime@@YA_NPEBGAEAU_FILETIME@@@Z
?e3GetPathFromFile@@YA_NPEBDPEAD@Z
?e3GetPathFromFile@@YA_NPEBGPEAG@Z
?e3GetRelativePath@@YA_NPEBG0PEAG@Z
?e3GetShortPathName@@YAHPEBGPEADH@Z
?e3GetTempFileName@@YAHPEAG0H0@Z
?e3GetTempPath@@YAHHPEAG@Z
?e3IsAbsolutePath@@YAHPEBG@Z
?e3IsFileExist@@YA_NPEBG@Z
?e3IsFolderExist@@YA_NPEBG@Z
?e3_FlipBytes@@YA_NPEAXHH@Z
?e3_FreeLibrary@@YA_NPEAUHINSTANCE__@@@Z
?e3_GetProcAddress@@YAPEAXPEAUHINSTANCE__@@PEBD@Z
?e3_LoadLibrary@@YAPEAUHINSTANCE__@@PEBG_N@Z
?e3_MEM_Alloc@@YAPEAXI_N@Z
?e3_MEM_Free@@YA_NPEAX@Z
?e3_MEM_IsMemoryLow@@YA_N_N@Z
?e3_MEM_Lock@@YAPEAXPEAX@Z
?e3_MEM_Resize@@YAPEAXPEAXI@Z
?e3_MEM_Size@@YAIPEAX@Z
?e3_MEM_Unlock@@YA_NPEAX@Z
?e3sprintf@@YAHPEAG_KPEBGZZ
?p_Transform@MATRIX3D@@AEBAXAEBUPOINT3D@@AEAU2@@Z
?p_Transform@MATRIX3D@@AEBAXAEBU_point3d@@AEAU2@@Z
?p_Transform@matrix3d@@QEBAXAEBUPOINT3D@@AEAU2@@Z
?v_Transform@MATRIX3D@@AEBAXAEBUPOINT3D@@AEAU2@@Z
?v_Transform@MATRIX3D@@AEBAXAEBU_point3d@@AEAU2@@Z
?v_Transform@matrix3d@@QEBAXAEBUPOINT3D@@AEAU2@@Z
E3DLLFunc

Sections

.text
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 740KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins3d/drvSOFT.x3d
.dll windows:6 windows x64

03639788ed1fddc87771970c1f854935

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5d:87:b8:c7:a4:ec:e2:e6:cc:96:f8:68:bb:0f:f4:37:7a:1b:d7:f6:f8:78:4a:2a:4b:c1:5a:13:9d:f7:58:b9
Signer

Actual PE Digest

5d:87:b8:c7:a4:ec:e2:e6:cc:96:f8:68:bb:0f:f4:37:7a:1b:d7:f6:f8:78:4a:2a:4b:c1:5a:13:9d:f7:58:b9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleExW
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryA
SetLastError
GetLastError
OutputDebugStringA
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GlobalSize
GlobalReAlloc
lstrlenW
FormatMessageW
GetShortPathNameA
LocalFree
FindResourceW
SizeofResource
LockResource
LoadResource
CloseHandle
GetTempFileNameA
GetTempPathA
GetTempPathW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetTempFileNameW
GetShortPathNameW
GetLogicalDriveStringsW
GetFileTime
GetFileSize
GetFileAttributesW
GetFileAttributesA
GetDriveTypeW
FlushFileBuffers
FindFirstFileW
FindFirstFileA
FindClose
DeleteFileW
DeleteFileA
CreateFileW
WideCharToMultiByte
MultiByteToWideChar
GetTimeFormatW
GetTimeFormatA
GetDateFormatW
GetDateFormatA
FileTimeToSystemTime
LoadLibraryExW
GetSystemInfo
LoadLibraryExA
GetSystemTimeAsFileTime
FileTimeToLocalFileTime

user32

ReleaseDC
LoadImageA
SendMessageA
GetDC
GetDlgItem
SetDlgItemInt
GetDlgItemInt
CheckDlgButton
EnableWindow
DestroyIcon
CreateIcon
IsDlgButtonChecked
IsWindowEnabled

gdi32

SetStretchBltMode
SetROP2
StretchDIBits
SetDIBitsToDevice
SetBkMode
SelectObject
SetTextColor
GetStockObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateFontA
CreateCompatibleDC
BitBlt
CreateDIBSection
GetObjectA
MoveToEx
TextOutW
LineTo

vcruntime140

__std_exception_copy
memcpy
__current_exception_context
__std_exception_destroy
memset
__current_exception
wcsrchr
__C_specific_handler
_purecall
strchr
memcmp
__std_type_info_destroy_list
_CxxThrowException
wcsstr
wcschr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

wcspbrk
strcpy
_wcsicmp
wcscmp
wcsncmp
strlen
wcscat
toupper
_wcsnicmp
wcscpy
wcsncpy_s
_strnicmp
wcslen
strncmp
strnlen
strcat
wcsncpy
strcmp

api-ms-win-crt-math-l1-1-0

acos
acosf
fabs
atan
atan2
sqrtf
sqrt
floor
cos
sin
ceilf
floorf
asin

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vswprintf
__stdio_common_vsscanf
__stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

_callnewh
realloc
malloc
free

api-ms-win-crt-convert-l1-1-0

atol
strtol
wcstol
wcstod

api-ms-win-crt-utility-l1-1-0

abs

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_cexit
_crt_atexit
_initterm
_initterm_e
terminate
_seh_filter_dll
_initialize_narrow_environment
_configure_narrow_argv

Exports

Exports

??0ANGLEAXIS@@QEAA@AEBUMATRIX3D@@@Z
??0ANGLEAXIS@@QEAA@AEBUPOINT3D@@@Z
??0ANGLEAXIS@@QEAA@AEBUQUAT@@@Z
??0DRIVER3D@@QEAA@XZ
??0MATRIX3D@@QEAA@PEBMH@Z
??0MATRIX3D@@QEAA@PEBNH@Z
??0POINT3D@@QEAA@AEBUQUAT@@@Z
??0QUAT@@QEAA@AEBUANGLEAXIS@@@Z
??0QUAT@@QEAA@AEBUMATRIX3D@@@Z
??0QUAT@@QEAA@AEBUPOINT3D@@@Z
??0QUAT@@QEAA@MAEAU0@0H@Z
??0e3_COLLECTION@@IEAA@HH@Z
??0e3_SORTEDCOLLECTION@@IEAA@P6AHQEAX0_K@ZHH@Z
??0e3_STREAM@@IEAA@XZ
??0e3_STRING@@QEAA@AEBV0@@Z
??0e3_interface@@QEAA@XZ
??0matrix3d@@QEAA@AEBUMATRIX3D@@@Z
??1e3_COLLECTION@@MEAA@XZ
??1e3_STREAM@@IEAA@XZ
??1e3_STRING@@QEAA@XZ
??4e3_STRING@@QEAAAEAV0@AEBV0@@Z
??D@YA?AUQUAT@@AEBU0@0@Z
??K@YA?AUQUAT@@AEBU0@0@Z
?ABS@POINT3D@@QEAAXXZ
?ABS@_point3d@@QEAAXXZ
?Add@e3_STRING@@QEAA_NAEBV1@@Z
?Add@e3_STRING@@QEAA_NG@Z
?Add@e3_STRING@@QEAA_NPEBD@Z
?Add@e3_STRING@@QEAA_NPEBG@Z
?AddRef@e3_interface@@UEAAIXZ
?AffineCompose@MATRIX3D@@QEAAXAEBUAFFINEPARTS@@@Z
?AffineDecompose@MATRIX3D@@QEBAXAEAUAFFINEPARTS@@@Z
?At@e3_COLLECTION@@UEAAPEAX_J@Z
?AtDelete@e3_COLLECTION@@UEAA_N_J@Z
?AtFree@e3_COLLECTION@@UEAA_N_J@Z
?AtInsert@e3_COLLECTION@@UEAA_N_JPEAX@Z
?AtPut@e3_COLLECTION@@UEAA_N_JPEAX@Z
?AtoW@@YAXPEBDPEAG@Z
?AtoWex@@YAHPEBDPEAGH@Z
?CanReadChunk@e3_STREAM@@UEAA_NXZ
?ChooseDriver@@YA_NPEAPEAVDRIVER3D@@PEBD@Z
?CloseChunk@e3_STREAM@@UEAA_NXZ
?CmpNameExW@@YAHPEBG0@Z
?CmpPatternAndName@@YAHPEBG0@Z
?Compare@e3_GUID@@QEBA_NAEBU1@@Z
?Compare@e3_STRING@@QEBAHAEBV1@@Z
?Compare@e3_STRING@@QEBAHPEBG@Z
?CompareNoCase@e3_STRING@@QEBAHAEBV1@@Z
?CopyTo@e3_STREAM@@UEAA_JPEAV1@_J1@Z
?Create@e3_COLLECTION@@SAPEAV1@HH@Z
?Create@e3_SORTEDCOLLECTION@@SAPEAV1@P6AHQEAX0_K@ZHH@Z
?CreateFromMemory@e3_STREAM@@SAPEAV1@PEAX_K@Z
?CreateW@e3_STREAM@@SAPEAV1@PEAUHINSTANCE__@@PEBGI@Z
?DecodeNormal@POINT3D@@QEAAXII@Z
?Decompose@MATRIX3D@@QEBA_NPEAUPOINT3D@@000PEAUPOINT4D@@@Z
?Decompose@MATRIX3D@@QEBA_NPEAU_point3d@@000PEAU_point4d@@@Z
?DeleteAll@e3_COLLECTION@@UEAAXXZ
?DeleteItem@e3_COLLECTION@@UEAA_NPEAX@Z
?DeleteThis@e3_COLLECTION@@MEAAXXZ
?Det@MATRIX3D@@QEBANXZ
?Done@e3_STRING@@QEAAXXZ
?EnableDuplicates@e3_SORTEDCOLLECTION@@UEAA_N_N@Z
?EncodeNormal@POINT3D@@QEBAII@Z
?Equal@MATRIX3D@@QEBA_NAEBU1@N@Z
?Flip@MATRIX3D@@QEAAXXZ
?Flip@QUAT@@QEAAXXZ
?FreeAll@e3_COLLECTION@@UEAAXXZ
?FreeItem@e3_COLLECTION@@UEAA_NPEAX@Z
?FromStr@e3_GUID@@QEAA_NPEBD@Z
?FromStr@e3_GUID@@QEAA_NPEBG@Z
?Func2d@FILETYPE@@QEAA_KIPEAVe3_STREAM@@PEAVe3_PICTURE@@PEAVe3_interface@@@Z
?Func3d@FILETYPE@@QEAA_KIPEAVe3_STREAM@@PEAVe3_SCENE@@PEAVe3_interface@@@Z
?FuncArc@FILETYPE@@QEAA_KI_K0@Z
?FuncV@FILETYPE@@QEAA_KIPEAUe3_VIDEOINFO@@PEAVe3_interface@@@Z
?Get@e3_STREAM@@UEAAPEAVe3_REFSOURCE@@PEAVe3_CONTEXT@@@Z
?Get@e3_STRING@@QEBAHPEADH@Z
?Get@e3_STRING@@QEBAHPEAGH@Z
?GetAngleByXY@@YANNN@Z
?GetBinaryMode@e3_STREAM@@UEAA?AW4E3_STREAM_BINARY_MODE@@XZ
?GetBuffer@e3_STRING@@QEBAPEBGXZ
?GetByNameA@e3_COLLECTION@@UEAAPEAVe3_GENERIC@@PEBDH@Z
?GetByNameW@e3_COLLECTION@@UEAAPEAVe3_GENERIC@@PEBGH@Z
?GetCStr@e3_STRING@@QEBAPEBGXZ
?GetCurrentChunkID@e3_STREAM@@UEAAGXZ
?GetCurrentChunkSize@e3_STREAM@@UEAA_JXZ
?GetEulerAngles@MATRIX3D@@QEBA?AUPOINT3D@@H@Z
?GetEulerAngles@QUAT@@QEAA?AUPOINT3D@@H@Z
?GetFileINFO@@YAPEAVFILETYPE@@AEBUe3_GUID@@I@Z
?GetFileIcon@@YAHAEAUe3_GUID@@@Z
?GetFileNameA@e3_STREAM@@UEAA_NPEADHI@Z
?GetFileNameW@e3_STREAM@@UEAA_NPEAGHI@Z
?GetFileTime@e3_STREAM@@UEAA?AW4E3RESULT@@AEAU_FILETIME@@@Z
?GetFileTypeByExt@@YAPEAVFILETYPE@@PEBD0PEAUFTINFO@@@Z
?GetFileTypeByExt@@YAPEAVFILETYPE@@PEBG0PEAUFTINFO@@@Z
?GetFileTypeName@@YAPEBGAEAUe3_GUID@@@Z
?GetHANDLE@e3_STREAM@@UEAAPEAXXZ
?GetInterfaceName@e3_STREAM@@UEAAPEBDXZ
?GetInterfaceVersion@e3_EXTENSION@@UEAAHXZ
?GetMemoryBase@e3_STREAM@@UEAAPEAXXZ
?GetObjectTable@e3_STREAM@@UEAAPEAVe3_COLLECTION@@XZ
?GetParam@e3_EXTENSION@@UEAA_KH_KW4e3_VALUETYPE@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAUANGLEAXIS@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAUPOINT3D@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAUQUAT@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAU_point3d@@@Z
?GetScale@MATRIX3D@@QEBA?AUPOINT3D@@XZ
?GetStatus@e3_STREAM@@UEAAHXZ
?GetTypeByName@@YAPEAVFILETYPE@@PEBG@Z
?GetVersion@e3_STREAM@@UEAAIXZ
?IdentityMatrix@MATRIX3D@@QEAAXXZ
?IndexOf@e3_COLLECTION@@UEAA_JPEAX@Z
?IndexOf@e3_SORTEDCOLLECTION@@UEAA_JPEAX@Z
?InitLanguage@e3_GAPI@@UEAA_NPEAUHINSTANCE__@@PEBG11@Z
?Insert@e3_COLLECTION@@UEAA_JPEAX@Z
?Insert@e3_SORTEDCOLLECTION@@UEAA_JPEAX@Z
?Invert@MATRIX3D@@QEAAXAEBU1@@Z
?Invert@MATRIX3D@@QEAAXXZ
?Invert@QUAT@@QEAAXXZ
?Invoke@e3_EXTENSION@@UEAA?AW4E3RESULT@@HPEAVe3_PARAM@@PEAVe3_CONTEXT@@@Z
?IsEOF@e3_STREAM@@UEAA_NXZ
?IsEnabled@FILETYPE@@QEAA_NXZ
?IsFileOfThisType@FILETYPE@@QEAA_NPEBG0@Z
?IsFlipped@MATRIX3D@@QEBA_NXZ
?IsIdentity@MATRIX3D@@QEBA_NN@Z
?IsIndexValid@e3_COLLECTION@@UEAA_N_J@Z
?IsNull@e3_GUID@@QEBA_NXZ
?IsNumeric@e3_STRING@@QEBA_NXZ
?IsTypeOf@e3_EXTENSION@@UEAA_NPEBD@Z
?IsTypeOf@e3_STREAM@@UEAA_NPEBD@Z
?LGetString@e3_GAPI@@UEAAPEBG_KH@Z
?LGetStringEx@e3_GAPI@@UEAAPEBG_KHPEBG@Z
?Length@POINT2D@@QEBAMXZ
?Length@POINT3D@@QEBAMXZ
?Length@QUAT@@QEAAMXZ
?Length@_point3d@@QEBANXZ
?Length@e3_STRING@@QEBAHXZ
?Limit@POINT3D@@QEAAXMM@Z
?Limit@_point3d@@QEAAXNN@Z
?Load@FILETYPE@@QEAA_NXZ
?Load@MATRIX3D@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?Load@POINT3D@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?Load@e3_GUID@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?Load@e3_STRING@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?LoadFiletypeConfig@e3_GAPI@@UEAA_NPEAVe3_STREAM@@@Z
?MoveTo@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?NewChunk@e3_STREAM@@MEAA_NXZ
?NewChunk@e3_STREAM@@UEAA_NG@Z
?NoRotate@MATRIX3D@@QEAAXXZ
?NoScale@MATRIX3D@@QEAAXXZ
?NoTranslate@MATRIX3D@@QEAAXXZ
?Normalize@POINT3D@@QEAAXXZ
?Normalize@QUAT@@QEAAXXZ
?Normalize@_point3d@@QEAAXXZ
?Offset@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?OpenChunk@e3_STREAM@@UEAAGPEA_J@Z
?PointTransform@MATRIX3D@@QEBA?AUPOINT3D@@AEBU2@@Z
?PointTransform@MATRIX3D@@QEBA?AU_point3d@@AEBU2@@Z
?PreSortFileTypes@@YAPEAVe3_SORTEDCOLLECTION@@PEAVe3_COLLECTION@@@Z
?PrintA@e3_STREAM@@UEAAHPEBDZZ
?PrintW@e3_STREAM@@UEAAHPEBGZZ
?Put@e3_STREAM@@UEAA?AW4E3RESULT@@PEAVe3_REFSOURCE@@PEAVe3_CONTEXT@@G@Z
?QueryAtoWBufSize@@YAHPEBD@Z
?QueryFormatInfo@FILETYPE@@QEAA?AW4E3RESULT@@AEAPEAVe3_XMLNODE@@I@Z
?QueryFormatInfo@e3_GAPI@@UEAA?AW4E3RESULT@@PEAUe3_GUID@@AEAPEAVe3_XMLNODE@@I@Z
?QueryInfo@e3_EXTENSION@@UEAA?AW4E3RESULT@@PEAVe3_XMLNODE@@I@Z
?QueryWtoABufSize@@YAHPEBG@Z
?ReadFloat@e3_STREAM@@UEAAMXZ
?ReadLn@e3_STREAM@@UEAAHPEADH@Z
?ReadLnW@e3_STREAM@@UEAAHPEAGH@Z
?ReadLong@e3_STREAM@@UEAAIXZ
?ReadWord@e3_STREAM@@UEAAGXZ
?RegisterICON@e3_GAPI@@EEAAH_K0H@Z
?RegisterICON@e3_GAPI@@UEAAHPEAUHINSTANCE__@@PEBGPEBUe3_GUID@@@Z
?RegisterType@e3_GAPI@@MEAAPEAVFILETYPE@@PEBG0HIAEAUe3_GUID@@@Z
?Release@e3_interface@@UEAAIXZ
?RemoveDriver@@YA_NAEAPEAVDRIVER3D@@_N@Z
?Reset@e3_STREAM@@UEAA_NXZ
?Rotate@MATRIX3D@@QEAAXAEBUANGLEAXIS@@@Z
?Rotate@MATRIX3D@@QEAAXAEBUANGLEAXISex@@@Z
?Rotate@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?Rotate@MATRIX3D@@QEAAXAEBUQUAT@@@Z
?Rotate@MATRIX3D@@QEAAXAEBU_point3d@@@Z
?RotateX@MATRIX3D@@QEAAXN@Z
?RotateY@MATRIX3D@@QEAAXN@Z
?RotateZ@MATRIX3D@@QEAAXN@Z
?Round@POINT3D@@QEAAXM@Z
?Round@_point3d@@QEAAXN@Z
?Save@MATRIX3D@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G_N@Z
?Save@POINT3D@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G@Z
?Save@e3_GUID@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G@Z
?Save@e3_STRING@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G@Z
?SaveFiletypeConfig@e3_GAPI@@UEAA_NPEAVe3_STREAM@@@Z
?Scale@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?Search@e3_SORTEDCOLLECTION@@UEAA_NPEAXAEA_J@Z
?Set3DSCamera@MATRIX3D@@QEAAXAEAUPOINT3D@@M@Z
?Set@e3_STRING@@QEAA_NAEBV1@@Z
?Set@e3_STRING@@QEAA_NPEBD@Z
?Set@e3_STRING@@QEAA_NPEBG@Z
?SetAlignVectors@MATRIX3D@@QEAAXUPOINT3D@@0@Z
?SetBUFFER@e3_STREAM@@UEAA_NH@Z
?SetBinaryMode@e3_STREAM@@UEAA_NW4E3_STREAM_BINARY_MODE@@@Z
?SetBkImage@DRIVER3D@@UEAA?AW4E3RESULT@@PEAVTPicture@@@Z
?SetContext@e3_STREAM@@UEAA_NPEAVe3_CONTEXT@@@Z
?SetLocalMatrix@MATRIX3D@@QEAAXAEBU1@0@Z
?SetM1@MATRIX3D@@QEAAXAEBU1@0@Z
?SetM2@MATRIX3D@@QEAAXAEBU1@0@Z
?SetMul@MATRIX3D@@QEAAXAEBU1@0@Z
?SetNull@e3_GUID@@QEAAXXZ
?SetObjectTable@e3_STREAM@@UEAA_NPEAVe3_COLLECTION@@@Z
?SetParam@e3_EXTENSION@@UEAA_KH_KW4e3_VALUETYPE@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUANGLEAXIS@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUANGLEAXISex@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUQUAT@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBU_point3d@@0N@Z
?SetRotate@MATRIX3D@@QEAAXAEBU_point3d@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBU_point3d@@N@Z
?SetRotateX@MATRIX3D@@QEAAXN@Z
?SetRotateY@MATRIX3D@@QEAAXN@Z
?SetRotateYPW@MATRIX3D@@QEAAXMMM@Z
?SetRotateZ@MATRIX3D@@QEAAXN@Z
?SetScale@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?SetTranslate@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?SetTranslate@MATRIX3D@@QEAAXAEBU_point3d@@@Z
?SetVersion@e3_STREAM@@UEAA_NI@Z
?SetView@MATRIX3D@@QEAAXAEAUPOINT3D@@00@Z
?Sign@MATRIX3D@@QEBAMXZ
?SortFileTypes@e3_GAPI@@UEAA_NXZ
?Swap@POINT3D@@QEAAXH@Z
?Swap@e3_COLLECTION@@UEAAX_J0@Z
?ToFloat@e3_STRING@@QEBANPEA_N@Z
?ToInt@e3_STRING@@QEBAHPEA_N@Z
?ToStr@e3_GUID@@QEBAPEADPEAD@Z
?Transform@MATRIX3D@@QEAAXAEBU1@@Z
?TransformPoints@MATRIX3D@@QEBAXPEAUPOINT3D@@H@Z
?TransformPoints@MATRIX3D@@QEBAXPEAU_point3d@@H@Z
?TransformPoints@MATRIX3D@@QEBAXPEBUPOINT3D@@PEAU2@H@Z
?TransformPoints@MATRIX3D@@QEBAXPEBU_point3d@@PEAU2@H@Z
?TransformPoints@matrix3d@@QEBAXPEBUPOINT3D@@PEAU2@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEAUPOINT3D@@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEAU_point3d@@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEBUPOINT3D@@PEAU2@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEBU_point3d@@PEAU2@H@Z
?Transpose@MATRIX3D@@QEAAXXZ
?UTF8toWideString@@YAHPEBDPEAGH@Z
?VectorTransform@MATRIX3D@@QEBA?AUPOINT3D@@AEBU2@@Z
?VectorTransform@MATRIX3D@@QEBA?AU_point3d@@AEBU2@@Z
?WidetoUTF8String@@YAHPEBGPEADH@Z
?WriteFloat@e3_STREAM@@UEAA_NM@Z
?WriteLnA@e3_STREAM@@UEAA_NPEBD@Z
?WriteLnW@e3_STREAM@@UEAA_NPEBG@Z
?WriteLong@e3_STREAM@@UEAA_NI@Z
?WriteWord@e3_STREAM@@UEAA_NG@Z
?WtoA@@YAXPEBGPEAD@Z
?WtoAex@@YAHPEBGPEADH@Z
?_CLOSEFILE@e3_STREAM@@UEAAXXZ
?_FromUpDir@MATRIX3D@@QEAAXAEAU1@AEAUPOINT3D@@11@Z
?_GetFileName@e3_STREAM@@MEAAPEBGI@Z
?_ReadData@e3_STREAM@@UEAA_NPEAX_JH@Z
?_WriteData@e3_STREAM@@UEAA_NPEBX_JH@Z
?e3DeleteFile@@YA_NPEBG@Z
?e3FormatSize@@YAXHPEAG@Z
?e3FormatTime@@YAXAEBU_FILETIME@@PEAG@Z
?e3GetAbsoluteName@@YA_NPEBG0PEAG@Z
?e3GetFileFormat@@YAPEAVFILETYPE@@PEAVe3_STREAM@@PEAUFTINFO@@@Z
?e3GetFileFormat@@YAPEAVFILETYPE@@PEBGPEAUFTINFO@@@Z
?e3GetFileTime@@YA_NPEBGAEAU_FILETIME@@@Z
?e3GetPathFromFile@@YA_NPEBDPEAD@Z
?e3GetPathFromFile@@YA_NPEBGPEAG@Z
?e3GetRelativePath@@YA_NPEBG0PEAG@Z
?e3GetShortPathName@@YAHPEBGPEADH@Z
?e3GetTempFileName@@YAHPEAG0H0@Z
?e3GetTempPath@@YAHHPEAG@Z
?e3IsAbsolutePath@@YAHPEBG@Z
?e3IsFileExist@@YA_NPEBG@Z
?e3IsFolderExist@@YA_NPEBG@Z
?e3_FlipBytes@@YA_NPEAXHH@Z
?e3_FreeLibrary@@YA_NPEAUHINSTANCE__@@@Z
?e3_GetProcAddress@@YAPEAXPEAUHINSTANCE__@@PEBD@Z
?e3_LoadLibrary@@YAPEAUHINSTANCE__@@PEBG_N@Z
?e3_MEM_Alloc@@YAPEAXI_N@Z
?e3_MEM_Free@@YA_NPEAX@Z
?e3_MEM_IsMemoryLow@@YA_N_N@Z
?e3_MEM_Lock@@YAPEAXPEAX@Z
?e3_MEM_Resize@@YAPEAXPEAXI@Z
?e3_MEM_Size@@YAIPEAX@Z
?e3_MEM_Unlock@@YA_NPEAX@Z
?e3sprintf@@YAHPEAG_KPEBGZZ
?p_Transform@MATRIX3D@@AEBAXAEBUPOINT3D@@AEAU2@@Z
?p_Transform@MATRIX3D@@AEBAXAEBU_point3d@@AEAU2@@Z
?p_Transform@matrix3d@@QEBAXAEBUPOINT3D@@AEAU2@@Z
?v_Transform@MATRIX3D@@AEBAXAEBUPOINT3D@@AEAU2@@Z
?v_Transform@MATRIX3D@@AEBAXAEBU_point3d@@AEAU2@@Z
?v_Transform@matrix3d@@QEBAXAEBUPOINT3D@@AEAU2@@Z
E3DLLFunc

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins3d/prc/MyriadCAD.otf
other/plug_ins3d/prcr.x3d
.dll windows:6 windows x64

0c7393a664ed62d43c7ab6c5aa291503

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

71:2c:b8:a6:f2:c1:cd:71:17:b0:cc:99:bb:14:ff:f7:5a:47:83:35:c6:9d:e9:47:bb:d0:71:0b:bd:99:dc:d4
Signer

Actual PE Digest

71:2c:b8:a6:f2:c1:cd:71:17:b0:cc:99:bb:14:ff:f7:5a:47:83:35:c6:9d:e9:47:bb:d0:71:0b:bd:99:dc:d4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

a3dutils

?SetModuleHandleForDLL@@YAXPEAUHINSTANCE__@@@Z
ct_EndInstance
ct_Destroy
ct_GetVectorFont
ct_GetDescent
ct_GetAscent
ct_GetAdvance
ct_GetScalePixel
ct_GetReferenceHeight
ct_SetBoldSoftware
ct_SetItalicSoftware
ct_Render
?GetAcrobatPathW@@YA_NPEA_W_K0@Z
ct_GetFontFamilyStructs
SetDefaultFont

kernel32

GetTempFileNameW
GetTempPathW
HeapFree
HeapAlloc
OutputDebugStringW
InitializeSListHead
DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
MultiByteToWideChar
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
EnterCriticalSection
Sleep
TryEnterCriticalSection
InitializeCriticalSection
FormatMessageA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetSystemInfo
LeaveCriticalSection
CloseHandle
GetModuleHandleW
GetSystemDefaultLangID
FindNextFileW
FindFirstFileW
FindClose
GetCurrentDirectoryW
SetCurrentDirectoryW
WideCharToMultiByte
GlobalLock
GlobalUnlock
GlobalAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
GetTickCount
VirtualQuery

user32

GetFocus
MessageBoxW
LoadStringW

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shell32

SHGetSpecialFolderPathW

msvcp140

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__vcrt_GetModuleFileNameW
__vcrt_LoadLibraryExW
__current_exception
strstr
__current_exception_context
__C_specific_handler_noexcept
__std_type_info_destroy_list
strchr
__C_specific_handler
_purecall
memcpy
_CxxThrowException
wcschr
__std_exception_destroy
memset
wcsrchr
wcsstr
__std_terminate
memcmp
memmove
__std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

wcstok
strcmp
_wcsicmp
_stricmp
_strnicmp
wcsncmp
towupper
isalnum
wcscat
wcscmp
wcsncpy_s
isdigit
toupper
wcsncpy
wcspbrk
wcscpy
strlen
strcpy
strcpy_s
_wcsdup
strcat_s
wcslen
wcscpy_s

api-ms-win-crt-heap-l1-1-0

free
realloc
malloc
calloc
_callnewh

api-ms-win-crt-math-l1-1-0

cos
sin
_finite
cosh
sinh
floor
pow
sqrt
log10
floorf
asin
ceil
tanf
atan
ceilf
acos
atan2
acosf
sinf
tan
cosf
sqrtf
fabs
log

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vfwprintf
fclose
__stdio_common_vsscanf
__stdio_common_vswscanf
__acrt_iob_func
fgetws
fputws
_read
fflush
_wfdopen
_wsopen
_close
rewind
__stdio_common_vsprintf
fwrite
_wopen
__stdio_common_vfprintf

api-ms-win-crt-convert-l1-1-0

strtod
wcstod
wcstol
atoi

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32
_wunlink

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_errno
_invalid_parameter_noinfo_noreturn
terminate
_crt_atexit
_cexit
_seh_filter_dll
_wperror
_execute_onexit_table
_configure_narrow_argv
_initialize_narrow_environment
_register_onexit_function
_initialize_onexit_table

api-ms-win-crt-environment-l1-1-0

getenv
_wgetenv

api-ms-win-crt-utility-l1-1-0

bsearch
qsort
abs

api-ms-win-crt-time-l1-1-0

_gmtime64
asctime

Exports

Exports

??0ANGLEAXIS@@QEAA@AEBUMATRIX3D@@@Z
??0ANGLEAXIS@@QEAA@AEBUPOINT3D@@@Z
??0ANGLEAXIS@@QEAA@AEBUQUAT@@@Z
??0MATRIX3D@@QEAA@PEBMH@Z
??0MATRIX3D@@QEAA@PEBNH@Z
??0POINT3D@@QEAA@AEBUQUAT@@@Z
??0QUAT@@QEAA@AEBUANGLEAXIS@@@Z
??0QUAT@@QEAA@AEBUMATRIX3D@@@Z
??0QUAT@@QEAA@AEBUPOINT3D@@@Z
??0QUAT@@QEAA@MAEAU0@0H@Z
??0e3_COLLECTION@@IEAA@HH@Z
??0e3_REFSOURCE@@QEAA@XZ
??0e3_SORTEDCOLLECTION@@IEAA@P6AHQEAX0_K@ZHH@Z
??0e3_STRING@@QEAA@AEBV0@@Z
??0e3_interface@@QEAA@XZ
??0matrix3d@@QEAA@AEBUMATRIX3D@@@Z
??1e3_COLLECTION@@MEAA@XZ
??1e3_REFSOURCE@@IEAA@XZ
??1e3_STRING@@QEAA@XZ
??4e3_STRING@@QEAAAEAV0@AEBV0@@Z
??D@YA?AUQUAT@@AEBU0@0@Z
??K@YA?AUQUAT@@AEBU0@0@Z
?ABS@POINT3D@@QEAAXXZ
?ABS@_point3d@@QEAAXXZ
?Add@e3_STRING@@QEAA_NAEBV1@@Z
?Add@e3_STRING@@QEAA_NG@Z
?Add@e3_STRING@@QEAA_NPEBD@Z
?Add@e3_STRING@@QEAA_NPEBG@Z
?AddRef@e3_interface@@UEAAIXZ
?AddRefTarget@e3_REFSOURCE@@UEAA_NPEAVe3_REFTARGET@@@Z
?AffineCompose@MATRIX3D@@QEAAXAEBUAFFINEPARTS@@@Z
?AffineDecompose@MATRIX3D@@QEBAXAEAUAFFINEPARTS@@@Z
?At@e3_COLLECTION@@UEAAPEAX_J@Z
?AtDelete@e3_COLLECTION@@UEAA_N_J@Z
?AtFree@e3_COLLECTION@@UEAA_N_J@Z
?AtInsert@e3_COLLECTION@@UEAA_N_JPEAX@Z
?AtPut@e3_COLLECTION@@UEAA_N_JPEAX@Z
?AtoW@@YAXPEBDPEAG@Z
?AtoWex@@YAHPEBDPEAGH@Z
?CmpNameExW@@YAHPEBG0@Z
?CmpPatternAndName@@YAHPEBG0@Z
?Compare@e3_GUID@@QEBA_NAEBU1@@Z
?Compare@e3_STRING@@QEBAHAEBV1@@Z
?Compare@e3_STRING@@QEBAHPEBG@Z
?CompareNoCase@e3_STRING@@QEBAHAEBV1@@Z
?Create@e3_COLLECTION@@SAPEAV1@HH@Z
?Create@e3_SORTEDCOLLECTION@@SAPEAV1@P6AHQEAX0_K@ZHH@Z
?DecodeNormal@POINT3D@@QEAAXII@Z
?Decompose@MATRIX3D@@QEBA_NPEAUPOINT3D@@000PEAUPOINT4D@@@Z
?Decompose@MATRIX3D@@QEBA_NPEAU_point3d@@000PEAU_point4d@@@Z
?DeleteAll@e3_COLLECTION@@UEAAXXZ
?DeleteItem@e3_COLLECTION@@UEAA_NPEAX@Z
?DeleteThis@e3_COLLECTION@@MEAAXXZ
?Det@MATRIX3D@@QEBANXZ
?Done@e3_STRING@@QEAAXXZ
?EnableDuplicates@e3_SORTEDCOLLECTION@@UEAA_N_N@Z
?EncodeNormal@POINT3D@@QEBAII@Z
?Equal@MATRIX3D@@QEBA_NAEBU1@N@Z
?Flip@MATRIX3D@@QEAAXXZ
?Flip@QUAT@@QEAAXXZ
?FreeAll@e3_COLLECTION@@UEAAXXZ
?FreeItem@e3_COLLECTION@@UEAA_NPEAX@Z
?FromStr@e3_GUID@@QEAA_NPEBD@Z
?FromStr@e3_GUID@@QEAA_NPEBG@Z
?Get@e3_STRING@@QEBAHPEADH@Z
?Get@e3_STRING@@QEBAHPEAGH@Z
?GetAngleByXY@@YANNN@Z
?GetBuffer@e3_STRING@@QEBAPEBGXZ
?GetByNameA@e3_COLLECTION@@UEAAPEAVe3_GENERIC@@PEBDH@Z
?GetByNameW@e3_COLLECTION@@UEAAPEAVe3_GENERIC@@PEBGH@Z
?GetCStr@e3_STRING@@QEBAPEBGXZ
?GetEulerAngles@MATRIX3D@@QEBA?AUPOINT3D@@H@Z
?GetEulerAngles@QUAT@@QEAA?AUPOINT3D@@H@Z
?GetInterfaceVersion@e3_EXTENSION@@UEAAHXZ
?GetParam@e3_EXTENSION@@UEAA_KH_KW4e3_VALUETYPE@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAUANGLEAXIS@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAUPOINT3D@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAUQUAT@@@Z
?GetRotate@MATRIX3D@@QEBAXAEAU_point3d@@@Z
?GetScale@MATRIX3D@@QEBA?AUPOINT3D@@XZ
?IdentityMatrix@MATRIX3D@@QEAAXXZ
?IndexOf@e3_COLLECTION@@UEAA_JPEAX@Z
?IndexOf@e3_SORTEDCOLLECTION@@UEAA_JPEAX@Z
?Insert@e3_COLLECTION@@UEAA_JPEAX@Z
?Insert@e3_SORTEDCOLLECTION@@UEAA_JPEAX@Z
?Invert@MATRIX3D@@QEAAXAEBU1@@Z
?Invert@MATRIX3D@@QEAAXXZ
?Invert@QUAT@@QEAAXXZ
?Invoke@e3_EXTENSION@@UEAA?AW4E3RESULT@@HPEAVe3_PARAM@@PEAVe3_CONTEXT@@@Z
?IsFlipped@MATRIX3D@@QEBA_NXZ
?IsIdentity@MATRIX3D@@QEBA_NN@Z
?IsIndexValid@e3_COLLECTION@@UEAA_N_J@Z
?IsNull@e3_GUID@@QEBA_NXZ
?IsNumeric@e3_STRING@@QEBA_NXZ
?IsTypeOf@e3_EXTENSION@@UEAA_NPEBD@Z
?IsTypeOf@e3_REFSOURCE@@UEAA_NPEBD@Z
?IsTypeOf@e3_REFTARGET@@UEAA_NPEBD@Z
?Length@POINT2D@@QEBAMXZ
?Length@POINT3D@@QEBAMXZ
?Length@QUAT@@QEAAMXZ
?Length@_point3d@@QEBANXZ
?Length@e3_STRING@@QEBAHXZ
?Limit@POINT3D@@QEAAXMM@Z
?Limit@_point3d@@QEAAXNN@Z
?Load@MATRIX3D@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?Load@POINT3D@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?Load@e3_GUID@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?Load@e3_REFSOURCE@@UEAA?AW4E3RESULT@@PEAVe3_STREAM@@PEAVe3_CONTEXT@@@Z
?Load@e3_STRING@@QEAA?AW4E3RESULT@@PEAVe3_STREAM@@@Z
?MoveTo@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?NoRotate@MATRIX3D@@QEAAXXZ
?NoScale@MATRIX3D@@QEAAXXZ
?NoTranslate@MATRIX3D@@QEAAXXZ
?Normalize@POINT3D@@QEAAXXZ
?Normalize@QUAT@@QEAAXXZ
?Normalize@_point3d@@QEAAXXZ
?Notify@e3_REFSOURCE@@UEAA_KI_K@Z
?Offset@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?OnNotify@e3_REFTARGET@@UEAA_KPEAVe3_REFSOURCE@@I_K@Z
?PointTransform@MATRIX3D@@QEBA?AUPOINT3D@@AEBU2@@Z
?PointTransform@MATRIX3D@@QEBA?AU_point3d@@AEBU2@@Z
?QueryAtoWBufSize@@YAHPEBD@Z
?QueryInfo@e3_EXTENSION@@UEAA?AW4E3RESULT@@PEAVe3_XMLNODE@@I@Z
?QueryWtoABufSize@@YAHPEBG@Z
?Release@e3_interface@@UEAAIXZ
?RemoveRefTarget@e3_REFSOURCE@@UEAA_NPEAVe3_REFTARGET@@@Z
?Rotate@MATRIX3D@@QEAAXAEBUANGLEAXIS@@@Z
?Rotate@MATRIX3D@@QEAAXAEBUANGLEAXISex@@@Z
?Rotate@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?Rotate@MATRIX3D@@QEAAXAEBUQUAT@@@Z
?Rotate@MATRIX3D@@QEAAXAEBU_point3d@@@Z
?RotateX@MATRIX3D@@QEAAXN@Z
?RotateY@MATRIX3D@@QEAAXN@Z
?RotateZ@MATRIX3D@@QEAAXN@Z
?Round@POINT3D@@QEAAXM@Z
?Round@_point3d@@QEAAXN@Z
?Save@MATRIX3D@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G_N@Z
?Save@POINT3D@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G@Z
?Save@e3_GUID@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G@Z
?Save@e3_REFSOURCE@@UEAA?AW4E3RESULT@@PEAVe3_STREAM@@PEAVe3_CONTEXT@@@Z
?Save@e3_STRING@@QEBA?AW4E3RESULT@@PEAVe3_STREAM@@G@Z
?Scale@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?Search@e3_SORTEDCOLLECTION@@UEAA_NPEAXAEA_J@Z
?Set3DSCamera@MATRIX3D@@QEAAXAEAUPOINT3D@@M@Z
?Set@e3_STRING@@QEAA_NAEBV1@@Z
?Set@e3_STRING@@QEAA_NPEBD@Z
?Set@e3_STRING@@QEAA_NPEBG@Z
?SetAlignVectors@MATRIX3D@@QEAAXUPOINT3D@@0@Z
?SetLocalMatrix@MATRIX3D@@QEAAXAEBU1@0@Z
?SetM1@MATRIX3D@@QEAAXAEBU1@0@Z
?SetM2@MATRIX3D@@QEAAXAEBU1@0@Z
?SetMul@MATRIX3D@@QEAAXAEBU1@0@Z
?SetNull@e3_GUID@@QEAAXXZ
?SetParam@e3_EXTENSION@@UEAA_KH_KW4e3_VALUETYPE@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUANGLEAXIS@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUANGLEAXISex@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBUQUAT@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBU_point3d@@0N@Z
?SetRotate@MATRIX3D@@QEAAXAEBU_point3d@@@Z
?SetRotate@MATRIX3D@@QEAAXAEBU_point3d@@N@Z
?SetRotateX@MATRIX3D@@QEAAXN@Z
?SetRotateY@MATRIX3D@@QEAAXN@Z
?SetRotateYPW@MATRIX3D@@QEAAXMMM@Z
?SetRotateZ@MATRIX3D@@QEAAXN@Z
?SetScale@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?SetTranslate@MATRIX3D@@QEAAXAEBUPOINT3D@@@Z
?SetTranslate@MATRIX3D@@QEAAXAEBU_point3d@@@Z
?SetView@MATRIX3D@@QEAAXAEAUPOINT3D@@00@Z
?Sign@MATRIX3D@@QEBAMXZ
?Swap@POINT3D@@QEAAXH@Z
?Swap@e3_COLLECTION@@UEAAX_J0@Z
?ToFloat@e3_STRING@@QEBANPEA_N@Z
?ToInt@e3_STRING@@QEBAHPEA_N@Z
?ToStr@e3_GUID@@QEBAPEADPEAD@Z
?Transform@MATRIX3D@@QEAAXAEBU1@@Z
?TransformPoints@MATRIX3D@@QEBAXPEAUPOINT3D@@H@Z
?TransformPoints@MATRIX3D@@QEBAXPEAU_point3d@@H@Z
?TransformPoints@MATRIX3D@@QEBAXPEBUPOINT3D@@PEAU2@H@Z
?TransformPoints@MATRIX3D@@QEBAXPEBU_point3d@@PEAU2@H@Z
?TransformPoints@matrix3d@@QEBAXPEBUPOINT3D@@PEAU2@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEAUPOINT3D@@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEAU_point3d@@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEBUPOINT3D@@PEAU2@H@Z
?TransformVectors@MATRIX3D@@QEBAXPEBU_point3d@@PEAU2@H@Z
?Transpose@MATRIX3D@@QEAAXXZ
?UTF8toWideString@@YAHPEBDPEAGH@Z
?VectorTransform@MATRIX3D@@QEBA?AUPOINT3D@@AEBU2@@Z
?VectorTransform@MATRIX3D@@QEBA?AU_point3d@@AEBU2@@Z
?WidetoUTF8String@@YAHPEBGPEADH@Z
?WtoA@@YAXPEBGPEAD@Z
?WtoAex@@YAHPEBGPEADH@Z
?_FromUpDir@MATRIX3D@@QEAAXAEAU1@AEAUPOINT3D@@11@Z
?e3sprintf@@YAHPEAG_KPEBGZZ
?p_Transform@MATRIX3D@@AEBAXAEBUPOINT3D@@AEAU2@@Z
?p_Transform@MATRIX3D@@AEBAXAEBU_point3d@@AEAU2@@Z
?p_Transform@matrix3d@@QEBAXAEBUPOINT3D@@AEAU2@@Z
?v_Transform@MATRIX3D@@AEBAXAEBUPOINT3D@@AEAU2@@Z
?v_Transform@MATRIX3D@@AEBAXAEBU_point3d@@AEAU2@@Z
?v_Transform@matrix3d@@QEBAXAEBUPOINT3D@@AEAU2@@Z
E3DLLFunc

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 398KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
other/plug_ins3d/tesselate.x3d
.dll windows:6 windows x64

930e4d9a5f90ac8cbcf63da68ea2159c

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29/04/2022, 00:00

Not After

01/05/2024, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:6c:18:4b:a2:9f:e7:1d:40:13:cf:82:17:57:77:26:94:a9:e9:f9:b3:bc:1b:e9:76:0b:93:9b:07:00:b3:55
Signer

Actual PE Digest

49:6c:18:4b:a2:9f:e7:1d:40:13:cf:82:17:57:77:26:94:a9:e9:f9:b3:bc:1b:e9:76:0b:93:9b:07:00:b3:55

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

vcruntime140

__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__C_specific_handler
_purecall
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

_strnicmp
wcsncpy_s

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table
_initterm_e
_initterm
_initialize_onexit_table
_cexit

kernel32

DisableThreadLibraryCalls
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId

Exports

Exports

??0e3_interface@@QEAA@XZ
?AddRef@e3_interface@@UEAAIXZ
?GetInterfaceVersion@e3_EXTENSION@@UEAAHXZ
?GetParam@e3_EXTENSION@@UEAA_KH_KW4e3_VALUETYPE@@@Z
?Invoke@e3_EXTENSION@@UEAA?AW4E3RESULT@@HPEAVe3_PARAM@@PEAVe3_CONTEXT@@@Z
?IsTypeOf@e3_EXTENSION@@UEAA_NPEBD@Z
?QueryInfo@e3_EXTENSION@@UEAA?AW4E3RESULT@@PEAVe3_XMLNODE@@I@Z
?Release@e3_interface@@UEAAIXZ
?SetParam@e3_EXTENSION@@UEAA_KH_KW4e3_VALUETYPE@@@Z
E3DLLFunc

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vios.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 432KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

c5f6dc1f90a38f06246665a0433b1d04

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

mscoree

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 19KB - Virtual size: 20KB

.data Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 884B

58a0f80e7c2ef763e4252a187c3c5a11

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

19:26:b5:34:c5:c8:40:fc:58:f0:9b:00:df:94:51:f0:0f:f8:aa:e4:be:08:e8:87:3c:b6:de:7a:5e:a7:5c:caSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

msvcp140

setupapi

shlwapi

vcruntime140

vcruntime140_1

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

Exports

Exports

Sections

.text Size: 4.7MB - Virtual size: 4.7MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 227KB - Virtual size: 425KB

.text
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 19KB - Virtual size: 20KB

.data
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 884B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

19:26:b5:34:c5:c8:40:fc:58:f0:9b:00:df:94:51:f0:0f:f8:aa:e4:be:08:e8:87:3c:b6:de:7a:5e:a7:5c:ca
Signer

.text
Size: 4.7MB - Virtual size: 4.7MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 227KB - Virtual size: 425KB

.pdata
Size: 195KB - Virtual size: 195KB

.didat
Size: 512B - Virtual size: 168B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 56KB - Virtual size: 55KB

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

11:7b:8f:30:d0:1a:71:09:51:23:53:07:8d:de:b6:01:40:24:96:29:ff:54:1b:b9:a9:d3:5c:1e:6d:4f:2e:36
Signer

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 9KB - Virtual size: 10KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

62:81:0e:01:7f:cc:15:69:8a:42:d8:d4:38:cb:4b:74:6a:67:99:74:a0:de:bc:72:25:0b:fb:b5:f7:42:ea:f5
Signer