TS[.]SE[.]Tool[.]0[.]3[.]10[.]0[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

TS.SE.Tool.0.3.10.0.zip
Size

7.4MB
MD5

956db032eb2956913e56d0d84e06120d
SHA1

37a215fa1eb7dbd647b60ac578ea0d1018e46d2d
SHA256

2665a157f11f4527c94df1aaa24e7336d32f6113c9c9bf2847e17623dc39b21d
SHA512

679d9ab889bd7e589ecf73e379d49ab1f1ec44946e5123cf61ce2360aae68b8b070e35bb99b96b1c9a76fce8eb439d2a1370696bc20cdbb482ca290c27b97343
SSDEEP

196608:m+WEYL2sqXJUhyMXzmRQTXcZsPyI6cw2XwVVUH8Db:EE2qZUauyLUIV/Db

Score

3^/10

Malware Config

Signatures

Unsigned PE 7 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TS SE Tool.exe
unpack001/libs/ErikEJ.SqlCe40.dll
unpack001/libs/ICSharpCode.SharpZipLib.dll
unpack001/libs/OpenPainter.ColorPicker.dll
unpack001/libs/SII_Decrypt.dll
unpack001/libs/Salient.Data.dll
unpack001/updater/updater.exe

Files

TS.SE.Tool.0.3.10.0.zip
.zip
Changelog.info
HowTo.pdf
.pdf
LICENSE.txt
ReadMe.txt
TS SE Tool.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 974KB - Virtual size: 973KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TS SE Tool.exe.config
Translation.info
gameref/cache/ATS/def.sdf
gameref/cache/ATS/dlc_arizona.sdf
gameref/cache/ATS/dlc_forest_harvesting.sdf
gameref/cache/ATS/dlc_heavy_cargo.sdf
gameref/cache/ATS/dlc_id.sdf
gameref/cache/ATS/dlc_nevada.sdf
gameref/cache/ATS/dlc_nm.sdf
gameref/cache/ATS/dlc_or.sdf
gameref/cache/ATS/dlc_oversize.sdf
gameref/cache/ATS/dlc_ut.sdf
gameref/cache/ATS/dlc_wa.sdf
gameref/cache/ETS2/def.sdf
gameref/cache/ETS2/dlc_balkan_e.sdf
gameref/cache/ETS2/dlc_balt.sdf
gameref/cache/ETS2/dlc_east.sdf
gameref/cache/ETS2/dlc_fr.sdf
gameref/cache/ETS2/dlc_heavy_cargo.sdf
gameref/cache/ETS2/dlc_it.sdf
gameref/cache/ETS2/dlc_north.sdf
gameref/cache/ETS2/dlc_oversize.sdf
gameref/cache/ETS2/dlc_schwarzmuller.sdf
gameref/cache/ETS2/dlc_trailers.sdf
img/ATS/adr_1.dds
img/ATS/adr_1_grey.dds
img/ATS/adr_2.dds
img/ATS/adr_21.dds
img/ATS/adr_22.dds
img/ATS/adr_23.dds
img/ATS/adr_2_grey.dds
img/ATS/adr_3.dds
img/ATS/adr_3_grey.dds
img/ATS/adr_4.dds
img/ATS/adr_41.dds
img/ATS/adr_42.dds
img/ATS/adr_43.dds
img/ATS/adr_4_grey.dds
img/ATS/adr_6.dds
img/ATS/adr_61.dds
img/ATS/adr_62.dds
img/ATS/adr_6_grey.dds
img/ATS/adr_8.dds
img/ATS/adr_8_grey.dds
img/ATS/autosave.dds
img/ATS/base.dds
img/ATS/cabin.dds
img/ATS/cargo.dds
img/ATS/chassis.dds
img/ATS/companies/42print.dds
img/ATS/companies/aport_abq.dds
img/ATS/companies/aport_pcc.dds
img/ATS/companies/avs_met_scr.dds
img/ATS/companies/bitumen.dds
img/ATS/companies/bushnell_farm.dds
img/ATS/companies/charged.dds
img/ATS/companies/chemso.dds
img/ATS/companies/coastline_mining.dds
img/ATS/companies/darchelle_uzau.dds
img/ATS/companies/dc_car_dlr.dds
img/ATS/companies/dg_wd.dds
img/ATS/companies/dmc_car_dlr.dds
img/ATS/companies/dw_air_pln.dds
img/ATS/companies/eddys_food.dds
img/ATS/companies/farmers_barn.dds
img/ATS/companies/ftf_food_pln.dds
img/ATS/companies/gallon_oil.dds
img/ATS/companies/glass.dds
img/ATS/companies/gm_food_plnt.dds
img/ATS/companies/hds_met_shp.dds
img/ATS/companies/hf_wd_pln.dds
img/ATS/companies/hms_service.dds
img/ATS/companies/hs.dds
img/ATS/companies/kw_trk_pln.dds
img/ATS/companies/lumber_jill.dds
img/ATS/companies/mcs_con_sit.dds
img/ATS/companies/oak_port.dds
img/ATS/companies/oh_con_hom.dds
img/ATS/companies/phoenix_freight.dds
img/ATS/companies/plaster_n_son.dds
img/ATS/companies/pnp_wd_pln.dds
img/ATS/companies/port_sea.dds
img/ATS/companies/port_tac.dds
img/ATS/companies/re_train.dds
img/ATS/companies/sellgoods.dds
img/ATS/companies/sf_port.dds
img/ATS/companies/sh_shp_pln.dds
img/ATS/companies/st_met.dds
img/ATS/companies/sunshine.dds
img/ATS/companies/tidbit.dds
img/ATS/companies/voltison.dds
img/ATS/companies/walbert.dds
img/ATS/engine.dds
img/ATS/game_n.dds
img/ATS/lp/arizona/front.dds
img/ATS/lp/arizona/front.mat
img/ATS/lp/arizona/front.tobj
img/ATS/lp/arizona/rear.mat
img/ATS/lp/arizona/trailer.mat
img/ATS/lp/arizona/truck_front.dds
img/ATS/lp/arizona/truck_front.mat
img/ATS/lp/arizona/truck_front.tobj
img/ATS/lp/arizona/truck_rear.mat
img/ATS/lp/california/front.dds
img/ATS/lp/california/front.mat
img/ATS/lp/california/front.tobj
img/ATS/lp/california/police_front.dds
img/ATS/lp/california/police_front.mat
img/ATS/lp/california/police_front.tobj
img/ATS/lp/california/police_rear.mat
img/ATS/lp/california/rear.mat
img/ATS/lp/california/trailer.dds
img/ATS/lp/california/trailer.mat
img/ATS/lp/california/trailer.tobj
img/ATS/lp/california/truck_front.dds
img/ATS/lp/california/truck_front.mat
img/ATS/lp/california/truck_front.tobj
img/ATS/lp/california/truck_rear.mat
img/ATS/lp/idaho/front.dds
img/ATS/lp/idaho/front.mat
img/ATS/lp/idaho/front.tobj
img/ATS/lp/idaho/police.dds
img/ATS/lp/idaho/police.mat
img/ATS/lp/idaho/police.tobj
img/ATS/lp/idaho/rear.dds
img/ATS/lp/idaho/rear.mat
img/ATS/lp/idaho/rear.tobj
img/ATS/lp/idaho/trailer.dds
img/ATS/lp/idaho/trailer.mat
img/ATS/lp/idaho/trailer.tobj
img/ATS/lp/idaho/truck_front.dds
img/ATS/lp/idaho/truck_front.mat
img/ATS/lp/idaho/truck_front.tobj
img/ATS/lp/idaho/truck_rear.dds
img/ATS/lp/idaho/truck_rear.mat
img/ATS/lp/idaho/truck_rear.tobj
img/ATS/lp/nevada/front.dds
img/ATS/lp/nevada/front.mat
img/ATS/lp/nevada/front.tobj
img/ATS/lp/nevada/police_front.dds
img/ATS/lp/nevada/police_front.mat
img/ATS/lp/nevada/police_front.tobj
img/ATS/lp/nevada/police_rear.mat
img/ATS/lp/nevada/rear.mat
img/ATS/lp/nevada/trailer.dds
img/ATS/lp/nevada/trailer.mat
img/ATS/lp/nevada/trailer.tobj
img/ATS/lp/nevada/truck_city_front.dds
img/ATS/lp/nevada/truck_city_front.mat
img/ATS/lp/nevada/truck_city_front.tobj
img/ATS/lp/nevada/truck_city_rear.mat
img/ATS/lp/nevada/truck_front.dds
img/ATS/lp/nevada/truck_front.mat
img/ATS/lp/nevada/truck_front.tobj
img/ATS/lp/nevada/truck_rear.mat
img/ATS/lp/new_mexico/front.dds
img/ATS/lp/new_mexico/front.mat
img/ATS/lp/new_mexico/front.tobj
img/ATS/lp/new_mexico/police_front.dds
img/ATS/lp/new_mexico/police_front.mat
img/ATS/lp/new_mexico/police_front.tobj
img/ATS/lp/new_mexico/police_rear.mat
img/ATS/lp/new_mexico/rear.mat
img/ATS/lp/new_mexico/trailer.dds
img/ATS/lp/new_mexico/trailer.mat
img/ATS/lp/new_mexico/trailer.tobj
img/ATS/lp/new_mexico/truck_front.dds
img/ATS/lp/new_mexico/truck_front.mat
img/ATS/lp/new_mexico/truck_front.tobj
img/ATS/lp/new_mexico/truck_rear.mat
img/ATS/lp/oregon/commercial.dds
img/ATS/lp/oregon/commercial.mat
img/ATS/lp/oregon/commercial.tobj
img/ATS/lp/oregon/front.dds
img/ATS/lp/oregon/front.mat
img/ATS/lp/oregon/front.tobj
img/ATS/lp/oregon/police.dds
img/ATS/lp/oregon/police.mat
img/ATS/lp/oregon/police.tobj
img/ATS/lp/oregon/rear.mat
img/ATS/lp/oregon/trailer.dds
img/ATS/lp/oregon/trailer.mat
img/ATS/lp/oregon/trailer.tobj
img/ATS/lp/oregon/truck_front.dds
img/ATS/lp/oregon/truck_front.mat
img/ATS/lp/oregon/truck_front.tobj
img/ATS/lp/oregon/truck_rear.mat
img/ATS/lp/utah/front.dds
img/ATS/lp/utah/front.mat
img/ATS/lp/utah/front.tobj
img/ATS/lp/utah/police.dds
img/ATS/lp/utah/police.mat
img/ATS/lp/utah/police.tobj
img/ATS/lp/utah/rear.mat
img/ATS/lp/utah/trailer.mat
img/ATS/lp/utah/truck_front.mat
img/ATS/lp/utah/truck_rear.mat
img/ATS/lp/washington/front.dds
img/ATS/lp/washington/front.mat
img/ATS/lp/washington/front.tobj
img/ATS/lp/washington/police.dds
img/ATS/lp/washington/police.mat
img/ATS/lp/washington/police.tobj
img/ATS/lp/washington/rear.mat
img/ATS/lp/washington/trailer.mat
img/ATS/lp/washington/truck_front.dds
img/ATS/lp/washington/truck_front.mat
img/ATS/lp/washington/truck_front.tobj
img/ATS/lp/washington/truck_rear.mat
img/ATS/lpFont/arizona.font
img/ATS/lpFont/arizona_0.dds
img/ATS/lpFont/arizona_0.mat
img/ATS/lpFont/arizona_0.tobj
img/ATS/lpFont/california.font
img/ATS/lpFont/california_0.dds
img/ATS/lpFont/california_0.mat
img/ATS/lpFont/california_0.tobj
img/ATS/lpFont/idaho.font
img/ATS/lpFont/idaho_0.dds
img/ATS/lpFont/idaho_0.mat
img/ATS/lpFont/idaho_0.tobj
img/ATS/lpFont/nevada.font
img/ATS/lpFont/nevada_0.dds
img/ATS/lpFont/nevada_0.mat
img/ATS/lpFont/nevada_0.tobj
img/ATS/lpFont/new_mexico.font
img/ATS/lpFont/new_mexico_0.dds
img/ATS/lpFont/new_mexico_0.mat
img/ATS/lpFont/new_mexico_0.tobj
img/ATS/lpFont/oregon.font
img/ATS/lpFont/utah.font
img/ATS/lpFont/washington.font
img/ATS/player_logo/logo_0.dds
img/ATS/player_logo/logo_1.dds
img/ATS/player_logo/logo_2.dds
img/ATS/player_logo/logo_3.dds
img/ATS/player_logo/logo_4.dds
img/ATS/player_logo/logo_5.dds
img/ATS/player_logo/logo_6.dds
img/ATS/player_logo/logo_7.dds
img/ATS/trailer.dds
img/ATS/trailer_body.dds
img/ATS/trailer_chassis.dds
img/ATS/trailer_dummy_icon.dds
img/ATS/transmission.dds
img/ATS/truck.dds
img/ATS/tyres.dds
img/ETS2/adr_1.dds
img/ETS2/adr_1_grey.dds
img/ETS2/adr_2.dds
img/ETS2/adr_2_grey.dds
img/ETS2/adr_3.dds
img/ETS2/adr_3_grey.dds
img/ETS2/adr_4.dds
img/ETS2/adr_4_grey.dds
img/ETS2/adr_6.dds
img/ETS2/adr_6_grey.dds
img/ETS2/adr_8.dds
img/ETS2/adr_8_grey.dds
img/ETS2/autosave.dds
img/ETS2/base.dds
img/ETS2/cabin.dds
img/ETS2/cargo.dds
img/ETS2/chassis.dds
img/ETS2/companies/aaa.dds
img/ETS2/companies/acc.dds
img/ETS2/companies/aci.dds
img/ETS2/companies/aerobalt.dds
img/ETS2/companies/aerobalt_ru.dds
img/ETS2/companies/agregados.dds
img/ETS2/companies/agrominta.dds
img/ETS2/companies/agronord.dds
img/ETS2/companies/app.dds
img/ETS2/companies/aria_food.dds
img/ETS2/companies/ateria.dds
img/ETS2/companies/balkan_loco.dds
img/ETS2/companies/baltomors_ru.dds
img/ETS2/companies/baltomorsk.dds
img/ETS2/companies/baltrak.dds
img/ETS2/companies/batisse.dds
img/ETS2/companies/bcp.dds
img/ETS2/companies/bhb_raffin.dds
img/ETS2/companies/bhv.dds
img/ETS2/companies/bjork.dds
img/ETS2/companies/blt.dds
img/ETS2/companies/blt_ru.dds
img/ETS2/companies/blt_yacht.dds
img/ETS2/companies/blt_yacht_ru.dds
img/ETS2/companies/bltmetal.dds
img/ETS2/companies/bltmetal_ru.dds
img/ETS2/companies/boisserie.dds
img/ETS2/companies/brawen.dds
img/ETS2/companies/c_navale.dds
img/ETS2/companies/cantera.dds
img/ETS2/companies/canteras_ds.dds
img/ETS2/companies/cargotras.dds
img/ETS2/companies/casa_olivera.dds
img/ETS2/companies/cemelt_fl_ru.dds
img/ETS2/companies/cemelt_win.dds
img/ETS2/companies/cesare_smar.dds
img/ETS2/companies/cesta_sl.dds
img/ETS2/companies/cgla.dds
img/ETS2/companies/chimi.dds
img/ETS2/companies/cnp.dds
img/ETS2/companies/comoto.dds
img/ETS2/companies/cont_port.dds
img/ETS2/companies/cont_port_it.dds
img/ETS2/companies/cont_port_ru.dds
img/ETS2/companies/cortica.dds
img/ETS2/companies/costruzi.dds
img/ETS2/companies/dans_jardin.dds
img/ETS2/companies/dobr_ferm_bg.dds
img/ETS2/companies/domdepo.dds
img/ETS2/companies/domdepo_ru.dds
img/ETS2/companies/drekkar.dds
img/ETS2/companies/dulcis.dds
img/ETS2/companies/eco.dds
img/ETS2/companies/ee_paper.dds
img/ETS2/companies/egres.dds
img/ETS2/companies/elcano.dds
img/ETS2/companies/engeron.dds
img/ETS2/companies/eolo_lines.dds
img/ETS2/companies/eppa.dds
img/ETS2/companies/euroacres.dds
img/ETS2/companies/eurogoodies.dds
img/ETS2/companies/eviksi.dds
img/ETS2/companies/exomar.dds
img/ETS2/companies/fallow.dds
img/ETS2/companies/fattoria_f.dds
img/ETS2/companies/fcp.dds
img/ETS2/companies/fintyre.dds
img/ETS2/companies/fintyre_ru.dds
img/ETS2/companies/fle.dds
img/ETS2/companies/fui.dds
img/ETS2/companies/gallia_ferry.dds
img/ETS2/companies/globeur.dds
img/ETS2/companies/gnt.dds
img/ETS2/companies/gomme_monde.dds
img/ETS2/companies/huerta.dds
img/ETS2/companies/huilant.dds
img/ETS2/companies/iberatomica.dds
img/ETS2/companies/iberialines.dds
img/ETS2/companies/ibp.dds
img/ETS2/companies/ika_bohag.dds
img/ETS2/companies/ika_ru.dds
img/ETS2/companies/imp_otel.dds
img/ETS2/companies/ini.dds
img/ETS2/companies/itcc.dds
img/ETS2/companies/kaarfor.dds
img/ETS2/companies/kamen_ru.dds
img/ETS2/companies/kivi.dds
img/ETS2/companies/kolico.dds
img/ETS2/companies/konstnr.dds
img/ETS2/companies/ladoga.dds
img/ETS2/companies/ladoga_ru.dds
img/ETS2/companies/lateds.dds
img/ETS2/companies/lavish_food.dds
img/ETS2/companies/libellula.dds
img/ETS2/companies/lintukainen.dds
img/ETS2/companies/lisette_log.dds
img/ETS2/companies/lkwlog.dds
img/ETS2/companies/log_atlan.dds
img/ETS2/companies/lognstick.dds
img/ETS2/companies/low_field.dds
img/ETS2/companies/lvr.dds
img/ETS2/companies/marina.dds
img/ETS2/companies/marina_fr.dds
img/ETS2/companies/marina_it.dds
img/ETS2/companies/marmo.dds
img/ETS2/companies/ms_stein.dds
img/ETS2/companies/mvm_carriere.dds
img/ETS2/companies/nbfc.dds
img/ETS2/companies/nch.dds
img/ETS2/companies/nch_ru.dds
img/ETS2/companies/nord_crown.dds
img/ETS2/companies/nord_sten.dds
img/ETS2/companies/norr_food.dds
img/ETS2/companies/norrsken.dds
img/ETS2/companies/nos_pat.dds
img/ETS2/companies/nosko.dds
img/ETS2/companies/ns_chem.dds
img/ETS2/companies/ns_chem_ru.dds
img/ETS2/companies/ns_oil.dds
img/ETS2/companies/ns_oil_ru.dds
img/ETS2/companies/nucleon.dds
img/ETS2/companies/ocean_sol.dds
img/ETS2/companies/onnelik.dds
img/ETS2/companies/ortiz.dds
img/ETS2/companies/piac.dds
img/ETS2/companies/pk_medved_ru.dds
img/ETS2/companies/polar_fish.dds
img/ETS2/companies/polarislines.dds
img/ETS2/companies/port_de_conteneur.dds
img/ETS2/companies/posped.dds
img/ETS2/companies/pp_chimica.dds
img/ETS2/companies/quadrelli.dds
img/ETS2/companies/quarry.dds
img/ETS2/companies/radus.dds
img/ETS2/companies/radus_ru.dds
img/ETS2/companies/renar.dds
img/ETS2/companies/renat.dds
img/ETS2/companies/rimaf.dds
img/ETS2/companies/rock_eater.dds
img/ETS2/companies/rosmark.dds
img/ETS2/companies/rosmark_ru.dds
img/ETS2/companies/rt_log.dds
img/ETS2/companies/rump.dds
img/ETS2/companies/sag_tre.dds
img/ETS2/companies/sal.dds
img/ETS2/companies/sal_fi.dds
img/ETS2/companies/sanbuilders.dds
img/ETS2/companies/scania.dds
img/ETS2/companies/scs_paper.dds
img/ETS2/companies/sellplan.dds
img/ETS2/companies/severoatm_ru.dds
img/ETS2/companies/skoda.dds
img/ETS2/companies/spinelli.dds
img/ETS2/companies/sporklift.dds
img/ETS2/companies/st_roza_bg.dds
img/ETS2/companies/stokes.dds
img/ETS2/companies/subse.dds
img/ETS2/companies/supercesta.dds
img/ETS2/companies/suprema.dds
img/ETS2/companies/suprema_ru.dds
img/ETS2/companies/tdc_auto.dds
img/ETS2/companies/te_logistica.dds
img/ETS2/companies/tesore_gust.dds
img/ETS2/companies/timberturtle.dds
img/ETS2/companies/tm_istanbul.dds
img/ETS2/companies/tradeaux.dds
img/ETS2/companies/trainfoundry.dds
img/ETS2/companies/trameri.dds
img/ETS2/companies/trans_cab.dds
img/ETS2/companies/transinet.dds
img/ETS2/companies/tras_med.dds
img/ETS2/companies/tree_et.dds
img/ETS2/companies/ts_atlas.dds
img/ETS2/companies/ttk_bg.dds
img/ETS2/companies/ukko.dds
img/ETS2/companies/viljo_paper.dds
img/ETS2/companies/viln_paper.dds
img/ETS2/companies/vitas_pwr.dds
img/ETS2/companies/voitureux.dds
img/ETS2/companies/volvo.dds
img/ETS2/companies/vpc.dds
img/ETS2/companies/wgcc.dds
img/ETS2/companies/wilnet_trans.dds
img/ETS2/companies/zelenye.dds
img/ETS2/engine.dds
img/ETS2/game_n.dds
img/ETS2/lp/austria/b_police.dds
img/ETS2/lp/austria/b_police.mat
img/ETS2/lp/austria/b_police.tobj
img/ETS2/lp/austria/front.dds
img/ETS2/lp/austria/front.mat
img/ETS2/lp/austria/front.tobj
img/ETS2/lp/austria/g.dds
img/ETS2/lp/austria/g.mat
img/ETS2/lp/austria/g.tobj
img/ETS2/lp/austria/i.dds
img/ETS2/lp/austria/i.mat
img/ETS2/lp/austria/i.tobj
img/ETS2/lp/austria/k.dds
img/ETS2/lp/austria/k.mat
img/ETS2/lp/austria/k.tobj
img/ETS2/lp/austria/l.dds
img/ETS2/lp/austria/l.mat
img/ETS2/lp/austria/l.tobj
img/ETS2/lp/austria/ma.dds
img/ETS2/lp/austria/ma.mat
img/ETS2/lp/austria/ma.tobj
img/ETS2/lp/austria/police_front.mat
img/ETS2/lp/austria/police_rear.mat
img/ETS2/lp/austria/rear.mat
img/ETS2/lp/austria/ri.dds
img/ETS2/lp/austria/ri.mat
img/ETS2/lp/austria/ri.tobj
img/ETS2/lp/austria/s.dds
img/ETS2/lp/austria/s.mat
img/ETS2/lp/austria/s.tobj
img/ETS2/lp/austria/trailer.mat
img/ETS2/lp/austria/truck_front.mat
img/ETS2/lp/austria/truck_rear.mat
img/ETS2/lp/austria/w.dds
img/ETS2/lp/austria/w.mat
img/ETS2/lp/austria/w.tobj
img/ETS2/lp/belgium/front.dds
img/ETS2/lp/belgium/front.mat
img/ETS2/lp/belgium/front.tobj
img/ETS2/lp/belgium/police_front.mat
img/ETS2/lp/belgium/police_rear.mat
img/ETS2/lp/belgium/rear.mat
img/ETS2/lp/belgium/trailer.mat
img/ETS2/lp/belgium/truck_front.mat
img/ETS2/lp/belgium/truck_rear.mat
img/ETS2/lp/bulgaria/front.mat
img/ETS2/lp/bulgaria/rear.dds
img/ETS2/lp/bulgaria/rear.mat
img/ETS2/lp/bulgaria/rear.tobj
img/ETS2/lp/bulgaria/trailer.mat
img/ETS2/lp/bulgaria/truck_front.mat
img/ETS2/lp/bulgaria/truck_rear.mat
img/ETS2/lp/czech/b.dds
img/ETS2/lp/czech/b.mat
img/ETS2/lp/czech/b.tobj
img/ETS2/lp/czech/front.mat
img/ETS2/lp/czech/frontb.dds
img/ETS2/lp/czech/frontb.mat
img/ETS2/lp/czech/frontb.tobj
img/ETS2/lp/czech/police_front.mat
img/ETS2/lp/czech/police_frontb.mat
img/ETS2/lp/czech/police_rear.mat
img/ETS2/lp/czech/police_rearb.mat
img/ETS2/lp/czech/rear.dds
img/ETS2/lp/czech/rear.mat
img/ETS2/lp/czech/rear.tobj
img/ETS2/lp/czech/rearb.mat
img/ETS2/lp/czech/trailer.mat
img/ETS2/lp/czech/trailerb.mat
img/ETS2/lp/czech/truck_front.mat
img/ETS2/lp/czech/truck_frontb.mat
img/ETS2/lp/czech/truck_rear.mat
img/ETS2/lp/czech/truck_rearb.mat
img/ETS2/lp/denmark/front.mat
img/ETS2/lp/denmark/police_front.mat
img/ETS2/lp/denmark/police_rear.mat
img/ETS2/lp/denmark/rear.dds
img/ETS2/lp/denmark/rear.mat
img/ETS2/lp/denmark/rear.tobj
img/ETS2/lp/denmark/trailer.mat
img/ETS2/lp/denmark/truck_front.mat
img/ETS2/lp/denmark/truck_rear.dds
img/ETS2/lp/denmark/truck_rear.mat
img/ETS2/lp/denmark/truck_rear.tobj
img/ETS2/lp/estonia/front.mat
img/ETS2/lp/estonia/police_front.mat
img/ETS2/lp/estonia/police_rear.mat
img/ETS2/lp/estonia/rear.dds
img/ETS2/lp/estonia/rear.mat
img/ETS2/lp/estonia/rear.tobj
img/ETS2/lp/estonia/trailer.mat
img/ETS2/lp/estonia/truck_front.mat
img/ETS2/lp/estonia/truck_rear.mat
img/ETS2/lp/finland/front.mat
img/ETS2/lp/finland/police_front.mat
img/ETS2/lp/finland/police_rear.mat
img/ETS2/lp/finland/rear.dds
img/ETS2/lp/finland/rear.mat
img/ETS2/lp/finland/rear.tobj
img/ETS2/lp/finland/trailer.mat
img/ETS2/lp/finland/truck_front.mat
img/ETS2/lp/finland/truck_rear.mat
img/ETS2/lp/france/01.dds
img/ETS2/lp/france/01.mat
img/ETS2/lp/france/01.tobj
img/ETS2/lp/france/02.dds
img/ETS2/lp/france/02.mat
img/ETS2/lp/france/02.tobj
img/ETS2/lp/france/03.dds
img/ETS2/lp/france/03.mat
img/ETS2/lp/france/03.tobj
img/ETS2/lp/france/04.dds
img/ETS2/lp/france/04.mat
img/ETS2/lp/france/04.tobj
img/ETS2/lp/france/05.dds
img/ETS2/lp/france/05.mat
img/ETS2/lp/france/05.tobj
img/ETS2/lp/france/06.dds
img/ETS2/lp/france/06.mat
img/ETS2/lp/france/06.tobj
img/ETS2/lp/france/07.dds
img/ETS2/lp/france/07.mat
img/ETS2/lp/france/07.tobj
img/ETS2/lp/france/08.dds
img/ETS2/lp/france/08.mat
img/ETS2/lp/france/08.tobj
img/ETS2/lp/france/09.dds
img/ETS2/lp/france/09.mat
img/ETS2/lp/france/09.tobj
img/ETS2/lp/france/10.dds
img/ETS2/lp/france/10.mat
img/ETS2/lp/france/10.tobj
img/ETS2/lp/france/11.dds
img/ETS2/lp/france/11.mat
img/ETS2/lp/france/11.tobj
img/ETS2/lp/france/12.dds
img/ETS2/lp/france/12.mat
img/ETS2/lp/france/12.tobj
img/ETS2/lp/france/13.dds
img/ETS2/lp/france/13.mat
img/ETS2/lp/france/13.tobj
img/ETS2/lp/france/14.dds
img/ETS2/lp/france/14.mat
img/ETS2/lp/france/14.tobj
img/ETS2/lp/france/15.dds
img/ETS2/lp/france/15.mat
img/ETS2/lp/france/15.tobj
img/ETS2/lp/france/16.dds
img/ETS2/lp/france/16.mat
img/ETS2/lp/france/16.tobj
img/ETS2/lp/france/17.dds
img/ETS2/lp/france/17.mat
img/ETS2/lp/france/17.tobj
img/ETS2/lp/france/18.dds
img/ETS2/lp/france/18.mat
img/ETS2/lp/france/18.tobj
img/ETS2/lp/france/19.dds
img/ETS2/lp/france/19.mat
img/ETS2/lp/france/19.tobj
img/ETS2/lp/france/21.dds
img/ETS2/lp/france/21.mat
img/ETS2/lp/france/21.tobj
img/ETS2/lp/france/22.dds
img/ETS2/lp/france/22.mat
img/ETS2/lp/france/22.tobj
img/ETS2/lp/france/23.dds
img/ETS2/lp/france/23.mat
img/ETS2/lp/france/23.tobj
img/ETS2/lp/france/24.dds
img/ETS2/lp/france/24.mat
img/ETS2/lp/france/24.tobj
img/ETS2/lp/france/25.dds
img/ETS2/lp/france/25.mat
img/ETS2/lp/france/25.tobj
img/ETS2/lp/france/26.dds
img/ETS2/lp/france/26.mat
img/ETS2/lp/france/26.tobj
img/ETS2/lp/france/27.dds
img/ETS2/lp/france/27.mat
img/ETS2/lp/france/27.tobj
img/ETS2/lp/france/28.dds
img/ETS2/lp/france/28.mat
img/ETS2/lp/france/28.tobj
img/ETS2/lp/france/29.dds
img/ETS2/lp/france/29.mat
img/ETS2/lp/france/29.tobj
img/ETS2/lp/france/2a.dds
img/ETS2/lp/france/2a.mat
img/ETS2/lp/france/2a.tobj
img/ETS2/lp/france/2b.dds
img/ETS2/lp/france/2b.mat
img/ETS2/lp/france/2b.tobj
img/ETS2/lp/france/30.dds
img/ETS2/lp/france/30.mat
img/ETS2/lp/france/30.tobj
img/ETS2/lp/france/31.dds
img/ETS2/lp/france/31.mat
img/ETS2/lp/france/31.tobj
img/ETS2/lp/france/32.dds
img/ETS2/lp/france/32.mat
img/ETS2/lp/france/32.tobj
img/ETS2/lp/france/33.dds
img/ETS2/lp/france/33.mat
img/ETS2/lp/france/33.tobj
img/ETS2/lp/france/34.dds
img/ETS2/lp/france/34.mat
img/ETS2/lp/france/34.tobj
img/ETS2/lp/france/35.dds
img/ETS2/lp/france/35.mat
img/ETS2/lp/france/35.tobj
img/ETS2/lp/france/36.dds
img/ETS2/lp/france/36.mat
img/ETS2/lp/france/36.tobj
img/ETS2/lp/france/37.dds
img/ETS2/lp/france/37.mat
img/ETS2/lp/france/37.tobj
img/ETS2/lp/france/38.dds
img/ETS2/lp/france/38.mat
img/ETS2/lp/france/38.tobj
img/ETS2/lp/france/39.dds
img/ETS2/lp/france/39.mat
img/ETS2/lp/france/39.tobj
img/ETS2/lp/france/40.dds
img/ETS2/lp/france/40.mat
img/ETS2/lp/france/40.tobj
img/ETS2/lp/france/41.dds
img/ETS2/lp/france/41.mat
img/ETS2/lp/france/41.tobj
img/ETS2/lp/france/42.dds
img/ETS2/lp/france/42.mat
img/ETS2/lp/france/42.tobj
img/ETS2/lp/france/43.dds
img/ETS2/lp/france/43.mat
img/ETS2/lp/france/43.tobj
img/ETS2/lp/france/44.dds
img/ETS2/lp/france/44.mat
img/ETS2/lp/france/44.tobj
img/ETS2/lp/france/45.dds
img/ETS2/lp/france/45.mat
img/ETS2/lp/france/45.tobj
img/ETS2/lp/france/46.dds
img/ETS2/lp/france/46.mat
img/ETS2/lp/france/46.tobj
img/ETS2/lp/france/47.dds
img/ETS2/lp/france/47.mat
img/ETS2/lp/france/47.tobj
img/ETS2/lp/france/48.dds
img/ETS2/lp/france/48.mat
img/ETS2/lp/france/48.tobj
img/ETS2/lp/france/49.dds
img/ETS2/lp/france/49.mat
img/ETS2/lp/france/49.tobj
img/ETS2/lp/france/50.dds
img/ETS2/lp/france/50.mat
img/ETS2/lp/france/50.tobj
img/ETS2/lp/france/51.dds
img/ETS2/lp/france/51.mat
img/ETS2/lp/france/51.tobj
img/ETS2/lp/france/52.dds
img/ETS2/lp/france/52.mat
img/ETS2/lp/france/52.tobj
img/ETS2/lp/france/53.dds
img/ETS2/lp/france/53.mat
img/ETS2/lp/france/53.tobj
img/ETS2/lp/france/54.dds
img/ETS2/lp/france/54.mat
img/ETS2/lp/france/54.tobj
img/ETS2/lp/france/55.dds
img/ETS2/lp/france/55.mat
img/ETS2/lp/france/55.tobj
img/ETS2/lp/france/56.dds
img/ETS2/lp/france/56.mat
img/ETS2/lp/france/56.tobj
img/ETS2/lp/france/57.dds
img/ETS2/lp/france/57.mat
img/ETS2/lp/france/57.tobj
img/ETS2/lp/france/58.dds
img/ETS2/lp/france/58.mat
img/ETS2/lp/france/58.tobj
img/ETS2/lp/france/59.dds
img/ETS2/lp/france/59.mat
img/ETS2/lp/france/59.tobj
img/ETS2/lp/france/60.dds
img/ETS2/lp/france/60.mat
img/ETS2/lp/france/60.tobj
img/ETS2/lp/france/61.dds
img/ETS2/lp/france/61.mat
img/ETS2/lp/france/61.tobj
img/ETS2/lp/france/62.dds
img/ETS2/lp/france/62.mat
img/ETS2/lp/france/62.tobj
img/ETS2/lp/france/63.dds
img/ETS2/lp/france/63.mat
img/ETS2/lp/france/63.tobj
img/ETS2/lp/france/64.dds
img/ETS2/lp/france/64.mat
img/ETS2/lp/france/64.tobj
img/ETS2/lp/france/65.dds
img/ETS2/lp/france/65.mat
img/ETS2/lp/france/65.tobj
img/ETS2/lp/france/66.dds
img/ETS2/lp/france/66.mat
img/ETS2/lp/france/66.tobj
img/ETS2/lp/france/67.dds
img/ETS2/lp/france/67.mat
img/ETS2/lp/france/67.tobj
img/ETS2/lp/france/68.dds
img/ETS2/lp/france/68.mat
img/ETS2/lp/france/68.tobj
img/ETS2/lp/france/69.dds
img/ETS2/lp/france/69.mat
img/ETS2/lp/france/69.tobj
img/ETS2/lp/france/70.dds
img/ETS2/lp/france/70.mat
img/ETS2/lp/france/70.tobj
img/ETS2/lp/france/71.dds
img/ETS2/lp/france/71.mat
img/ETS2/lp/france/71.tobj
img/ETS2/lp/france/72.dds
img/ETS2/lp/france/72.mat
img/ETS2/lp/france/72.tobj
img/ETS2/lp/france/73.dds
img/ETS2/lp/france/73.mat
img/ETS2/lp/france/73.tobj
img/ETS2/lp/france/74.dds
img/ETS2/lp/france/74.mat
img/ETS2/lp/france/74.tobj
img/ETS2/lp/france/75.dds
img/ETS2/lp/france/75.mat
img/ETS2/lp/france/75.tobj
img/ETS2/lp/france/76.dds
img/ETS2/lp/france/76.mat
img/ETS2/lp/france/76.tobj
img/ETS2/lp/france/77.dds
img/ETS2/lp/france/77.mat
img/ETS2/lp/france/77.tobj
img/ETS2/lp/france/78.dds
img/ETS2/lp/france/78.mat
img/ETS2/lp/france/78.tobj
img/ETS2/lp/france/79.dds
img/ETS2/lp/france/79.mat
img/ETS2/lp/france/79.tobj
img/ETS2/lp/france/80.dds
img/ETS2/lp/france/80.mat
img/ETS2/lp/france/80.tobj
img/ETS2/lp/france/81.dds
img/ETS2/lp/france/81.mat
img/ETS2/lp/france/81.tobj
img/ETS2/lp/france/82.dds
img/ETS2/lp/france/82.mat
img/ETS2/lp/france/82.tobj
img/ETS2/lp/france/83.dds
img/ETS2/lp/france/83.mat
img/ETS2/lp/france/83.tobj
img/ETS2/lp/france/84.dds
img/ETS2/lp/france/84.mat
img/ETS2/lp/france/84.tobj
img/ETS2/lp/france/85.dds
img/ETS2/lp/france/85.mat
img/ETS2/lp/france/85.tobj
img/ETS2/lp/france/86.dds
img/ETS2/lp/france/86.mat
img/ETS2/lp/france/86.tobj
img/ETS2/lp/france/87.dds
img/ETS2/lp/france/87.mat
img/ETS2/lp/france/87.tobj
img/ETS2/lp/france/88.dds
img/ETS2/lp/france/88.mat
img/ETS2/lp/france/88.tobj
img/ETS2/lp/france/89.dds
img/ETS2/lp/france/89.mat
img/ETS2/lp/france/89.tobj
img/ETS2/lp/france/90.dds
img/ETS2/lp/france/90.mat
img/ETS2/lp/france/90.tobj
img/ETS2/lp/france/91.dds
img/ETS2/lp/france/91.mat
img/ETS2/lp/france/91.tobj
img/ETS2/lp/france/92.dds
img/ETS2/lp/france/92.mat
img/ETS2/lp/france/92.tobj
img/ETS2/lp/france/93.dds
img/ETS2/lp/france/93.mat
img/ETS2/lp/france/93.tobj
img/ETS2/lp/france/94.dds
img/ETS2/lp/france/94.mat
img/ETS2/lp/france/94.tobj
img/ETS2/lp/france/95.dds
img/ETS2/lp/france/95.mat
img/ETS2/lp/france/95.tobj
img/ETS2/lp/france/front.mat
img/ETS2/lp/france/police_front.mat
img/ETS2/lp/france/police_rear.mat
img/ETS2/lp/france/rear.dds
img/ETS2/lp/france/rear.mat
img/ETS2/lp/france/rear.tobj
img/ETS2/lp/france/trailer.mat
img/ETS2/lp/france/truck_front.mat
img/ETS2/lp/france/truck_rear.mat
img/ETS2/lp/germany/b.dds
img/ETS2/lp/germany/b.mat
img/ETS2/lp/germany/b.tobj
img/ETS2/lp/germany/b_1.dds
img/ETS2/lp/germany/b_1.mat
img/ETS2/lp/germany/b_1.tobj
img/ETS2/lp/germany/b_2.dds
img/ETS2/lp/germany/b_2.mat
img/ETS2/lp/germany/b_2.tobj
img/ETS2/lp/germany/b_3.mat
img/ETS2/lp/germany/b_3.tobj
img/ETS2/lp/germany/b_police.dds
img/ETS2/lp/germany/b_police.mat
img/ETS2/lp/germany/b_police.tobj
img/ETS2/lp/germany/front.dds
img/ETS2/lp/germany/front.mat
img/ETS2/lp/germany/front.tobj
img/ETS2/lp/germany/police_front.mat
img/ETS2/lp/germany/police_rear.mat
img/ETS2/lp/germany/rear.mat
img/ETS2/lp/germany/trailer.mat
img/ETS2/lp/germany/truck_front.mat
img/ETS2/lp/germany/truck_rear.mat
img/ETS2/lp/hungary/bt.dds
img/ETS2/lp/hungary/bt.mat
img/ETS2/lp/hungary/bt.tobj
img/ETS2/lp/hungary/front.dds
img/ETS2/lp/hungary/front.mat
img/ETS2/lp/hungary/front.tobj
img/ETS2/lp/hungary/frontb.dds
img/ETS2/lp/hungary/frontb.mat
img/ETS2/lp/hungary/frontb.tobj
img/ETS2/lp/hungary/police_front.mat
img/ETS2/lp/hungary/police_rear.mat
img/ETS2/lp/hungary/rear.mat
img/ETS2/lp/hungary/rearb.dds
img/ETS2/lp/hungary/rearb.mat
img/ETS2/lp/hungary/rearb.tobj
img/ETS2/lp/hungary/trailer.mat
img/ETS2/lp/hungary/truck_front.mat
img/ETS2/lp/hungary/truck_frontb.mat
img/ETS2/lp/hungary/truck_rear.mat
img/ETS2/lp/hungary/truck_rearb.mat
img/ETS2/lp/italy/front.dds
img/ETS2/lp/italy/front.mat
img/ETS2/lp/italy/front.tobj
img/ETS2/lp/italy/police_front.mat
img/ETS2/lp/italy/police_rear.mat
img/ETS2/lp/italy/rear.mat
img/ETS2/lp/italy/trailer.mat
img/ETS2/lp/italy/truck_front.mat
img/ETS2/lp/italy/truck_rear.mat
img/ETS2/lp/latvia/front.mat
img/ETS2/lp/latvia/police_front.mat
img/ETS2/lp/latvia/police_rear.mat
img/ETS2/lp/latvia/rear.dds
img/ETS2/lp/latvia/rear.mat
img/ETS2/lp/latvia/rear.tobj
img/ETS2/lp/latvia/trailer.mat
img/ETS2/lp/latvia/truck_front.mat
img/ETS2/lp/latvia/truck_rear.mat
img/ETS2/lp/lithuania/front.mat
img/ETS2/lp/lithuania/police_front.mat
img/ETS2/lp/lithuania/police_rear.mat
img/ETS2/lp/lithuania/rear.dds
img/ETS2/lp/lithuania/rear.mat
img/ETS2/lp/lithuania/rear.tobj
img/ETS2/lp/lithuania/trailer.mat
img/ETS2/lp/lithuania/truck_front.mat
img/ETS2/lp/lithuania/truck_rear.mat
img/ETS2/lp/luxembourg/front.mat
img/ETS2/lp/luxembourg/police_front.mat
img/ETS2/lp/luxembourg/police_rear.mat
img/ETS2/lp/luxembourg/rear.dds
img/ETS2/lp/luxembourg/rear.mat
img/ETS2/lp/luxembourg/rear.tobj
img/ETS2/lp/luxembourg/trailer.mat
img/ETS2/lp/luxembourg/truck_front.mat
img/ETS2/lp/luxembourg/truck_rear.mat
img/ETS2/lp/netherlands/front.mat
img/ETS2/lp/netherlands/police_front.mat
img/ETS2/lp/netherlands/police_rear.mat
img/ETS2/lp/netherlands/rear.dds
img/ETS2/lp/netherlands/rear.mat
img/ETS2/lp/netherlands/rear.tobj
img/ETS2/lp/netherlands/trailer.mat
img/ETS2/lp/netherlands/truck_front.mat
img/ETS2/lp/netherlands/truck_rear.mat
img/ETS2/lp/norway/front.mat
img/ETS2/lp/norway/police_front.mat
img/ETS2/lp/norway/police_rear.mat
img/ETS2/lp/norway/rear.dds
img/ETS2/lp/norway/rear.mat
img/ETS2/lp/norway/rear.tobj
img/ETS2/lp/norway/trailer.mat
img/ETS2/lp/norway/truck_front.mat
img/ETS2/lp/norway/truck_rear.mat
img/ETS2/lp/poland/front.mat
img/ETS2/lp/poland/police_front.mat
img/ETS2/lp/poland/police_rear.mat
img/ETS2/lp/poland/rear.dds
img/ETS2/lp/poland/rear.mat
img/ETS2/lp/poland/rear.tobj
img/ETS2/lp/poland/trailer.mat
img/ETS2/lp/poland/truck_front.mat
img/ETS2/lp/poland/truck_rear.mat
img/ETS2/lp/portugal/front.dds
img/ETS2/lp/portugal/front.mat
img/ETS2/lp/portugal/front.tobj
img/ETS2/lp/portugal/rear.mat
img/ETS2/lp/portugal/trailer.mat
img/ETS2/lp/portugal/truck_front.mat
img/ETS2/lp/portugal/truck_rear.mat
img/ETS2/lp/romania/front.mat
img/ETS2/lp/romania/rear.dds
img/ETS2/lp/romania/rear.mat
img/ETS2/lp/romania/rear.tobj
img/ETS2/lp/romania/trailer.mat
img/ETS2/lp/romania/truck_front.mat
img/ETS2/lp/romania/truck_rear.mat
img/ETS2/lp/russia/front.mat
img/ETS2/lp/russia/police_front.mat
img/ETS2/lp/russia/police_rear.dds
img/ETS2/lp/russia/police_rear.mat
img/ETS2/lp/russia/police_rear.tobj
img/ETS2/lp/russia/rear.dds
img/ETS2/lp/russia/rear.mat
img/ETS2/lp/russia/rear.tobj
img/ETS2/lp/russia/trailer.mat
img/ETS2/lp/russia/truck_front.mat
img/ETS2/lp/russia/truck_rear.mat
img/ETS2/lp/slovakia/front.mat
img/ETS2/lp/slovakia/police_front.mat
img/ETS2/lp/slovakia/police_rear.mat
img/ETS2/lp/slovakia/rear.dds
img/ETS2/lp/slovakia/rear.mat
img/ETS2/lp/slovakia/rear.tobj
img/ETS2/lp/slovakia/trailer.mat
img/ETS2/lp/slovakia/truck_front.mat
img/ETS2/lp/slovakia/truck_rear.mat
img/ETS2/lp/spain/front.dds
img/ETS2/lp/spain/front.mat
img/ETS2/lp/spain/front.tobj
img/ETS2/lp/spain/police_basq.dds
img/ETS2/lp/spain/police_basq.mat
img/ETS2/lp/spain/police_basq.tobj
img/ETS2/lp/spain/rear.mat
img/ETS2/lp/spain/trailer.mat
img/ETS2/lp/spain/truck_front.mat
img/ETS2/lp/spain/truck_rear.mat
img/ETS2/lp/sweden/front.mat
img/ETS2/lp/sweden/police_front.mat
img/ETS2/lp/sweden/police_rear.mat
img/ETS2/lp/sweden/rear.dds
img/ETS2/lp/sweden/rear.mat
img/ETS2/lp/sweden/rear.tobj
img/ETS2/lp/sweden/trailer.mat
img/ETS2/lp/sweden/truck_front.mat
img/ETS2/lp/sweden/truck_rear.mat
img/ETS2/lp/switzerland/front.dds
img/ETS2/lp/switzerland/front.mat
img/ETS2/lp/switzerland/front.tobj
img/ETS2/lp/switzerland/front_be.mat
img/ETS2/lp/switzerland/front_empty.dds
img/ETS2/lp/switzerland/front_empty.tobj
img/ETS2/lp/switzerland/front_ge.mat
img/ETS2/lp/switzerland/front_gr.mat
img/ETS2/lp/switzerland/front_vs.mat
img/ETS2/lp/switzerland/front_zh.mat
img/ETS2/lp/switzerland/police_front.mat
img/ETS2/lp/switzerland/police_front_be.mat
img/ETS2/lp/switzerland/police_front_ge.mat
img/ETS2/lp/switzerland/police_front_gr.mat
img/ETS2/lp/switzerland/police_front_vs.mat
img/ETS2/lp/switzerland/police_front_zh.mat
img/ETS2/lp/switzerland/police_rear.mat
img/ETS2/lp/switzerland/police_rear_be.mat
img/ETS2/lp/switzerland/police_rear_ge.mat
img/ETS2/lp/switzerland/police_rear_gr.mat
img/ETS2/lp/switzerland/police_rear_vs.mat
img/ETS2/lp/switzerland/police_rear_zh.mat
img/ETS2/lp/switzerland/rear.dds
img/ETS2/lp/switzerland/rear.mat
img/ETS2/lp/switzerland/rear.tobj
img/ETS2/lp/switzerland/rear_be.dds
img/ETS2/lp/switzerland/rear_be.mat
img/ETS2/lp/switzerland/rear_be.tobj
img/ETS2/lp/switzerland/rear_ge.dds
img/ETS2/lp/switzerland/rear_ge.mat
img/ETS2/lp/switzerland/rear_ge.tobj
img/ETS2/lp/switzerland/rear_gr.dds
img/ETS2/lp/switzerland/rear_gr.mat
img/ETS2/lp/switzerland/rear_gr.tobj
img/ETS2/lp/switzerland/rear_vs.dds
img/ETS2/lp/switzerland/rear_vs.mat
img/ETS2/lp/switzerland/rear_vs.tobj
img/ETS2/lp/switzerland/rear_zh.dds
img/ETS2/lp/switzerland/rear_zh.mat
img/ETS2/lp/switzerland/rear_zh.tobj
img/ETS2/lp/switzerland/trailer.mat
img/ETS2/lp/switzerland/trailer_be.mat
img/ETS2/lp/switzerland/trailer_ge.mat
img/ETS2/lp/switzerland/trailer_gr.mat
img/ETS2/lp/switzerland/trailer_vs.mat
img/ETS2/lp/switzerland/trailer_zh.mat
img/ETS2/lp/switzerland/truck_front.mat
img/ETS2/lp/switzerland/truck_front_be.mat
img/ETS2/lp/switzerland/truck_front_ge.mat
img/ETS2/lp/switzerland/truck_front_gr.mat
img/ETS2/lp/switzerland/truck_front_vs.mat
img/ETS2/lp/switzerland/truck_front_zh.mat
img/ETS2/lp/switzerland/truck_rear.mat
img/ETS2/lp/switzerland/truck_rear_be.mat
img/ETS2/lp/switzerland/truck_rear_ge.mat
img/ETS2/lp/switzerland/truck_rear_gr.mat
img/ETS2/lp/switzerland/truck_rear_vs.mat
img/ETS2/lp/switzerland/truck_rear_zh.mat
img/ETS2/lp/turkey/duty_rear.dds
img/ETS2/lp/turkey/duty_rear.mat
img/ETS2/lp/turkey/duty_rear.tobj
img/ETS2/lp/turkey/front.mat
img/ETS2/lp/turkey/police_rear.dds
img/ETS2/lp/turkey/police_rear.mat
img/ETS2/lp/turkey/police_rear.tobj
img/ETS2/lp/turkey/rear.dds
img/ETS2/lp/turkey/rear.mat
img/ETS2/lp/turkey/rear.tobj
img/ETS2/lp/turkey/trailer.mat
img/ETS2/lp/turkey/truck_front.mat
img/ETS2/lp/turkey/truck_rear.mat
img/ETS2/lp/uk/front.dds
img/ETS2/lp/uk/front.mat
img/ETS2/lp/uk/front.tobj
img/ETS2/lp/uk/police_front.mat
img/ETS2/lp/uk/police_rear.mat
img/ETS2/lp/uk/rear.dds
img/ETS2/lp/uk/rear.mat
img/ETS2/lp/uk/rear.tobj
img/ETS2/lp/uk/trailer.mat
img/ETS2/lp/uk/truck_front.mat
img/ETS2/lp/uk/truck_rear.mat
img/ETS2/lpFont/austria.font
img/ETS2/lpFont/austria_0.dds
img/ETS2/lpFont/austria_0.mat
img/ETS2/lpFont/austria_0.tobj
img/ETS2/lpFont/belgium.font
img/ETS2/lpFont/belgium_0.dds
img/ETS2/lpFont/belgium_0.mat
img/ETS2/lpFont/belgium_0.tobj
img/ETS2/lpFont/bulgaria.font
img/ETS2/lpFont/bulgaria_0.dds
img/ETS2/lpFont/bulgaria_0.mat
img/ETS2/lpFont/bulgaria_0.tobj
img/ETS2/lpFont/czech.font
img/ETS2/lpFont/czech_0.dds
img/ETS2/lpFont/czech_0.mat
img/ETS2/lpFont/czech_0.tobj
img/ETS2/lpFont/denmark.font
img/ETS2/lpFont/denmark_0.dds
img/ETS2/lpFont/denmark_0.mat
img/ETS2/lpFont/denmark_0.tobj
img/ETS2/lpFont/estonia.font
img/ETS2/lpFont/estonia_0.dds
img/ETS2/lpFont/estonia_0.mat
img/ETS2/lpFont/estonia_0.tobj
img/ETS2/lpFont/finland.font
img/ETS2/lpFont/finland_0.dds
img/ETS2/lpFont/finland_0.mat
img/ETS2/lpFont/finland_0.tobj
img/ETS2/lpFont/france.font
img/ETS2/lpFont/france_0.dds
img/ETS2/lpFont/france_0.mat
img/ETS2/lpFont/france_0.tobj
img/ETS2/lpFont/germany.font
img/ETS2/lpFont/germany_0.dds
img/ETS2/lpFont/germany_0.mat
img/ETS2/lpFont/germany_0.tobj
img/ETS2/lpFont/hungary.font
img/ETS2/lpFont/hungary_0.dds
img/ETS2/lpFont/hungary_0.mat
img/ETS2/lpFont/hungary_0.tobj
img/ETS2/lpFont/italy.font
img/ETS2/lpFont/italy_0.dds
img/ETS2/lpFont/italy_0.mat
img/ETS2/lpFont/italy_0.tobj
img/ETS2/lpFont/latvia.font
img/ETS2/lpFont/latvia_0.dds
img/ETS2/lpFont/latvia_0.mat
img/ETS2/lpFont/latvia_0.tobj
img/ETS2/lpFont/lithuania.font
img/ETS2/lpFont/lithuania_0.dds
img/ETS2/lpFont/lithuania_0.mat
img/ETS2/lpFont/lithuania_0.tobj
img/ETS2/lpFont/luxembourg.font
img/ETS2/lpFont/luxembourg_0.dds
img/ETS2/lpFont/luxembourg_0.mat
img/ETS2/lpFont/luxembourg_0.tobj
img/ETS2/lpFont/netherlands.font
img/ETS2/lpFont/netherlands_0.dds
img/ETS2/lpFont/netherlands_0.mat
img/ETS2/lpFont/netherlands_0.tobj
img/ETS2/lpFont/norway.font
img/ETS2/lpFont/norway_0.dds
img/ETS2/lpFont/norway_0.mat
img/ETS2/lpFont/norway_0.tobj
img/ETS2/lpFont/poland.font
img/ETS2/lpFont/poland_0.dds
img/ETS2/lpFont/poland_0.mat
img/ETS2/lpFont/poland_0.tobj
img/ETS2/lpFont/portugal.font
img/ETS2/lpFont/portugal_0.dds
img/ETS2/lpFont/portugal_0.mat
img/ETS2/lpFont/portugal_0.tobj
img/ETS2/lpFont/romania.font
img/ETS2/lpFont/romania_0.dds
img/ETS2/lpFont/romania_0.mat
img/ETS2/lpFont/romania_0.tobj
img/ETS2/lpFont/russia.font
img/ETS2/lpFont/russia_0.dds
img/ETS2/lpFont/russia_0.mat
img/ETS2/lpFont/russia_0.tobj
img/ETS2/lpFont/slovakia.font
img/ETS2/lpFont/slovakia_0.dds
img/ETS2/lpFont/slovakia_0.mat
img/ETS2/lpFont/slovakia_0.tobj
img/ETS2/lpFont/spain.font
img/ETS2/lpFont/spain_0.dds
img/ETS2/lpFont/spain_0.mat
img/ETS2/lpFont/spain_0.tobj
img/ETS2/lpFont/sweden.font
img/ETS2/lpFont/sweden_0.dds
img/ETS2/lpFont/sweden_0.mat
img/ETS2/lpFont/sweden_0.tobj
img/ETS2/lpFont/switzerland.font
img/ETS2/lpFont/switzerland_0.dds
img/ETS2/lpFont/switzerland_0.mat
img/ETS2/lpFont/switzerland_0.tobj
img/ETS2/lpFont/turkey.font
img/ETS2/lpFont/turkey_0.dds
img/ETS2/lpFont/turkey_0.mat
img/ETS2/lpFont/turkey_0.tobj
img/ETS2/lpFont/uk.font
img/ETS2/lpFont/uk_0.dds
img/ETS2/lpFont/uk_0.mat
img/ETS2/lpFont/uk_0.tobj
img/ETS2/player_logo/logo_0.dds
img/ETS2/player_logo/logo_1.dds
img/ETS2/player_logo/logo_2.dds
img/ETS2/player_logo/logo_3.dds
img/ETS2/player_logo/logo_4.dds
img/ETS2/player_logo/logo_5.dds
img/ETS2/player_logo/logo_6.dds
img/ETS2/player_logo/logo_7.dds
img/ETS2/trailer.dds
img/ETS2/trailer_body.dds
img/ETS2/trailer_chassis.dds
img/ETS2/transmission.dds
img/ETS2/truck.dds
img/ETS2/tyres.dds
img/UI/Company/Garages/garage_free_ico.dds
img/UI/Company/Garages/garage_large_ico.dds
img/UI/Company/Garages/garage_small_ico.dds
img/UI/Company/Garages/garage_tiny_ico.dds
img/UI/Company/Garages/hq_garage_ico_big_n.dds
img/UI/Company/Garages/hq_garage_ico_small_n.dds
img/UI/Company/Garages/hq_garage_ico_tiny_n.dds
img/UI/Company/VisitedCities/city_pin_0.dds
img/UI/Company/VisitedCities/city_pin_1.dds
img/UI/Company/VisitedCities/city_pin_2.dds
img/UI/FreightMarket/CargoTypes/articulated.dds
img/UI/FreightMarket/CargoTypes/fragile.dds
img/UI/FreightMarket/CargoTypes/heavy.dds
img/UI/FreightMarket/CargoTypes/none_32.dds
img/UI/FreightMarket/CargoTypes/valuable.dds
img/UI/FreightMarket/JobUrgency/easy.dds
img/UI/FreightMarket/JobUrgency/hard.dds
img/UI/FreightMarket/JobUrgency/normal.dds
img/UI/MainTabs/cargo_market.dds
img/UI/MainTabs/comp_man.dds
img/UI/MainTabs/company_job.dds
img/UI/MainTabs/maps.dds
img/UI/MainTabs/profiles.dds
img/UI/MainTabs/trailers.dds
img/UI/MainTabs/truck_service.dds
img/UI/PDF.png
.png
img/UI/Profile/skill_adr.dds
img/UI/Profile/skill_bar1.dds
img/UI/Profile/skill_bar2.dds
img/UI/Profile/skill_bar3.dds
img/UI/Profile/skill_bar_s.dds
img/UI/Profile/skill_bar_s2.dds
img/UI/Profile/skill_distance.dds
img/UI/Profile/skill_fragile.dds
img/UI/Profile/skill_heavy.dds
img/UI/Profile/skill_jit.dds
img/UI/Profile/skill_mechanical.dds
img/UI/SCS.png
.png
img/UI/Settings.png
.png
img/UI/TMP.png
.png
img/UI/Trucks&Trailers/Accessories/mute_checkbox_2.dds
img/UI/Trucks&Trailers/Accessories/plate_number.dds
img/UI/Trucks&Trailers/Accessories/truck_config.dds
img/UI/Trucks&Trailers/Accessories/upgrades.dds
img/UI/Trucks&Trailers/Accessories/use_preset.dds
img/UI/Trucks&Trailers/gas_ico.dds
img/UI/Trucks&Trailers/service_ico.dds
img/UI/YouTube.png
.png
img/UI/add.dds
img/UI/cogwheel.png
.png
img/UI/customize_p.dds
img/UI/download.png
.png
img/UI/edit.png
.png
img/UI/extract.png
.png
img/UI/favorite_selected.dds
img/UI/github.png
.png
img/UI/globe.png
.png
img/UI/info.png
.png
img/UI/networkCloud.png
.png
img/UI/none.dds
img/UI/notice_star.dds
img/UI/pSettings.png
.png
img/UI/question.png
.png
img/UI/quit.png
.png
img/UI/reload.png
.png
img/UI/remove.dds
img/UI/unknown.dds
lang/CityToCountry.csv
lang/CountryProperties.csv
lang/Default/ATS/CurrencyProperties.csv
lang/Default/ATS/driver_names.csv
lang/Default/ETS2/CurrencyProperties.csv
lang/Default/ETS2/driver_names.csv
lang/Default/cargo_translate.txt
lang/Default/cities_translate.txt
lang/Default/companies_translate.txt
lang/Default/countries_translate.txt
lang/Default/lngfile.txt
lang/Default/trailer_nameparts.txt
lang/Default/truck_brands.txt
lang/Default/urgency_translate.txt
lang/de-DE/flag.png
.png
lang/de-DE/lngfile.txt
lang/en-US/cities_translate.txt
lang/en-US/countries_translate.txt
lang/en-US/flag.png
.png
lang/en-US/lngfile.txt
lang/en-US/urgency_translate.txt
lang/es-ES/flag.png
.png
lang/es-ES/lngfile.txt
lang/fr-FR/flag.png
.png
lang/fr-FR/lngfile.txt
lang/it-IT/cities_translate.txt
lang/it-IT/countries_translate.txt
lang/it-IT/flag.png
.png
lang/it-IT/lngfile.txt
lang/it-IT/urgency_translate.txt
lang/ja-JP/cargo_translate.txt
lang/ja-JP/cities_translate.txt
lang/ja-JP/countries_translate.txt
lang/ja-JP/flag.png
.png
lang/ja-JP/lngfile.txt
lang/ja-JP/urgency_translate.txt
lang/ko-KR/cities_translate.txt
lang/ko-KR/countries_translate.txt
lang/ko-KR/flag.png
.png
lang/ko-KR/lngfile.txt
lang/ko-KR/urgency_translate.txt
lang/nl-NL/cities_translate.txt
lang/nl-NL/countries_translate.txt
lang/nl-NL/flag.png
.png
lang/nl-NL/lngfile.txt
lang/nl-NL/urgency_translate.txt
lang/pl-PL/cities_translate.txt
lang/pl-PL/countries_translate.txt
lang/pl-PL/flag.png
.png
lang/pl-PL/lngfile.txt
lang/pl-PL/urgency_translate.txt
lang/pt-BR/cargo_translate.txt
lang/pt-BR/cities_translate.txt
lang/pt-BR/companies_translate.txt
lang/pt-BR/countries_translate.txt
lang/pt-BR/flag.png
.png
lang/pt-BR/lngfile.txt
lang/pt-BR/urgency_translate.txt
lang/pt-PT/flag.png
.png
lang/pt-PT/lngfile.txt
lang/ru-RU/cargo_translate.txt
lang/ru-RU/cities_translate.txt
lang/ru-RU/companies_translate.txt
lang/ru-RU/countries_translate.txt
lang/ru-RU/flag.png
.png
lang/ru-RU/lngfile.txt
lang/ru-RU/urgency_translate.txt
lang/tr-TR/countries_translate.txt
lang/tr-TR/flag.png
.png
lang/tr-TR/lngfile.txt
lang/tr-TR/urgency_translate.txt
lang/zh-CN/cargo_translate.txt
lang/zh-CN/cities_translate.txt
lang/zh-CN/companies_translate.txt
lang/zh-CN/countries_translate.txt
lang/zh-CN/flag.png
.png
lang/zh-CN/lngfile.txt
lang/zh-CN/urgency_translate.txt
libs/ErikEJ.SqlCe40.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/ErikEJ.SqlCe40.xml
.xml
libs/ICSharpCode.SharpZipLib.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/ICSharpCode.SharpZipLib.xml
.xml
libs/OpenPainter.ColorPicker.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/SII_Decrypt.dll
.dll windows:4 windows x86

82d1f49a1484261f0e9d2553d34bd210

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetStdHandle
GetConsoleMode
TlsGetValue
GetLastError
SetLastError
RaiseException
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
ReadProcessMemory
GetModuleFileNameA
GetModuleHandleA
WriteFile
ReadFile
CloseHandle
SetFilePointer
SetEndOfFile
GetSystemInfo
LoadLibraryW
GetProcAddress
FreeLibrary
FormatMessageW
CreateFileW
GetCurrentDirectoryW
GetFullPathNameW
GetConsoleOutputCP
GetOEMCP
GetProcessHeap
HeapAlloc
HeapFree
TlsAlloc
TlsFree
TlsSetValue
CreateThread
ExitThread
LocalAlloc
LocalFree
Sleep
SuspendThread
ResumeThread
TerminateThread
WaitForSingleObject
SetThreadPriority
GetThreadPriority
GetCurrentThread
OpenThread
IsDebuggerPresent
CreateEventA
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetConsoleCP
RtlUnwind
EnumResourceTypesA
EnumResourceNamesA
EnumResourceLanguagesA
FindResourceA
FindResourceExA
LoadResource
SizeofResource
LockResource
FreeResource
LoadLibraryExA
GetWindowsDirectoryA
GetVersionExA
CompareStringA
GetLocaleInfoA
GetDateFormatA
EnumCalendarInfoA
GetModuleFileNameW
GetCommandLineW
CompareStringW
GetLocaleInfoW
GetDateFormatW
VirtualFree
GetLocalTime
GetCPInfo
GetThreadLocale
SetThreadLocale
GetUserDefaultLCID
IsProcessorFeaturePresent

oleaut32

SysAllocStringLen
SysFreeString
SysReAllocStringLen
VariantChangeTypeEx
VariantClear
VariantCopy
VariantInit
SafeArrayAccessData
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayRedim
SafeArrayUnaccessData

user32

MessageBoxA
CharUpperBuffW
CharLowerBuffW
CharUpperA
CharUpperBuffA
CharLowerA
CharLowerBuffA
GetSystemMetrics
MessageBeep

Exports

Exports

APIVersion
DecodeFile
DecodeFileInMemory
DecodeMemory
DecodeMemoryHelper
DecryptAndDecodeFile
DecryptAndDecodeFileInMemory
DecryptAndDecodeMemory
DecryptAndDecodeMemoryHelper
DecryptFile
DecryptFileInMemory
DecryptMemory
Decryptor_Create
Decryptor_DecodeFile
Decryptor_DecodeFileInMemory
Decryptor_DecodeMemory
Decryptor_DecryptAndDecodeFile
Decryptor_DecryptAndDecodeFileInMemory
Decryptor_DecryptAndDecodeMemory
Decryptor_DecryptFile
Decryptor_DecryptFileInMemory
Decryptor_DecryptMemory
Decryptor_Free
Decryptor_GetFileFormat
Decryptor_GetMemoryFormat
Decryptor_GetOptionBool
Decryptor_Is3nKEncodedFile
Decryptor_Is3nKEncodedMemory
Decryptor_IsEncodedFile
Decryptor_IsEncodedMemory
Decryptor_IsEncryptedFile
Decryptor_IsEncryptedMemory
Decryptor_SetOptionBool
Decryptor_SetProgressCallback
FreeHelper
GetFileFormat
GetMemoryFormat
Is3nKEncodedFile
Is3nKEncodedMemory
IsEncodedFile
IsEncodedMemory
IsEncryptedFile
IsEncryptedMemory

Sections

.text
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/Salient.Data.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/System.Buffers.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62
Signer

Actual PE Digest

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/System.Buffers.xml
libs/System.Data.SqlServerCe.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2d:e2:1e:82:8b:6e:a4:52:14:eb:57:67:a9:ad:64:df:e5:9e:b1:ca
Signer

Actual PE Digest

2d:e2:1e:82:8b:6e:a4:52:14:eb:57:67:a9:ad:64:df:e5:9e:b1:ca

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 450KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/System.Memory.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a4:6c:07:cf:a9:38:ad:dd:05:7b:ae:24:e4:ad:78:9e:fa:07:82:fb:e0:b3:ea:d5:f5:bc:8e:78:ff:71:9b:27
Signer

Actual PE Digest

a4:6c:07:cf:a9:38:ad:dd:05:7b:ae:24:e4:ad:78:9e:fa:07:82:fb:e0:b3:ea:d5:f5:bc:8e:78:ff:71:9b:27

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/System.Memory.xml
libs/System.Numerics.Vectors.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:20

Not After

11/08/2018, 20:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6
Signer

Actual PE Digest

99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6

Digest Algorithm

sha256

PE Digest Matches

true

12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d
Signer

Actual PE Digest

12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/System.Numerics.Vectors.xml
libs/System.Runtime.CompilerServices.Unsafe.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/02/2021, 20:09

Not After

10/02/2022, 20:09

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7
Signer

Actual PE Digest

a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/System.Runtime.CompilerServices.Unsafe.xml
libs/System.Threading.Tasks.Extensions.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0
Signer

Actual PE Digest

da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/System.Threading.Tasks.Extensions.xml
libs/amd64/Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
libs/amd64/Microsoft.VC90.CRT/README_ENU.txt
libs/amd64/Microsoft.VC90.CRT/msvcr90.dll
.dll windows:5 windows x64

8c15e10a91d42e14910d94e0a47560fb

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:27:81:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/10/2008, 21:24

Not After

22/01/2010, 21:34

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

42:ca:9d:0c:d9:80:ea:96:b7:65:21:6d:3e:97:cb:91:ef:43:27:b5
Signer

Actual PE Digest

42:ca:9d:0c:d9:80:ea:96:b7:65:21:6d:3e:97:cb:91:ef:43:27:b5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetSystemWindowsDirectoryW
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
FlsSetValue
FlsGetValue
DebugBreak
OutputDebugStringA
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
EncodePointer
DecodePointer
FlsFree
SetLastError
GetCurrentThread
FlsAlloc
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
GetLogicalDrives
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
Beep
GetFileAttributesA
SetFileAttributesA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
MoveFileA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
DeleteFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryA
FreeLibrary
CreateProcessW
ReadFile
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocalTime
WideCharToMultiByte
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetDateFormatA
GetTimeFormatA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapSetInformation
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
HeapQueryInformation
HeapReAlloc
HeapSize
HeapValidate
HeapCompact
HeapWalk
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetHandleCount
GetFileType
GetStartupInfoA
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
CreateFileW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreatePipe
SetStdHandle
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
IsDBCSLeadByteEx
ReadConsoleA
ReadConsoleW
SetEndOfFile
GetProcessHeap
LockFile
UnlockFile
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
QueryPerformanceCounter
GetTickCount
GetStringTypeW
GetStringTypeA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetLocaleInfoW
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryW

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@std@@QEAA@AEBV01@@Z
??0__non_rtti_object@std@@QEAA@PEBD@Z
??0bad_cast@std@@AEAA@PEBQEBD@Z
??0bad_cast@std@@QEAA@AEBV01@@Z
??0bad_cast@std@@QEAA@PEBD@Z
??0bad_typeid@std@@QEAA@AEBV01@@Z
??0bad_typeid@std@@QEAA@PEBD@Z
??0exception@std@@QEAA@AEBQEBD@Z
??0exception@std@@QEAA@AEBQEBDH@Z
??0exception@std@@QEAA@AEBV01@@Z
??0exception@std@@QEAA@XZ
??1__non_rtti_object@std@@UEAA@XZ
??1bad_cast@std@@UEAA@XZ
??1bad_typeid@std@@UEAA@XZ
??1exception@std@@UEAA@XZ
??1type_info@@UEAA@XZ
??2@YAPEAX_K@Z
??2@YAPEAX_KHPEBDH@Z
??3@YAXPEAX@Z
??4__non_rtti_object@std@@QEAAAEAV01@AEBV01@@Z
??4bad_cast@std@@QEAAAEAV01@AEBV01@@Z
??4bad_typeid@std@@QEAAAEAV01@AEBV01@@Z
??4exception@std@@QEAAAEAV01@AEBV01@@Z
??8type_info@@QEBA_NAEBV0@@Z
??9type_info@@QEBA_NAEBV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_Fbad_cast@std@@QEAAXXZ
??_Fbad_typeid@std@@QEAAXXZ
??_U@YAPEAX_K@Z
??_U@YAPEAX_KHPEBDH@Z
??_V@YAXPEAX@Z
?_Name_base@type_info@@CAPEBDPEBV1@PEAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPEBDPEBV1@PEAU__type_info_node@@@Z
?_Type_info_dtor@type_info@@CAXPEAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPEAV1@@Z
?_ValidateExecute@@YAHP6A_JXZ@Z
?_ValidateRead@@YAHPEBXI@Z
?_ValidateWrite@@YAHPEAXI@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPEBG00I_K@Z
?_is_exception_typeof@@YAHAEBVtype_info@@PEAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QEBAPEBDPEAU__type_info_node@@@Z
?_open@@YAHPEBDHH@Z
?_query_new_handler@@YAP6AH_K@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AH_K@ZH@Z
?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPEBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?_wopen@@YAHPEB_WHH@Z
?_wsopen@@YAHPEB_WHHH@Z
?before@type_info@@QEBAHAEBV1@@Z
?name@type_info@@QEBAPEBDPEAU__type_info_node@@@Z
?raw_name@type_info@@QEBAPEBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@std@@UEBAPEBDXZ
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_GetImageBase
_GetThrowImageBase
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_SetImageBase
_SetThrowImageBase
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__crt_debugger_hook
__daylight
__dllonexit
__doserrno
__dstbias
__fls_getvalue
__fls_setvalue
__fpecode
__free_locale
__get_app_type
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abs64
_access
_access_s
_acmdln
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chgsignf
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_copysignf
_cprintf
_cprintf_l
_cprintf_p
_cprintf_p_l
_cprintf_s
_cprintf_s_l
_cputs
_cputws
_creat
_create_locale
_cscanf
_cscanf_l
_cscanf_s
_cscanf_s_l
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_cwprintf
_cwprintf_l
_cwprintf_p
_cwprintf_p_l
_cwprintf_s
_cwprintf_s_l
_cwscanf
_cwscanf_l
_cwscanf_s
_cwscanf_s_l
_daylight
_decode_pointer
_difftime32
_difftime64
_dosmaperr
_dstbias
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_encode_pointer
_encoded_null
_endthread
_endthreadex
_environ
_eof
_errno
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fdopen
_fflush_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filbuf
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_finitef
_flsbuf
_flushall
_fmode
_fpclass
_fpclassf
_fpieee_flt
_fpreset
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_locale
_freea
_freea_s
_freefls
_fscanf_l
_fscanf_s_l
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_fullpath
_futime32
_futime64
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwrite_nolock
_fwscanf_l
_fwscanf_s_l
_gcvt
_gcvt_s
_get_amblksiz
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_invalid_parameter_handler
_get_osfhandle
_get_output_format
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_sbh_threshold
_get_terminate
_get_timezone
_get_tzname
_get_unexpected
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdcwd_nolock
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getptd
_getsystime
_getw
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_hypotf
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_initptd
_initterm
_initterm_e
_invalid_parameter
_invalid_parameter_noinfo
_invoke_watson
_iob
_isalnum_l
_isalpha_l
_isatty
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l

Sections

.text
Size: 476KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/amd64/sqlceca40.dll
.dll regsvr32 windows:6 windows x64

9378a388170d1d97aad5fe49ef5b9a9c

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:c6:89:4f:8a:ec:f4:30:ac:5d:ac:df:82:fa:c9:a0:9b:00:54:69
Signer

Actual PE Digest

fe:c6:89:4f:8a:ec:f4:30:ac:5d:ac:df:82:fa:c9:a0:9b:00:54:69

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcr90

?terminate@@YAXXZ
__crt_debugger_hook
strstr
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
atol
sscanf_s
_vsnprintf
realloc
rand_s
malloc
_itow_s
towlower
swprintf_s
swscanf_s
wprintf
_wcsnicmp
wcscpy_s
vswprintf_s
free
fclose
_wfopen_s
iswspace
mbstowcs_s
feof
fseek
ferror
fread
_wtoi
_wcsicmp
_vsnprintf_s
wcsrchr
_purecall
wcsncpy_s
wcschr
wcsstr
_vsnwprintf_s
_vsnwprintf
_strlwr_s
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
memcpy
memset
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
VirtualAlloc
VirtualFree
IsDBCSLeadByteEx
ReadFile
GetSystemDefaultLCID
SystemTimeToFileTime
GetPrivateProfileSectionW
DeleteFileW
GetPrivateProfileIntW
GetFileAttributesW
GetVersionExW
GetPrivateProfileStringW
OutputDebugStringW
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
LoadLibraryW
GetProcAddress
GetLastError
GetCurrentDirectoryW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetLocalTime
GetModuleHandleW
WriteFile
DisableThreadLibraryCalls
GetLocaleInfoW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTickCount
RaiseException
GlobalMemoryStatus
GetFullPathNameW
Sleep
CloseHandle
CreateMutexW
CreateEventW
CreateThread
SetEvent
WaitForSingleObject
LocalFree
GetCurrentThreadId
GetCurrentProcessId
GetSystemDirectoryW
CreateFileW
GetFileSize
SetFilePointer
SetEndOfFile
ReleaseMutex
GetVersionExA
MoveFileExW
GetSystemInfo

crypt32

CryptUnprotectData
CryptProtectData

advapi32

RegEnumValueW
RegQueryValueExW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

ole32

CLSIDFromString
CoTaskMemFree
CoCreateInstance
CoGetMalloc
StringFromGUID2
StringFromCLSID

oleaut32

VariantChangeType
VariantCopy
SetErrorInfo
GetErrorInfo
SysFreeString
LoadTypeLi
RegisterTypeLi
SysAllocStringLen
VariantInit
VariantClear
SysStringLen
SysAllocString
CreateErrorInfo

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

wininet

InternetReadFile
InternetCloseHandle
HttpOpenRequestW
DetectAutoProxyUrl
InternetCrackUrlW
InternetOpenUrlW
InternetOpenW
HttpSendRequestA
HttpQueryInfoA
InternetSetOptionW
InternetConnectW

ws2_32

getaddrinfo
freeaddrinfo
inet_addr
getnameinfo
gethostname

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 398KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/amd64/sqlcecompact40.dll
.dll windows:6 windows x64

aa3ce00754057e3b5982796ed92e1ed8

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:82:d4:68:fd:95:f7:f0:0c:75:49:23:78:f9:07:b2:48:ed:41:2c
Signer

Actual PE Digest

0e:82:d4:68:fd:95:f7:f0:0c:75:49:23:78:f9:07:b2:48:ed:41:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcr90

wprintf
_vsnprintf_s
_itow_s
swprintf_s
memset
memcpy
??3@YAXPEAX@Z
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__crt_debugger_hook
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
towlower
free
??2@YAPEAX_K@Z
_vsnwprintf_s
_wcsnicmp
wcsncpy_s
_wcsicmp
_purecall
vswprintf_s
memcmp

kernel32

GetTempPathW
CopyFileW
OutputDebugStringW
ReleaseMutex
WideCharToMultiByte
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapCreate
HeapSetInformation
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
GetTempFileNameW
CreateFileW
GetFileSize
CloseHandle
FreeLibrary
GetLocalTime
GetUserDefaultLCID
DeleteFileW
GetLastError
GetVersionExA
SetLastError
GetFileType
Sleep
SetFilePointer
SetEndOfFile
ReadFile
WriteFile
GetModuleHandleW
CreateMutexW
GetFullPathNameW
LCMapStringW
WaitForSingleObject
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
MoveFileExW
GetProcAddress
GetModuleFileNameW
LoadLibraryW
GetSystemDirectoryW
QueryPerformanceCounter

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

ole32

CoCreateGuid

Exports

Exports

SeRebuild

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/amd64/sqlceer40EN.dll
.dll windows:6 windows x64

c87c2a73c4e25d3b70a017b9438324ca

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:1d:1f:a3:d5:42:a0:94:9e:c0:87:72:2c:9c:ba:42:f4:03:5a:cf
Signer

Actual PE Digest

fb:1d:1f:a3:d5:42:a0:94:9e:c0:87:72:2c:9c:ba:42:f4:03:5a:cf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcr90

__crt_debugger_hook
_onexit
_encode_pointer
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
free
_initterm_e
_initterm
_malloc_crt

kernel32

Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter

user32

LoadStringW

Exports

Exports

SSCEGetErrorString

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/amd64/sqlceme40.dll
.dll windows:6 windows x64

1ad21ec922b5c713aa9fba6463802528

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

58:b8:70:b4:2d:e3:22:76:2d:b2:41:15:45:15:c5:5d:35:8d:fd:47
Signer

Actual PE Digest

58:b8:70:b4:2d:e3:22:76:2d:b2:41:15:45:15:c5:5d:35:8d:fd:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcr90

_itow_s
_vsnprintf_s
wprintf
swprintf_s
_malloc_crt
_initterm
_initterm_e
free
_encoded_null
_decode_pointer
_amsg_exit
__C_specific_handler
memset
memcpy
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__crt_debugger_hook
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
vswprintf_s
__CppXcptFilter
_encode_pointer
_wcsnicmp
wcsrchr
_vsnwprintf_s
wcsncpy_s
_wcsicmp
wcscpy_s
memcmp

kernel32

MoveFileExW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetSystemDirectoryW
CloseHandle
ReleaseMutex
HeapDestroy
HeapCreate
HeapSetInformation
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
GetProcAddress
FreeLibrary
GetLastError
FormatMessageW
MultiByteToWideChar
Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
WriteFile
WaitForSingleObject
SetEndOfFile
SetFilePointer
GetFileSize
GetLocalTime
CreateFileW
GetModuleFileNameW
GetLocaleInfoW
OutputDebugStringW
GetModuleHandleW
LoadLibraryW

ole32

CoCreateGuid
CLSIDFromString

oleaut32

SysAllocString
VariantClear
VariantInit
SysFreeString
SysAllocStringLen

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

Exports

Exports

DllAddRef
DllCanUnloadNow
DllMain
DllRelease
ME_AbortTransaction
ME_CleanupTombstoneData
ME_CleanupTrackingMetadata
ME_CleanupTransactionData
ME_ClearErrorInfo
ME_CloseAndReleaseStore
ME_CloseStore
ME_CommitTransaction
ME_CompileQueryPlan
ME_CreateCommand
ME_CreateDatabase
ME_CreateErrorInstance
ME_DeleteArray
ME_DeleteRecord
ME_DisableChangeTracking
ME_EnableChangeTracking
ME_ExecuteQueryPlan
ME_ExitChangeTracking
ME_GetBookmark
ME_GetChangeTrackingInfo
ME_GetColumnInfo
ME_GetColumnOrdinal
ME_GetColumnsUpdated
ME_GetContextErrorInfo
ME_GetContextErrorMessage
ME_GetCurrentTrackingTxBsn
ME_GetCurrentTrackingTxCsn
ME_GetDatabaseInstanceID
ME_GetEncryptionMode
ME_GetIndexColumnOrdinals
ME_GetKeyInfo
ME_GetLocale
ME_GetLocaleFlags
ME_GetMinorError
ME_GetNativeVersionInfo
ME_GetParameterInfo
ME_GetSqlCeVersionInfo
ME_GetTrackingContext
ME_GetTrackingOptions
ME_GetTransactionBsn
ME_GetTransactionFlags
ME_GetValues
ME_GotoBookmark
ME_InitChangeTracking
ME_InsertRecord
ME_IsTableChangeTracked
ME_Move
ME_OpenCursor
ME_OpenStore
ME_OpenTransaction
ME_Prepare
ME_Read
ME_ReadAt
ME_Rebuild
ME_SafeDelete
ME_SafeRelease
ME_Seek
ME_SetColumnInfo
ME_SetContextErrorInfo
ME_SetRange
ME_SetTableInfoAsSystem
ME_SetTrackingContext
ME_SetTransactionFlag
ME_SetValue
ME_SetValues
ME_UpdateRecord
uwrda_Pull
uwrda_Push
uwrda_RemoteDataAccess
uwrda_SubmitSql
uwrda_SysFreeString
uwrda_get_CompressionLevel
uwrda_get_ConnectTimeout
uwrda_get_ConnectionManager
uwrda_get_ConnectionRetryTimeout
uwrda_get_ErrorPointer
uwrda_get_InternetLogin
uwrda_get_InternetPassword
uwrda_get_InternetProxyLogin
uwrda_get_InternetProxyPassword
uwrda_get_InternetProxyServer
uwrda_get_InternetUrl
uwrda_get_LocalConnectionString
uwrda_get_ReceiveTimeout
uwrda_get_SendTimeout
uwrda_put_CompressionLevel
uwrda_put_ConnectTimeout
uwrda_put_ConnectionManager
uwrda_put_ConnectionRetryTimeout
uwrda_put_InternetLogin
uwrda_put_InternetPassword
uwrda_put_InternetProxyLogin
uwrda_put_InternetProxyPassword
uwrda_put_InternetProxyServer
uwrda_put_InternetUrl
uwrda_put_LocalConnectionString
uwrda_put_ReceiveTimeout
uwrda_put_SendTimeout
uwrepl_AddSubscription
uwrepl_AsyncReplication
uwrepl_Cancel
uwrepl_DropSubscription
uwrepl_GetSyncResult
uwrepl_Initialize
uwrepl_LoadProperties
uwrepl_ReinitializeSubscription
uwrepl_Replication
uwrepl_Run
uwrepl_SaveProperties
uwrepl_Terminate
uwrepl_WaitForNextStatusReport
uwrepl_get_CompressionLevel
uwrepl_get_ConnectTimeout
uwrepl_get_ConnectionManager
uwrepl_get_ConnectionRetryTimeout
uwrepl_get_Distributor
uwrepl_get_DistributorAddress
uwrepl_get_DistributorLogin
uwrepl_get_DistributorNetwork
uwrepl_get_DistributorPassword
uwrepl_get_DistributorSecurityMode
uwrepl_get_ErrorPointer
uwrepl_get_ExchangeType
uwrepl_get_HostName
uwrepl_get_InternetLogin
uwrepl_get_InternetPassword
uwrepl_get_InternetProxyLogin
uwrepl_get_InternetProxyPassword
uwrepl_get_InternetProxyServer
uwrepl_get_InternetUrl
uwrepl_get_LoginTimeout
uwrepl_get_PostSyncCleanup
uwrepl_get_ProfileName
uwrepl_get_Publication
uwrepl_get_Publisher
uwrepl_get_PublisherAddress
uwrepl_get_PublisherChanges
uwrepl_get_PublisherConflicts
uwrepl_get_PublisherDatabase
uwrepl_get_PublisherLogin
uwrepl_get_PublisherNetwork
uwrepl_get_PublisherPassword
uwrepl_get_PublisherSecurityMode
uwrepl_get_QueryTimeout
uwrepl_get_ReceiveTimeout
uwrepl_get_SendTimeout
uwrepl_get_SnapshotTransferType
uwrepl_get_Subscriber
uwrepl_get_SubscriberChanges
uwrepl_get_SubscriberConflicts
uwrepl_get_SubscriberConnectionString
uwrepl_get_Validate
uwrepl_put_CompressionLevel
uwrepl_put_ConnectTimeout
uwrepl_put_ConnectionManager
uwrepl_put_ConnectionRetryTimeout
uwrepl_put_Distributor
uwrepl_put_DistributorAddress
uwrepl_put_DistributorLogin
uwrepl_put_DistributorNetwork
uwrepl_put_DistributorPassword
uwrepl_put_DistributorSecurityMode
uwrepl_put_ExchangeType
uwrepl_put_HostName
uwrepl_put_InternetLogin
uwrepl_put_InternetPassword
uwrepl_put_InternetProxyLogin
uwrepl_put_InternetProxyPassword
uwrepl_put_InternetProxyServer
uwrepl_put_InternetUrl
uwrepl_put_LoginTimeout
uwrepl_put_PostSyncCleanup
uwrepl_put_ProfileName
uwrepl_put_Publication
uwrepl_put_Publisher
uwrepl_put_PublisherAddress
uwrepl_put_PublisherDatabase
uwrepl_put_PublisherLogin
uwrepl_put_PublisherNetwork
uwrepl_put_PublisherPassword
uwrepl_put_PublisherSecurityMode
uwrepl_put_QueryTimeout
uwrepl_put_ReceiveTimeout
uwrepl_put_SendTimeout
uwrepl_put_SnapshotTransferType
uwrepl_put_Subscriber
uwrepl_put_SubscriberConnectionString
uwrepl_put_Validate
uwutil_ConvertFromDBTIMESTAMP
uwutil_ConvertToDBTIMESTAMP
uwutil_ReleaseCOMPtr
uwutil_SysFreeString
uwutil_ZeroMemory
uwutil_get_Error
uwutil_get_ErrorCount

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/amd64/sqlceqp40.dll
.dll windows:6 windows x64

46577fdb55ca93aec30667f864165326

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:01:fb:08:33:ce:c3:fd:68:58:dd:88:5d:f9:c7:13:d0:fe:d6:84
Signer

Actual PE Digest

7f:01:fb:08:33:ce:c3:fd:68:58:dd:88:5d:f9:c7:13:d0:fe:d6:84

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcr90

?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__crt_debugger_hook
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
_vsnprintf_s
wprintf
wcsstr
_finite
rand_s
wcscat_s
wcstod
_clearfp
_vsnwprintf_s
_wcsnicmp
iswalpha
_wtol
_purecall
memmove
wcschr
modf
iswdigit
iswspace
swscanf_s
_itow_s
_ultow_s
malloc
free
towlower
vswprintf_s
wcsncpy_s
wcscpy_s
_wcsicmp
sin
cos
atan
asin
acos
sqrt
log
exp
atan2
log10
ceil
floor
memcmp
pow
floorf
ceilf
memcpy
memset
tan

kernel32

RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
Sleep
MoveFileExW
OutputDebugStringW
GetCurrentProcessId
GetCurrentThreadId
GetSystemInfo
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemDefaultLCID
CompareStringW
FileTimeToSystemTime
GetACP
MultiByteToWideChar
IsValidCodePage
GetLocalTime
LCMapStringW
GetLastError
GetTickCount
FreeLibrary
LoadLibraryW
GetModuleFileNameW
CreateFileW
GetProcAddress
CloseHandle
HeapAlloc
HeapFree
HeapDestroy
HeapCreate
GetFileSize
SetFilePointer
SetEndOfFile
WaitForSingleObject
WriteFile
WideCharToMultiByte
ReleaseMutex
RtlLookupFunctionEntry

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

ole32

CLSIDFromString
CoCreateFreeThreadedMarshaler
StringFromGUID2

oleaut32

VarDecFromCy
VarI2FromUI4
VarI2FromR8
VariantCopy
VarR4FromDec
VarCyFromDec
VarUI1FromI4
VarI4FromCy
SafeArrayUnlock
VarI2FromR4
VarCyFromUI1
SafeArrayCreate
VariantInit
VarUI1FromR4
SystemTimeToVariantTime
VarBstrFromDec
VarR4FromI1
VarBstrFromR8
SysAllocStringLen
VarR4FromCy
VarI4FromR8
VarDateFromStr
VarI4FromDec
VarI4FromStr
VarI2FromStr
VarR8FromI1
VarCyFromUI2
VarDecFromR8
VarBoolFromStr
VarCyFromR8
VarDecFromR4
SafeArrayLock
VarI4FromI1
VarI2FromDec
VarI4FromR4
VarUI1FromStr
VarI2FromI1
VarBstrFromDate
VarR8FromStr
VariantChangeTypeEx
VarUI1FromUI2
VarCyFromI4
VarBoolFromDec
VarI2FromCy
VarR8FromUI1
SysStringByteLen
VarI2FromUI1
SysFreeString
VarR4FromR8
VarR4FromUI1
VarCyFromStr
VarBstrFromR4
VarUI1FromI2
VarCyFromR4
VarR8FromCy
VarBstrFromCy
VarUI1FromDec
SetErrorInfo
VarI2FromI4
VarCyFromI2
VarUI1FromR8
VarR8FromDec
SysStringLen
VarUI1FromCy
VarBoolFromCy
VarI4FromUI1
VarR4FromStr
VariantClear
VarUI1FromBool
VarUI1FromUI4
VarCyFromI1
VarCyFromUI4

user32

CharUpperBuffW
CharLowerBuffW
CharNextExA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 815KB - Virtual size: 814KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/amd64/sqlcese40.dll
.dll windows:6 windows x64

5810176cd4bbca01cf7bdc2d8d93ff57

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:93:48:d8:56:90:4c:95:82:a7:c4:ab:d5:41:b0:37:36:30:2e:cc
Signer

Actual PE Digest

f9:93:48:d8:56:90:4c:95:82:a7:c4:ab:d5:41:b0:37:36:30:2e:cc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcr90

?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__crt_debugger_hook
memcpy
memset
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
_snwprintf_s
towlower
wprintf
_vsnprintf_s
atoi
_ultow_s
swprintf_s
vswprintf_s
strncmp
rand_s
_wcsnicmp
_itow_s
qsort
_wcsicmp
free
malloc
swscanf_s
wcsrchr
_vsnwprintf_s
wcsncpy_s
wcscpy_s
memmove
_purecall
memcmp

kernel32

MoveFileExW
GetSystemDirectoryW
GetModuleFileNameW
WideCharToMultiByte
OutputDebugStringW
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
CloseHandle
CreateEventW
WriteFile
GetUserDefaultLCID
GetCurrentProcessId
FileTimeToSystemTime
DeleteFileW
GetProcessHeap
HeapValidate
HeapFree
LocalFree
HeapAlloc
LocalAlloc
SystemTimeToFileTime
InitializeCriticalSectionAndSpinCount
HeapDestroy
HeapCreate
HeapReAlloc
HeapSize
GetSystemInfo
LoadLibraryW
GetProcAddress
FreeLibrary
DisableThreadLibraryCalls
LCMapStringW
WaitForSingleObject
ReleaseMutex
GetCurrentThreadId
GetTickCount
Sleep
CompareFileTime
GetLocalTime
OpenThread
GetExitCodeThread
GetTempFileNameW
IsValidLocale
FlushFileBuffers
GetProcessTimes
GetCurrentProcess
GetVolumeInformationW
CreateFileW
SetFilePointer
ReadFile
SetEndOfFile
GlobalMemoryStatus
GetSystemTime
CreateMutexW
OpenMutexW
CreateFileMappingW
OpenFileMappingW
GetFullPathNameW
GetDriveTypeW
GetVersionExA
GetLocaleInfoA
MapViewOfFile
UnmapViewOfFile
GetFileInformationByHandle
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
GetFileType
GetFileSize
GetModuleHandleW
SetThreadPriority
CreateThread
WaitForMultipleObjects
SetEvent
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation

advapi32

GetFileSecurityW
InitializeSecurityDescriptor
SetFileSecurityW
SetSecurityDescriptorDacl
GetSecurityDescriptorLength
IsValidSecurityDescriptor
GetSecurityDescriptorControl
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

ole32

CoCreateFreeThreadedMarshaler

user32

DispatchMessageW
TranslateMessage
KillTimer
PeekMessageW
SetTimer
MsgWaitForMultipleObjectsEx
UnregisterClassW
DestroyWindow
CreateWindowExW
RegisterClassW
GetClassInfoW
DefWindowProcW
IsWindow
SendMessageW
PostMessageW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
EnableCedbFailpoint
EnableStorePlayback
EnableStoreTracing
InitSerialization
SqlCeAddDatabaseProps
SqlCeAddSyncPartner
SqlCeAttachCustomTrackingData
SqlCeBeginSyncSession
SqlCeBeginTransaction
SqlCeChangeDatabaseLCID
SqlCeCloseHandle
SqlCeCreateDatabase
SqlCeCreateSession
SqlCeDeleteDatabase
SqlCeDeleteRecord
SqlCeEndSyncSession
SqlCeEndTransaction
SqlCeEnumDBVolumes
SqlCeFindFirstDatabase
SqlCeFindNextChangedRecord
SqlCeFindNextDatabase
SqlCeFlushDBVol
SqlCeFreeNotification
SqlCeGetChangedRecordCnt
SqlCeGetChangedRecords
SqlCeGetCustomTrackingData
SqlCeGetDBInformationByHandle
SqlCeGetDatabaseProps
SqlCeGetDatabaseSession
SqlCeGetPropChangeInfo
SqlCeGetRecordChangeInfo
SqlCeMarkRecord
SqlCeMountDBVol
SqlCeOidGetInfo
SqlCeOnServerLoad
SqlCeOpenDatabase
SqlCeOpenDatabaseEx
SqlCeOpenStream
SqlCePurgeTrackingData
SqlCePurgeTrackingGenerations
SqlCeReadRecordProps
SqlCeRemoveDatabaseProps
SqlCeRemoveDatabaseTracking
SqlCeRemoveSyncPartner
SqlCeSeekDatabase
SqlCeSetDatabaseInfo
SqlCeSetSessionOption
SqlCeStreamRead
SqlCeStreamSaveChanges
SqlCeStreamSeek
SqlCeStreamSetSize
SqlCeStreamWrite
SqlCeTrackDatabase
SqlCeTrackProperty
SqlCeUninitialize
SqlCeUnmountDBVol
SqlCeWriteRecordProps
SuspendStoreOperation

Sections

.text
Size: 503KB - Virtual size: 502KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/x86/Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
libs/x86/Microsoft.VC90.CRT/README_ENU.txt
libs/x86/Microsoft.VC90.CRT/msvcr90.dll
.dll windows:5 windows x86

0453db624ecaef7c4f3da938cd1d0fc5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:27:81:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/10/2008, 21:24

Not After

22/01/2010, 21:34

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

96:53:64:bf:32:91:b5:c3:d5:61:69:64:22:32:1f:d4:15:86:5e:83
Signer

Actual PE Digest

96:53:64:bf:32:91:b5:c3:d5:61:69:64:22:32:1f:d4:15:86:5e:83

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetSystemWindowsDirectoryW
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
TlsGetValue
DebugBreak
OutputDebugStringA
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
GetLogicalDrives
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
Beep
GetFileAttributesA
SetFileAttributesA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
MoveFileA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
DeleteFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryA
FreeLibrary
CreateProcessW
ReadFile
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocalTime
WideCharToMultiByte
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetProcessHeap
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapSize
HeapReAlloc
VirtualAlloc
HeapValidate
HeapCompact
HeapWalk
VirtualProtect
GetSystemInfo
VirtualQuery
SetHandleCount
GetFileType
GetStartupInfoA
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
CreateFileW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreatePipe
SetStdHandle
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
IsDBCSLeadByteEx
ReadConsoleA
ReadConsoleW
SetEndOfFile
InterlockedExchange
LockFile
UnlockFile
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
QueryPerformanceCounter
GetTickCount
GetStringTypeW
GetStringTypeA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetLocaleInfoW
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
GetModuleHandleA

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1exception@std@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??2@YAPAXIHPBDH@Z
??3@YAXPAX@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
??9type_info@@QBE_NABV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_Fbad_cast@std@@QAEXXZ
??_Fbad_typeid@std@@QAEXXZ
??_U@YAPAXI@Z
??_U@YAPAXIHPBDH@Z
??_V@YAXPAX@Z
?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Type_info_dtor@type_info@@CAXPAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z
?_ValidateExecute@@YAHP6GHXZ@Z
?_ValidateRead@@YAHPBXI@Z
?_ValidateWrite@@YAHPAXI@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPBG00II@Z
?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?_open@@YAHPBDHH@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?_wopen@@YAHPB_WHH@Z
?_wsopen@@YAHPB_WHHH@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?unexpected@@YAXXZ
?vswprintf@@YAHPA_WIPB_WPAD@Z
?what@exception@std@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___fls_getvalue@4
___fls_setvalue@8
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__control87_2
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__daylight
__dllonexit
__doserrno
__dstbias
__fpecode
__free_locale
__get_app_type
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv
__lconv_init
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abnormal_termination
_abs64
_access
_access_s
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_cprintf
_cprintf_l
_cprintf_p
_cprintf_p_l
_cprintf_s
_cprintf_s_l
_cputs
_cputws
_creat
_create_locale
_crt_debugger_hook
_cscanf
_cscanf_l
_cscanf_s
_cscanf_s_l
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_cwprintf
_cwprintf_l
_cwprintf_p
_cwprintf_p_l
_cwprintf_s
_cwprintf_s_l
_cwscanf
_cwscanf_l
_cwscanf_s
_cwscanf_s_l
_daylight
_decode_pointer
_difftime32
_difftime64
_dosmaperr
_dstbias
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_encode_pointer
_encoded_null
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_except_handler4_common
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fdopen
_fflush_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filbuf
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_locale
_freea
_freea_s
_freefls
_fscanf_l
_fscanf_s_l
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_ftol
_fullpath
_futime32
_futime64
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwrite_nolock
_fwscanf_l
_fwscanf_s_l
_gcvt
_gcvt_s
_get_amblksiz
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_invalid_parameter_handler
_get_osfhandle
_get_output_format
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_sbh_threshold
_get_terminate
_get_timezone
_get_tzname
_get_unexpected
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdcwd_nolock
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getptd
_getsystime
_getw
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_global_unwind2
_gmtime32

Sections

.text
Size: 599KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/x86/sqlceca40.dll
.dll regsvr32 windows:6 windows x86

6d573c80b5e291b6941924227bc63825

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3a:a6:16:9d:63:3f:d0:c8:89:0a:47:a2:38:db:d6:fc:e4:ea:f7:1e
Signer

Actual PE Digest

3a:a6:16:9d:63:3f:d0:c8:89:0a:47:a2:38:db:d6:fc:e4:ea:f7:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr90

?terminate@@YAXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
strstr
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
atol
sscanf_s
_vsnprintf
realloc
rand_s
malloc
_itow_s
swprintf_s
wcscmp
swscanf_s
wprintf
towlower
_wcsnicmp
wcscpy_s
vswprintf_s
free
_wfopen_s
iswspace
feof
fread
ferror
fseek
mbstowcs_s
fclose
wcslen
_wcsicmp
_wtoi
_vsnprintf_s
memcmp
wcsstr
wcschr
wcsncpy_s
memcpy
_purecall
_vsnwprintf_s
_vsnwprintf
wcsrchr
strlen
memset
_strlwr_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
VirtualAlloc
VirtualFree
GetSystemDefaultLCID
IsDBCSLeadByteEx
ReadFile
SystemTimeToFileTime
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetVersionExW
GetFileAttributesW
DeleteFileW
OutputDebugStringW
GetSystemInfo
MoveFileExW
GetSystemDirectoryW
GetCurrentThreadId
GetCurrentProcessId
ReleaseMutex
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
GetModuleFileNameW
GetCurrentDirectoryW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
WriteFile
GetModuleHandleW
GetLocalTime
DisableThreadLibraryCalls
GetLocaleInfoW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTickCount
CloseHandle
RaiseException
GlobalMemoryStatus
GetFullPathNameW
Sleep
CreateMutexW
WaitForSingleObject
SetEvent
CreateThread
CreateEventW
LocalFree
GetVersionExA
SetEndOfFile
CreateFileW

crypt32

CryptUnprotectData
CryptProtectData

advapi32

RegEnumValueW
RegQueryValueExW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

ole32

CoCreateInstance
CLSIDFromString
StringFromCLSID
CoTaskMemFree
CoGetMalloc
StringFromGUID2

oleaut32

VariantChangeType
SysStringLen
SysAllocString
VariantClear
VariantCopy
CreateErrorInfo
GetErrorInfo
SysFreeString
RegisterTypeLi
LoadTypeLi
SysAllocStringLen
VariantInit
SetErrorInfo

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wininet

InternetConnectW
HttpSendRequestA
InternetReadFile
HttpOpenRequestW
HttpQueryInfoA
InternetSetOptionW
DetectAutoProxyUrl
InternetCrackUrlW
InternetOpenUrlW
InternetOpenW
InternetCloseHandle

ws2_32

getaddrinfo
getnameinfo
freeaddrinfo
inet_addr
gethostname

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/x86/sqlcecompact40.dll
.dll windows:6 windows x86

2ed7ff74f70bf674a2b6ea060b298404

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d7:a7:9e:c1:a2:8f:7f:f8:46:d2:cd:b9:8d:9a:0f:78:67:83:ca:40
Signer

Actual PE Digest

d7:a7:9e:c1:a2:8f:7f:f8:46:d2:cd:b9:8d:9a:0f:78:67:83:ca:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr90

_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
vswprintf_s
swprintf_s
_vsnprintf_s
_itow_s
wprintf
_except_handler4_common
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
free
malloc
towlower
wcscmp
??2@YAPAXI@Z
wcsncpy_s
_wcsnicmp
_vsnwprintf_s
_wcsicmp
memset
wcslen
memcmp
_purecall
??3@YAXPAX@Z
memcpy

kernel32

GetTempPathW
CopyFileW
OutputDebugStringW
WaitForSingleObject
WideCharToMultiByte
ReleaseMutex
GetModuleFileNameW
GetSystemDirectoryW
LoadLibraryW
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
HeapDestroy
HeapAlloc
HeapSetInformation
HeapCreate
HeapReAlloc
HeapSize
HeapFree
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
FreeLibrary
GetProcAddress
CloseHandle
GetFileSize
CreateFileW
GetTempFileNameW
GetLastError
DeleteFileW
GetUserDefaultLCID
GetLocalTime
GetVersionExA
Sleep
SetFilePointer
SetEndOfFile
ReadFile
WriteFile
GetModuleHandleW
SetLastError
CreateMutexW
LCMapStringW
GetFileType
InterlockedExchange
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
MoveFileExW
EnterCriticalSection
GetFullPathNameW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

ole32

CoCreateGuid

Exports

Exports

SeRebuild

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/x86/sqlceer40EN.dll
.dll windows:6 windows x86

50f5b2a01fef866775cd8c5255d92523

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5e:eb:43:03:11:db:53:fc:79:eb:fa:0f:b5:96:b3:df:3b:fb:9b:12
Signer

Actual PE Digest

5e:eb:43:03:11:db:53:fc:79:eb:fa:0f:b5:96:b3:df:3b:fb:9b:12

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr90

_onexit
_lock
_crt_debugger_hook
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_except_handler4_common
_encode_pointer

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

user32

LoadStringW

Exports

Exports

SSCEGetErrorString

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/x86/sqlceme40.dll
.dll windows:6 windows x86

e85cb6ae493b0906358eae36dc1c4e50

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9a:94:8c:1e:70:55:9e:29:52:14:56:35:2f:33:6e:1b:1a:64:64:05
Signer

Actual PE Digest

9a:94:8c:1e:70:55:9e:29:52:14:56:35:2f:33:6e:1b:1a:64:64:05

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr90

wprintf
_itow_s
_vsnprintf_s
_wcsicmp
vswprintf_s
memset
memcmp
memcpy
_wcsnicmp
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
swprintf_s
_initterm
wcslen
_vsnwprintf_s
wcsncpy_s
wcscpy_s
wcsrchr

kernel32

GetLocalTime
WaitForSingleObject
WideCharToMultiByte
ReleaseMutex
SetFilePointer
GetFileSize
SetEndOfFile
WriteFile
HeapDestroy
InterlockedIncrement
HeapAlloc
HeapSetInformation
HeapCreate
HeapReAlloc
HeapSize
HeapFree
FreeLibrary
GetProcAddress
InterlockedDecrement
GetLastError
FormatMessageW
MultiByteToWideChar
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
MoveFileExW
OutputDebugStringW
GetLocaleInfoW
GetModuleHandleW
CreateFileW
CloseHandle
GetModuleFileNameW
GetSystemDirectoryW
LoadLibraryW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection

ole32

CLSIDFromString
CoCreateGuid

oleaut32

SysAllocString
VariantInit
SysAllocStringLen
VariantClear
SysFreeString

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

Exports

Exports

DllAddRef
DllCanUnloadNow
DllMain
DllRelease
ME_AbortTransaction
ME_CleanupTombstoneData
ME_CleanupTrackingMetadata
ME_CleanupTransactionData
ME_ClearErrorInfo
ME_CloseAndReleaseStore
ME_CloseStore
ME_CommitTransaction
ME_CompileQueryPlan
ME_CreateCommand
ME_CreateDatabase
ME_CreateErrorInstance
ME_DeleteArray
ME_DeleteRecord
ME_DisableChangeTracking
ME_EnableChangeTracking
ME_ExecuteQueryPlan
ME_ExitChangeTracking
ME_GetBookmark
ME_GetChangeTrackingInfo
ME_GetColumnInfo
ME_GetColumnOrdinal
ME_GetColumnsUpdated
ME_GetContextErrorInfo
ME_GetContextErrorMessage
ME_GetCurrentTrackingTxBsn
ME_GetCurrentTrackingTxCsn
ME_GetDatabaseInstanceID
ME_GetEncryptionMode
ME_GetIndexColumnOrdinals
ME_GetKeyInfo
ME_GetLocale
ME_GetLocaleFlags
ME_GetMinorError
ME_GetNativeVersionInfo
ME_GetParameterInfo
ME_GetSqlCeVersionInfo
ME_GetTrackingContext
ME_GetTrackingOptions
ME_GetTransactionBsn
ME_GetTransactionFlags
ME_GetValues
ME_GotoBookmark
ME_InitChangeTracking
ME_InsertRecord
ME_IsTableChangeTracked
ME_Move
ME_OpenCursor
ME_OpenStore
ME_OpenTransaction
ME_Prepare
ME_Read
ME_ReadAt
ME_Rebuild
ME_SafeDelete
ME_SafeRelease
ME_Seek
ME_SetColumnInfo
ME_SetContextErrorInfo
ME_SetRange
ME_SetTableInfoAsSystem
ME_SetTrackingContext
ME_SetTransactionFlag
ME_SetValue
ME_SetValues
ME_UpdateRecord
uwrda_Pull
uwrda_Push
uwrda_RemoteDataAccess
uwrda_SubmitSql
uwrda_SysFreeString
uwrda_get_CompressionLevel
uwrda_get_ConnectTimeout
uwrda_get_ConnectionManager
uwrda_get_ConnectionRetryTimeout
uwrda_get_ErrorPointer
uwrda_get_InternetLogin
uwrda_get_InternetPassword
uwrda_get_InternetProxyLogin
uwrda_get_InternetProxyPassword
uwrda_get_InternetProxyServer
uwrda_get_InternetUrl
uwrda_get_LocalConnectionString
uwrda_get_ReceiveTimeout
uwrda_get_SendTimeout
uwrda_put_CompressionLevel
uwrda_put_ConnectTimeout
uwrda_put_ConnectionManager
uwrda_put_ConnectionRetryTimeout
uwrda_put_InternetLogin
uwrda_put_InternetPassword
uwrda_put_InternetProxyLogin
uwrda_put_InternetProxyPassword
uwrda_put_InternetProxyServer
uwrda_put_InternetUrl
uwrda_put_LocalConnectionString
uwrda_put_ReceiveTimeout
uwrda_put_SendTimeout
uwrepl_AddSubscription
uwrepl_AsyncReplication
uwrepl_Cancel
uwrepl_DropSubscription
uwrepl_GetSyncResult
uwrepl_Initialize
uwrepl_LoadProperties
uwrepl_ReinitializeSubscription
uwrepl_Replication
uwrepl_Run
uwrepl_SaveProperties
uwrepl_Terminate
uwrepl_WaitForNextStatusReport
uwrepl_get_CompressionLevel
uwrepl_get_ConnectTimeout
uwrepl_get_ConnectionManager
uwrepl_get_ConnectionRetryTimeout
uwrepl_get_Distributor
uwrepl_get_DistributorAddress
uwrepl_get_DistributorLogin
uwrepl_get_DistributorNetwork
uwrepl_get_DistributorPassword
uwrepl_get_DistributorSecurityMode
uwrepl_get_ErrorPointer
uwrepl_get_ExchangeType
uwrepl_get_HostName
uwrepl_get_InternetLogin
uwrepl_get_InternetPassword
uwrepl_get_InternetProxyLogin
uwrepl_get_InternetProxyPassword
uwrepl_get_InternetProxyServer
uwrepl_get_InternetUrl
uwrepl_get_LoginTimeout
uwrepl_get_PostSyncCleanup
uwrepl_get_ProfileName
uwrepl_get_Publication
uwrepl_get_Publisher
uwrepl_get_PublisherAddress
uwrepl_get_PublisherChanges
uwrepl_get_PublisherConflicts
uwrepl_get_PublisherDatabase
uwrepl_get_PublisherLogin
uwrepl_get_PublisherNetwork
uwrepl_get_PublisherPassword
uwrepl_get_PublisherSecurityMode
uwrepl_get_QueryTimeout
uwrepl_get_ReceiveTimeout
uwrepl_get_SendTimeout
uwrepl_get_SnapshotTransferType
uwrepl_get_Subscriber
uwrepl_get_SubscriberChanges
uwrepl_get_SubscriberConflicts
uwrepl_get_SubscriberConnectionString
uwrepl_get_Validate
uwrepl_put_CompressionLevel
uwrepl_put_ConnectTimeout
uwrepl_put_ConnectionManager
uwrepl_put_ConnectionRetryTimeout
uwrepl_put_Distributor
uwrepl_put_DistributorAddress
uwrepl_put_DistributorLogin
uwrepl_put_DistributorNetwork
uwrepl_put_DistributorPassword
uwrepl_put_DistributorSecurityMode
uwrepl_put_ExchangeType
uwrepl_put_HostName
uwrepl_put_InternetLogin
uwrepl_put_InternetPassword
uwrepl_put_InternetProxyLogin
uwrepl_put_InternetProxyPassword
uwrepl_put_InternetProxyServer
uwrepl_put_InternetUrl
uwrepl_put_LoginTimeout
uwrepl_put_PostSyncCleanup
uwrepl_put_ProfileName
uwrepl_put_Publication
uwrepl_put_Publisher
uwrepl_put_PublisherAddress
uwrepl_put_PublisherDatabase
uwrepl_put_PublisherLogin
uwrepl_put_PublisherNetwork
uwrepl_put_PublisherPassword
uwrepl_put_PublisherSecurityMode
uwrepl_put_QueryTimeout
uwrepl_put_ReceiveTimeout
uwrepl_put_SendTimeout
uwrepl_put_SnapshotTransferType
uwrepl_put_Subscriber
uwrepl_put_SubscriberConnectionString
uwrepl_put_Validate
uwutil_ConvertFromDBTIMESTAMP
uwutil_ConvertToDBTIMESTAMP
uwutil_ReleaseCOMPtr
uwutil_SysFreeString
uwutil_ZeroMemory
uwutil_get_Error
uwutil_get_ErrorCount

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/x86/sqlceqp40.dll
.dll windows:6 windows x86

24d1d1da8b95c69424e9d80d78dcd314

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cb:a9:e9:3f:54:dd:d0:1e:af:60:31:5e:95:8c:3b:04:dd:3f:e1:a9
Signer

Actual PE Digest

cb:a9:e9:3f:54:dd:d0:1e:af:60:31:5e:95:8c:3b:04:dd:3f:e1:a9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr90

?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__clean_type_info_names_internal
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
_vsnprintf_s
wprintf
exp
log10
sqrt
acos
asin
atan
cos
sin
tan
atan2
labs
memcmp
wcsstr
log
_finite
rand_s
pow
wcstod
_clearfp
wcscat_s
wcscmp
_vsnwprintf_s
memmove
_wtol
iswalpha
_wcsnicmp
modf
wcschr
malloc
free
fabs
floor
ceil
towlower
swscanf_s
abs
iswspace
iswdigit
strlen
_ultow_s
_itow_s
vswprintf_s
wcsncpy_s
memcpy
wcscpy_s
_wcsicmp
memset
wcslen
_purecall
_crt_debugger_hook

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
MoveFileExW
OutputDebugStringW
GetCurrentThreadId
GetCurrentProcessId
WaitForSingleObject
WideCharToMultiByte
ReleaseMutex
SetFilePointer
GetFileSize
SetEndOfFile
WriteFile
GetSystemInfo
CreateFileW
CloseHandle
FreeLibrary
GetModuleFileNameW
LoadLibraryW
GetProcAddress
HeapFree
HeapCreate
HeapAlloc
HeapDestroy
GetTickCount
LCMapStringW
GetLastError
FileTimeToSystemTime
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemDefaultLCID
CompareStringW
MultiByteToWideChar
IsValidCodePage
GetACP
GetLocalTime

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

ole32

StringFromGUID2
CLSIDFromString
CoCreateFreeThreadedMarshaler

oleaut32

VarI4FromDec
VarDecFromCy
VariantInit
VarUI1FromI2
SetErrorInfo
SysStringLen
SysStringByteLen
SysFreeString
VariantChangeTypeEx
SafeArrayUnlock
VariantClear
SafeArrayLock
SafeArrayCreate
SystemTimeToVariantTime
VariantCopy
VarDateFromStr
VarCyFromStr
VarBoolFromStr
VarUI1FromStr
VarR8FromStr
VarI2FromStr
VarI4FromStr
SysAllocStringLen
VarCyFromUI4
VarUI1FromUI4
VarI2FromUI4
VarCyFromUI2
VarUI1FromUI2
VarCyFromUI1
VarR8FromUI1
VarI2FromUI1
VarI4FromUI1
VarR4FromUI1
VarR4FromI1
VarR8FromI1
VarCyFromI1
VarI4FromI1
VarUI1FromDec
VarBstrFromDec
VarI2FromI1
VarI2FromDec
VarI2FromI4
VarR4FromDec
VarR8FromDec
VarCyFromDec
VarBoolFromDec
VarUI1FromBool
VarCyFromI2
VarBstrFromDate
VarR4FromStr
VarUI1FromR8
VarI2FromR8
VarI4FromR8
VarR4FromR8
VarBstrFromCy
VarR8FromCy
VarBoolFromCy
VarUI1FromCy
VarR4FromCy
VarDecFromR8
VarBstrFromR8
VarI2FromCy
VarI4FromCy
VarCyFromR8
VarUI1FromR4
VarDecFromR4
VarBstrFromR4
VarI2FromR4
VarI4FromR4
VarCyFromR4
VarUI1FromI4
VarCyFromI4

user32

CharLowerBuffW
CharNextExA
CharUpperBuffW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 571KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libs/x86/sqlcese40.dll
.dll windows:6 windows x86

0993a305d660ef4e6ba364c3f8923adb

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ae:5c:e9:cb:85:76:ba:3a:f0:e2:91:cf:78:e6:ed:76:e4:d0:80:ff
Signer

Actual PE Digest

ae:5c:e9:cb:85:76:ba:3a:f0:e2:91:cf:78:e6:ed:76:e4:d0:80:ff

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr90

_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
_snwprintf_s
towlower
atoi
_ultow_s
swprintf_s
vswprintf_s
strlen
strncmp
rand_s
_wcsnicmp
_itow_s
qsort
_wcsicmp
free
malloc
wcsrchr
swscanf_s
_vsnwprintf_s
wcslen
wcsncpy_s
wcscpy_s
memcmp
memmove
memcpy
memset
abs
wprintf
_vsnprintf_s
_purecall

kernel32

MoveFileExW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleA
LoadLibraryA
CreateThread
WaitForMultipleObjects
SetEvent
SetThreadPriority
GetFileType
MapViewOfFile
GetFileSize
GetFileInformationByHandle
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
UnmapViewOfFile
GetLocaleInfoA
GetVersionExA
GetSystemTime
SetEndOfFile
GlobalMemoryStatus
SetFilePointer
ReadFile
GetCurrentProcess
GetProcessTimes
FlushFileBuffers
IsValidLocale
InterlockedExchange
InterlockedCompareExchange
OpenThread
GetExitCodeThread
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
SetLastError
GetLastError
CloseHandle
WriteFile
GetUserDefaultLCID
FileTimeToSystemTime
HeapFree
HeapAlloc
GetCurrentProcessId
SystemTimeToFileTime
LocalAlloc
LocalFree
HeapValidate
GetProcessHeap
InitializeCriticalSectionAndSpinCount
HeapDestroy
HeapSetInformation
HeapCreate
HeapReAlloc
HeapSize
FreeLibrary
GetSystemInfo
DisableThreadLibraryCalls
ReleaseMutex
WaitForSingleObject
GetLocalTime
CompareFileTime
Sleep
GetTickCount
GetCurrentThreadId

advapi32

RegCloseKey
InitializeSecurityDescriptor
GetFileSecurityW
IsValidSecurityDescriptor
GetSecurityDescriptorControl
GetSecurityDescriptorLength
SetFileSecurityW
SetSecurityDescriptorDacl

ole32

CoCreateFreeThreadedMarshaler

user32

MsgWaitForMultipleObjectsEx
KillTimer
TranslateMessage
IsWindow
DestroyWindow
SetTimer

Exports

Exports

DllCanUnloadNow
DllGetClassObject
EnableCedbFailpoint
EnableStorePlayback
EnableStoreTracing
InitSerialization
SqlCeAddDatabaseProps
SqlCeAddSyncPartner
SqlCeAttachCustomTrackingData
SqlCeBeginSyncSession
SqlCeBeginTransaction
SqlCeChangeDatabaseLCID
SqlCeCloseHandle
SqlCeCreateDatabase
SqlCeCreateSession
SqlCeDeleteDatabase
SqlCeDeleteRecord
SqlCeEndSyncSession
SqlCeEndTransaction
SqlCeEnumDBVolumes
SqlCeFindFirstDatabase
SqlCeFindNextChangedRecord
SqlCeFindNextDatabase
SqlCeFlushDBVol
SqlCeFreeNotification
SqlCeGetChangedRecordCnt
SqlCeGetChangedRecords
SqlCeGetCustomTrackingData
SqlCeGetDBInformationByHandle
SqlCeGetDatabaseProps
SqlCeGetDatabaseSession
SqlCeGetPropChangeInfo
SqlCeGetRecordChangeInfo
SqlCeMarkRecord
SqlCeMountDBVol
SqlCeOidGetInfo
SqlCeOnServerLoad
SqlCeOpenDatabase
SqlCeOpenDatabaseEx
SqlCeOpenStream
SqlCePurgeTrackingData
SqlCePurgeTrackingGenerations
SqlCeReadRecordProps
SqlCeRemoveDatabaseProps
SqlCeRemoveDatabaseTracking
SqlCeRemoveSyncPartner
SqlCeSeekDatabase
SqlCeSetDatabaseInfo
SqlCeSetSessionOption
SqlCeStreamRead
SqlCeStreamSaveChanges
SqlCeStreamSeek
SqlCeStreamSetSize
SqlCeStreamWrite
SqlCeTrackDatabase
SqlCeTrackProperty
SqlCeUninitialize
SqlCeUnmountDBVol
SqlCeWriteRecordProps
SuspendStoreOperation

Sections

.text
Size: 358KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
updater/updater.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 974KB - Virtual size: 973KB

.rsrc Size: 96KB - Virtual size: 96KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 28KB - Virtual size: 27KB

.rsrc Size: 1024B - Virtual size: 960B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 245KB - Virtual size: 244KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 36KB - Virtual size: 36KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

82d1f49a1484261f0e9d2553d34bd210

Headers

File Characteristics

Imports

kernel32

oleaut32

user32

Exports

Exports

Sections

.text Size: 373KB - Virtual size: 373KB

.data Size: 19KB - Virtual size: 19KB

.rdata Size: 80KB - Virtual size: 79KB

.bss Size: - Virtual size: 11KB

.CRT Size: 512B - Virtual size: 4B

.idata Size: 3KB - Virtual size: 3KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 23KB - Virtual size: 22KB

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 8KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

.text
Size: 974KB - Virtual size: 973KB

.rsrc
Size: 96KB - Virtual size: 96KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 1024B - Virtual size: 960B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 245KB - Virtual size: 244KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 36KB - Virtual size: 36KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 373KB - Virtual size: 373KB

.data
Size: 19KB - Virtual size: 19KB

.rdata
Size: 80KB - Virtual size: 79KB

.bss
Size: - Virtual size: 11KB

.CRT
Size: 512B - Virtual size: 4B

.idata
Size: 3KB - Virtual size: 3KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 23KB - Virtual size: 22KB

.text
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 512B - Virtual size: 12B

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62
Signer

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:19:cc:93:00:01:00:00:00:66
Certificate

61:06:94:2d:00:00:00:00:00:09
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

2d:e2:1e:82:8b:6e:a4:52:14:eb:57:67:a9:ad:64:df:e5:9e:b1:ca
Signer

.text
Size: 450KB - Virtual size: 450KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

a4:6c:07:cf:a9:38:ad:dd:05:7b:ae:24:e4:ad:78:9e:fa:07:82:fb:e0:b3:ea:d5:f5:bc:8e:78:ff:71:9b:27
Signer

.text
Size: 126KB - Virtual size: 126KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2
Certificate

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6
Signer

12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d
Signer