1ee6ebf2b6ace82d63862e96fd000170

Sharing

Copy URL

Twitter E-mail

General

Target

1ee6ebf2b6ace82d63862e96fd000170
Size

20.8MB
MD5

1ee6ebf2b6ace82d63862e96fd000170
SHA1

4a2bc2f01b7dac58270c2978d3bd529d60caf841
SHA256

bdf68e5e5c96f4ca8cac0354c4e79974a5afe47165058372f91b3c5660f0478f
SHA512

8fc53413c5efbc66877dbb5fd903dd11e5f0c7004b89730c61b7bbaf072ecbe8ce06f09d5fb528acc3599f8acfc1942d5f4e5d22c09cd765fb0f5f5bedfc052f
SSDEEP

393216:nNh7c+GD9ER/48R+wZOZ+rDhOA/EHn4YI/E0UEUyW/EJbpG4KqOiLceAUI0EsKiq:Nhw+6+TsWyQF/k4YI/xzUyW/Qw4d9bAn

Score

1^/10

Malware Config

Signatures

Files

1ee6ebf2b6ace82d63862e96fd000170
.zip
LaunchManager_Dritek_7.0.4_W8x64/CDROMUTL.DLL
.dll windows:5 windows x86 arch:x86

d90ac94ff22c174e8c4ff0db5b137461

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17-10-2006 00:00

Not After

16-10-2009 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d5:4a:1d:4f:25:3b:df:1a:4a:a2:e9:8e:67:8d:e0:9b:c4:63:25:08
Signer

Actual PE Digest

d5:4a:1d:4f:25:3b:df:1a:4a:a2:e9:8e:67:8d:e0:9b:c4:63:25:08

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

mciSendStringW
mciSendCommandW

kernel32

DeleteCriticalSection
CompareStringW
CompareStringA
GetPrivateProfileStringA
DeleteFileA
WritePrivateProfileStringA
CopyFileA
lstrcmpiA
SearchPathA
GetDriveTypeW
GetLogicalDrives
FindClose
FindNextFileW
lstrcmpiW
FindFirstFileW
lstrcatW
lstrcpyW
lstrlenW
GetVolumeInformationW
FlushFileBuffers
CloseHandle
CreateFileA
GetLocaleInfoW
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetLastError
GetCurrentThread
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetEnvironmentVariableA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
FatalAppExitA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapAlloc
VirtualAlloc
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetTimeZoneInformation
HeapSize

user32

SendMessageW
PostMessageW
wsprintfW

Exports

Exports

CDRomUtl_DeInit
CDRomUtl_DeviceChange
CDRomUtl_GetCDRomDrive
CDRomUtl_GetCDTitle
CDRomUtl_GetCDTitleEx
CDRomUtl_GetTotalCDRomDrives
CDRomUtl_Init
CDRomUtl_IsCDRomDoorOpen
CDRomUtl_IsCDRomMediaPresent
CDRomUtl_OpenCDRomDoor

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/CdDirIo.dll
.dll windows:5 windows x86 arch:x86

15d1a8ea27c634088e401db37908d9cc

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

db:56:77:6f:1a:bd:20:87:4b:a6:c9:5b:68:54:86:44:66:67:63:17
Signer

Actual PE Digest

db:56:77:6f:1a:bd:20:87:4b:a6:c9:5b:68:54:86:44:66:67:63:17

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
CM_Reenumerate_DevNode
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsW
CM_Get_Parent
SetupDiDestroyDeviceInfoList

kernel32

ExitProcess
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
lstrcpynW
IsBadWritePtr
WideCharToMultiByte
CloseHandle
CreateFileW
DeviceIoControl
lstrlenW
lstrcpyW
GetLogicalDrives
QueryDosDeviceW
lstrcmpW
GetLastError
GetLocaleInfoA
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize

user32

wsprintfW

Exports

Exports

CdDirIo_ConfirmMeidaNotExist
CdDirIo_DeInit
CdDirIo_EjectDevice
CdDirIo_EjectMedia
CdDirIo_GetBusType
CdDirIo_GetDeviceHardwareIDA
CdDirIo_GetDeviceHardwareIDW
CdDirIo_GetFriendlyNameA
CdDirIo_GetFriendlyNameW
CdDirIo_GetHotPlugSupported
CdDirIo_Init
CdDirIo_IsDoorOpen
CdDirIo_IsMediaReady
CdDirIo_OpenDoor
CdDirIo_RescanDevice
CdDirIo_StopDisc

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/CloseApp/CloseHookApp.cfg
LaunchManager_Dritek_7.0.4_W8x64/CloseApp/CloseHookApp.exe
.exe windows:5 windows x86 arch:x86

0baa4ed612e60596e9afd575042c115d

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

25:0a:fd:f4:47:5a:4d:d3:4f:a7:92:e1:d4:ab:fe:56:85:85:2c:a2
Signer

Actual PE Digest

25:0a:fd:f4:47:5a:4d:d3:4f:a7:92:e1:d4:ab:fe:56:85:85:2c:a2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveExtensionW
PathAddExtensionW

kernel32

CreateProcessW
Sleep
lstrlenW
GetPrivateProfileStringW
CloseHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetModuleFileNameW
GetLastError
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar

user32

PostMessageW
FindWindowW
wsprintfW

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/ComFnUtl.dll
.dll windows:5 windows x86 arch:x86

22feef9190fd83f8cf419305b8dba5a2

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

81:91:65:80:bf:8d:ff:f1:e1:88:f9:dc:e6:80:b6:22:19:a8:61:6f
Signer

Actual PE Digest

81:91:65:80:bf:8d:ff:f1:e1:88:f9:dc:e6:80:b6:22:19:a8:61:6f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

shlwapi

PathUnquoteSpacesW
PathGetArgsW
AssocQueryStringW
PathRemoveArgsW
PathRemoveFileSpecW

kernel32

lstrlenW
GlobalAlloc
GlobalLock
lstrcpyW
GlobalUnlock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
lstrcpyA
lstrcatW
ExpandEnvironmentStringsW
OutputDebugStringW
lstrcmpiW
GetVersionExW
lstrcpynW
GetCurrentThreadId
GetLastError
CreateProcessW
CloseHandle
FormatMessageW
LocalFree
GetModuleFileNameW
CreateFileW
WriteFile
DeleteFileW
GetWindowsDirectoryW
GetSystemDirectoryW
GetCurrentProcess
SetSystemPowerState
Sleep
GetLocaleInfoA
GetStringTypeA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryA
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
ExitProcess
GetProcAddress
GetModuleHandleW
HeapDestroy
HeapCreate
HeapReAlloc
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
VirtualAlloc
VirtualFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCommandLineA
HeapAlloc
HeapFree

user32

GetTopWindow
GetMenuState
GetSystemMenu
SetFocus
GetFocus
IsIconic
ShowWindow
AttachThreadInput
SetForegroundWindow
GetWindowThreadProcessId
GetForegroundWindow
GetParent
GetWindowLongW
SetWindowPos
GetWindow
GetWindowRect
GetSystemMetrics
SetCursorPos
mouse_event
EnumDesktopWindows
CloseDesktop
OpenDesktopW
GetDesktopWindow
SendMessageTimeoutW
SystemParametersInfoW
ExitWindowsEx
PostMessageW
FindWindowW
wsprintfW
keybd_event
MessageBoxW
EnumThreadWindows
IsWindowVisible
IsWindow
wvsprintfW
RegisterWindowMessageW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SetRect
GetCursorPos

advapi32

RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegEnumKeyExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteExW
FindExecutableW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW
SHGetMalloc

ole32

CoCreateInstance
CoUninitialize
CoInitialize

Exports

Exports

ComFnUtl_BroadcastMessage
ComFnUtl_CenterWindow
ComFnUtl_CloseScreenSaver
ComFnUtl_CopyTextToClipboard
ComFnUtl_CopyTextToClipboardA
ComFnUtl_CopyTextToClipboardW
ComFnUtl_CreateShortcut
ComFnUtl_CreateShortcutA
ComFnUtl_CreateShortcutW
ComFnUtl_CycleApplication
ComFnUtl_ExecuteCommand
ComFnUtl_ExecuteCommandA
ComFnUtl_ExecuteCommandEx
ComFnUtl_ExecuteCommandExA
ComFnUtl_ExecuteCommandExW
ComFnUtl_ExecuteCommandW
ComFnUtl_ExecuteScreenSaver
ComFnUtl_GetAssociateExecuteFileFromExtName
ComFnUtl_GetAssociateExecuteFileFromExtNameA
ComFnUtl_GetAssociateExecuteFileFromExtNameW
ComFnUtl_GetDefaultPlayerFileNameByExtName
ComFnUtl_GetDefaultPlayerFileNameByExtNameA
ComFnUtl_GetDefaultPlayerFileNameByExtNameW
ComFnUtl_GetFileVersionByFileName
ComFnUtl_GetFileVersionByFileNameA
ComFnUtl_GetFileVersionByFileNameW
ComFnUtl_GetFileVersionByFullPathFileName
ComFnUtl_GetFileVersionByFullPathFileNameA
ComFnUtl_GetFileVersionByFullPathFileNameW
ComFnUtl_GetFocusHandle
ComFnUtl_GetInternetExplorerDefaultHomePage
ComFnUtl_GetInternetExplorerDefaultHomePageA
ComFnUtl_GetInternetExplorerDefaultHomePageW
ComFnUtl_GetScreenSaverTimeOut
ComFnUtl_GetSpecialFolder
ComFnUtl_GetSpecialFolderA
ComFnUtl_GetSpecialFolderPath
ComFnUtl_GetSpecialFolderPathA
ComFnUtl_GetSpecialFolderPathW
ComFnUtl_GetSpecialFolderW
ComFnUtl_GetSystemClientsDefaultSubKey
ComFnUtl_GetSystemClientsDefaultSubKeyA
ComFnUtl_GetSystemClientsDefaultSubKeyW
ComFnUtl_GetSystemClientsFileNameBySubKey
ComFnUtl_GetSystemClientsFileNameBySubKeyA
ComFnUtl_GetSystemClientsFileNameBySubKeyW
ComFnUtl_GetSystemClientsSubKey
ComFnUtl_GetSystemClientsSubKeyA
ComFnUtl_GetSystemClientsSubKeyW
ComFnUtl_GetSystemDefaultBrowserFileName
ComFnUtl_GetSystemDefaultBrowserFileNameA
ComFnUtl_GetSystemDefaultBrowserFileNameW
ComFnUtl_GetSystemDefaultMailFileName
ComFnUtl_GetSystemDefaultMailFileNameA
ComFnUtl_GetSystemDefaultMailFileNameW
ComFnUtl_GetSystemDefaultMailSubKey
ComFnUtl_GetSystemDefaultMailSubKeyA
ComFnUtl_GetSystemDefaultMailSubKeyW
ComFnUtl_GetSystemDefaultPlayerFileName
ComFnUtl_GetSystemDefaultPlayerFileNameA
ComFnUtl_GetSystemDefaultPlayerFileNameW
ComFnUtl_GetSystemMailFileNameBySubKey
ComFnUtl_GetSystemMailFileNameBySubKeyA
ComFnUtl_GetSystemMailFileNameBySubKeyW
ComFnUtl_GetSystemMailSubKey
ComFnUtl_GetSystemMailSubKeyA
ComFnUtl_GetSystemMailSubKeyW
ComFnUtl_IsScreenSaverActive
ComFnUtl_IsScreenSaverRunning
ComFnUtl_IssueWindowsAPPCommand
ComFnUtl_MinimizeAllApplication
ComFnUtl_MinimizeWindow
ComFnUtl_OpenSpecialFolder
ComFnUtl_OpenSpecialFolderA
ComFnUtl_OpenSpecialFolderW
ComFnUtl_ResolveShortcut
ComFnUtl_ResolveShortcutA
ComFnUtl_ResolveShortcutW
ComFnUtl_RetrieveRegisterWindowMessage
ComFnUtl_RotateApplication
ComFnUtl_SendAPPCommand
ComFnUtl_SendAPPCommandEx
ComFnUtl_SetFocusHandle
ComFnUtl_SetScreenSaverActive
ComFnUtl_SetScreenSaverTimeOut
ComFnUtl_SetWindowToActive
ComFnUtl_SetWindowToForeground
ComFnUtl_ShowShutDownWindows
ComFnUtl_ShowSystemDefaultErrorMessage
ComFnUtl_ShowSystemDefaultErrorMessageA
ComFnUtl_ShowSystemDefaultErrorMessageW
ComFnUtl_ShutDownWindows
ComFnUtl_SuspendSystemByPowerDown

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/DHBKcUtl.Cfg
LaunchManager_Dritek_7.0.4_W8x64/DHBKcUtl.dll
.dll windows:4 windows x86 arch:x86

d275eea9a0fae73e39043c7aba99ccde

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

34:c4:ea:92:40:3c:5a:c6:1a:97:d6:e4:32:32:12:78:4c:b1:28:1e
Signer

Actual PE Digest

34:c4:ea:92:40:3c:5a:c6:1a:97:d6:e4:32:32:12:78:4c:b1:28:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hidread

HRD_CreateControlObject
HRD_Obj_SetReadControl
HRD_Obj_SetInstanceW
HRD_Obj_SetReadable
HRD_Obj_SetDevicePathW
HRD_CloseControlObject
HRD_IsControlObjectValid
HRD_Obj_IsReadingStarted
HRD_Obj_IsReadingConnected
HRD_IsDeviceReadable_IW
HRD_Obj_GetReadPacketDataSize
HRD_Dev_GetFeatureDirectly_PW
HRD_OpenEnumDeviceInfo
HRD_Obj_GetReadPacketData
HRD_FindFirstSpecifiedDevice_HW
HRD_CloseEnumDeviceInfo
HRD_GetDeviceInstanceID_FW
HRD_GetDevicePath_IW
HRD_Deinitial
HRD_Initial
HRD_Obj_StopReading
HRD_Dev_SetFeatureDirectly_PW
HRD_Obj_StartReading

kernel32

GetCurrentThreadId
GetModuleHandleW
GetProcAddress
GetSystemInfo
FreeLibrary
GetModuleFileNameW
HeapSize
LoadLibraryA
RtlUnwind
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeW
MultiByteToWideChar
GetVersionExW
GetPrivateProfileStringW
lstrlenW
GetPrivateProfileIntW
HeapAlloc
GetLastError
HeapFree
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA

user32

GetSystemMetrics
MessageBoxW
GetKeyState
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
SetTimer
PostMessageW
wsprintfW
DefWindowProcW
KillTimer
SendMessageW
UnregisterClassW
CreateWindowExW
RegisterClassExW
LoadCursorW

advapi32

ReportEventW
RegisterEventSourceW
DeregisterEventSource

Exports

Exports

?DHBKC_Init@@YAHPBDPAUHWND__@@II@Z
DHBKC_AddEraseFnKeyCodeToDriver
DHBKC_AddEraseKeyCodeToDriver
DHBKC_CheckIfWorkWell
DHBKC_CtrlKeyState
DHBKC_DeInit
DHBKC_GetForceRejectCodeType
DHBKC_GetMonitorCodeType
DHBKC_IgnoreRejectKeyWhenCtrlKeysPressed
DHBKC_InitA
DHBKC_InitW
DHBKC_IsKeyCodeStartForceRejected
DHBKC_IsKeyCodeStartMonitored
DHBKC_LoadDriver
DHBKC_PrepareKeyCode
DHBKC_SetForceRejectCodeType
DHBKC_SetMonitorCodeType
DHBKC_StartForceRejectKeyCode
DHBKC_StartHookKeyCode
DHBKC_StartMonitorKeyCode
DHBKC_StopForceRejectKeyCode
DHBKC_StopMonitorKeyCode
DHBKC_UnLoadDriver

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/DelPrevV.dll
.dll windows:5 windows x86 arch:x86

01bbdb226531905964ca2709acb1a1c1

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9f:be:af:a4:f5:6d:32:43:47:c3:13:1f:00:db:75:3f:7e:c0:dd:08
Signer

Actual PE Digest

9f:be:af:a4:f5:6d:32:43:47:c3:13:1f:00:db:75:3f:7e:c0:dd:08

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFileExistsW
PathAddExtensionW
PathIsDirectoryEmptyW
PathFindExtensionW
PathAppendW
PathIsSystemFolderW

kernel32

CloseHandle
WaitForSingleObject
GetModuleFileNameW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
VirtualFree
VerSetConditionMask
VerifyVersionInfoW
GetModuleHandleW
OutputDebugStringA
InterlockedExchange
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
ReleaseMutex
GetLastError
SetLastError
CreateMutexW
SetFilePointer
CreateFileW
WriteFile
RaiseException
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
CreateProcessW
HeapSize
GetStringTypeW
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
GetStdHandle
SetHandleCount
IsProcessorFeaturePresent
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetPrivateProfileIntW
Sleep
lstrcpynW
SetEnvironmentVariableA
lstrcmpW
GetWindowsDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryW
GetFullPathNameW
GetPrivateProfileStringW
RemoveDirectoryW
lstrcmpiW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
lstrcatW
lstrlenW
lstrcpyW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
ReadFile
CompareStringW
GetCPInfo
LCMapStringW
HeapReAlloc
HeapAlloc
ExitProcess
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
HeapFree
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
DecodePointer
EncodePointer
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte

user32

MessageBoxW
LoadStringW
FindWindowW
wsprintfW
SendMessageW
DdeInitializeW
PostMessageW
DdeCreateDataHandle
DdeUninitialize
DdeFreeDataHandle
DdeUnaccessData
DdeAccessData
DdeDisconnect
DdeFreeStringHandle
DdeClientTransaction
DdeConnect
DdeCreateStringHandleW

advapi32

RegCreateKeyExW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
DeleteService
ControlService
StartServiceW
QueryServiceStatusEx
RegDeleteKeyW
RegEnumKeyExW
RegDeleteValueW
RegEnumValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

SHChangeNotify
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc

ole32

CoUninitialize
CoInitialize
CoCreateInstance

Exports

Exports

DelPrevV_DoIt

Sections

.text
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/DelPrevV.ini
LaunchManager_Dritek_7.0.4_W8x64/DkLaunch/DkRun32.exe
.exe windows:5 windows x86 arch:x86

2b5d821af9629a36ba6ee64a6c1582f2

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a5:ac:9c:b1:aa:45:41:2f:05:4e:24:d1:f1:b5:ff:5c:8d:39:52:5d
Signer

Actual PE Digest

a5:ac:9c:b1:aa:45:41:2f:05:4e:24:d1:f1:b5:ff:5c:8d:39:52:5d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
lstrcpynW
CreateProcessW
GetLastError
CloseHandle
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/DkLaunch/DkUserProc.exe
.exe windows:5 windows x86 arch:x86

fa7eb1b40e747f894117eea845e3680d

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:04:ca:eb:b0:37:6b:4f:75:8f:46:d5:35:81:0c:83:c2:8d:18:e6
Signer

Actual PE Digest

1f:04:ca:eb:b0:37:6b:4f:75:8f:46:d5:35:81:0c:83:c2:8d:18:e6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendW
PathRemoveFileSpecW

kernel32

CreateJobObjectW
SetInformationJobObject
GetLastError
CloseHandle
GetCurrentProcess
AssignProcessToJobObject
GetCurrentProcessId
ProcessIdToSessionId
WTSGetActiveConsoleSessionId
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
Process32NextW
GetModuleHandleW
GetProcAddress
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
lstrcpynW
lstrlenW
GetModuleFileNameW
lstrcatW
lstrcmpiW
TlsAlloc
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

advapi32

OpenProcessToken
DuplicateTokenEx

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/HIDRead.dll
.dll windows:4 windows x86 arch:x86

c2aaa5b0c482f824510c3bfd66101669

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fa:9a:27:de:74:ca:25:a3:2a:a0:c7:e8:73:57:94:1e:4e:20:b1:1f
Signer

Actual PE Digest

fa:9a:27:de:74:ca:25:a3:2a:a0:c7:e8:73:57:94:1e:4e:20:b1:1f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
HeapAlloc
GetCommandLineA
GetProcessHeap
RtlUnwind
RaiseException
ExitProcess
HeapSize
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
IsValidCodePage
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
GetThreadLocale
GlobalFindAtomW
LoadLibraryA
GetVersionExA
GlobalFlags
GetModuleHandleA
WritePrivateProfileStringW
InterlockedIncrement
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedDecrement
GetCurrentProcessId
GlobalAddAtomW
GlobalDeleteAtom
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameW
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
InterlockedExchange
lstrcmpW
GetModuleHandleW
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
FindResourceW
LoadResource
LockResource
SizeofResource
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
DeviceIoControl
lstrcatW
lstrcpynW
WriteFile
SetEvent
CancelIo
GetCurrentThread
CreateThread
CreateEventW
CreateFileW
GetOverlappedResult
GetLastError
ReadFile
WaitForSingleObject
lstrcmpiW
lstrcpyW
CloseHandle
FreeLibrary
GetProcAddress
GetACP
LoadLibraryW

user32

RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CopyRect
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDlgCtrlID
GetClassNameW
PtInRect
GetWindowTextW
SetWindowTextW
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnregisterClassW
UnhookWindowsHookEx
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
ShowWindow
AdjustWindowRectEx
DestroyMenu
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuW
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
wsprintfW
CharUpperW
PostMessageW
SendMessageW
GetWindowRect
UnregisterClassA

gdi32

DeleteDC
GetStockObject
SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
GetDeviceCaps
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
PtVisible

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegCloseKey

shlwapi

PathFindExtensionW
PathFindFileNameW
StrStrW

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

HRD_CloseControlObject
HRD_CloseEnumDeviceInfo
HRD_ConstantToGUIDA
HRD_ConstantToGUIDW
HRD_CreateControlObject
HRD_DeeperSeekHardwareID
HRD_Deinitial
HRD_Dev_GetCollectionNumber_F
HRD_Dev_GetCollectionNumber_IA
HRD_Dev_GetCollectionNumber_IW
HRD_Dev_GetCollectionNumber_PA
HRD_Dev_GetCollectionNumber_PW
HRD_Dev_GetFeatureDirectly_F
HRD_Dev_GetFeatureDirectly_IA
HRD_Dev_GetFeatureDirectly_IW
HRD_Dev_GetFeatureDirectly_PA
HRD_Dev_GetFeatureDirectly_PW
HRD_Dev_GetHardwareID_FA
HRD_Dev_GetHardwareID_FW
HRD_Dev_GetHardwareID_IA
HRD_Dev_GetHardwareID_IW
HRD_Dev_GetHardwareID_PA
HRD_Dev_GetHardwareID_PW
HRD_Dev_GetHardwareIDsList_FA
HRD_Dev_GetHardwareIDsList_FW
HRD_Dev_GetHardwareIDsList_IA
HRD_Dev_GetHardwareIDsList_IW
HRD_Dev_GetHardwareIDsList_PA
HRD_Dev_GetHardwareIDsList_PW
HRD_Dev_GetInputLength_F
HRD_Dev_GetInputLength_IA
HRD_Dev_GetInputLength_IW
HRD_Dev_GetInputLength_PA
HRD_Dev_GetInputLength_PW
HRD_Dev_GetInputReportID_F
HRD_Dev_GetInputReportID_IA
HRD_Dev_GetInputReportID_IW
HRD_Dev_GetInputReportID_PA
HRD_Dev_GetInputReportID_PW
HRD_Dev_GetManufacturerString_FA
HRD_Dev_GetManufacturerString_FW
HRD_Dev_GetManufacturerString_IA
HRD_Dev_GetManufacturerString_IW
HRD_Dev_GetManufacturerString_PA
HRD_Dev_GetManufacturerString_PW
HRD_Dev_GetNumDeviceInputBuffers_F
HRD_Dev_GetNumDeviceInputBuffers_IA
HRD_Dev_GetNumDeviceInputBuffers_IW
HRD_Dev_GetNumDeviceInputBuffers_PA
HRD_Dev_GetNumDeviceInputBuffers_PW
HRD_Dev_GetOutputDataLength_F
HRD_Dev_GetOutputDataLength_IA
HRD_Dev_GetOutputDataLength_IW
HRD_Dev_GetOutputDataLength_PA
HRD_Dev_GetOutputDataLength_PW
HRD_Dev_GetOutputReportID_F
HRD_Dev_GetOutputReportID_IA
HRD_Dev_GetOutputReportID_IW
HRD_Dev_GetOutputReportID_PA
HRD_Dev_GetOutputReportID_PW
HRD_Dev_GetOutputReportLength_F
HRD_Dev_GetOutputReportLength_IA
HRD_Dev_GetOutputReportLength_IW
HRD_Dev_GetOutputReportLength_PA
HRD_Dev_GetOutputReportLength_PW
HRD_Dev_GetPollFrequencyMSec_F
HRD_Dev_GetPollFrequencyMSec_IA
HRD_Dev_GetPollFrequencyMSec_IW
HRD_Dev_GetPollFrequencyMSec_PA
HRD_Dev_GetPollFrequencyMSec_PW
HRD_Dev_GetProductString_FA
HRD_Dev_GetProductString_FW
HRD_Dev_GetProductString_IA
HRD_Dev_GetProductString_IW
HRD_Dev_GetProductString_PA
HRD_Dev_GetProductString_PW
HRD_Dev_GetSerialNumber_FA
HRD_Dev_GetSerialNumber_FW
HRD_Dev_GetSerialNumber_IA
HRD_Dev_GetSerialNumber_IW
HRD_Dev_GetSerialNumber_PA
HRD_Dev_GetSerialNumber_PW
HRD_Dev_GetUsage_F
HRD_Dev_GetUsage_IA
HRD_Dev_GetUsage_IW
HRD_Dev_GetUsage_PA
HRD_Dev_GetUsage_PW
HRD_Dev_GetVendorProductID_F
HRD_Dev_GetVendorProductID_IA
HRD_Dev_GetVendorProductID_IW
HRD_Dev_GetVendorProductID_PA
HRD_Dev_GetVendorProductID_PW
HRD_Dev_IsPolled_F
HRD_Dev_IsPolled_IA
HRD_Dev_IsPolled_IW
HRD_Dev_IsPolled_PA
HRD_Dev_IsPolled_PW
HRD_Dev_OutputPacketDataDirectly_F
HRD_Dev_OutputPacketDataDirectly_IA
HRD_Dev_OutputPacketDataDirectly_IW
HRD_Dev_OutputPacketDataDirectly_PA
HRD_Dev_OutputPacketDataDirectly_PW
HRD_Dev_SetFeatureDirectly_F
HRD_Dev_SetFeatureDirectly_IA
HRD_Dev_SetFeatureDirectly_IW
HRD_Dev_SetFeatureDirectly_PA
HRD_Dev_SetFeatureDirectly_PW
HRD_DeviceConstantToGUIDA
HRD_DeviceConstantToGUIDW
HRD_FindFirstDevice
HRD_FindFirstSpecifiedDevice_DA
HRD_FindFirstSpecifiedDevice_DW
HRD_FindFirstSpecifiedDevice_HA
HRD_FindFirstSpecifiedDevice_HW
HRD_FindNextDevice
HRD_FindNextSpecifiedDevice_DA
HRD_FindNextSpecifiedDevice_DW
HRD_FindNextSpecifiedDevice_HA
HRD_FindNextSpecifiedDevice_HW
HRD_GUIDToConstantA
HRD_GUIDToConstantW
HRD_GUIDToDeviceConstantA
HRD_GUIDToDeviceConstantW
HRD_GUIDToInterfaceConstantA
HRD_GUIDToInterfaceConstantW
HRD_GUIDToStrA
HRD_GUIDToStrW
HRD_GetDeviceCapabilities_F
HRD_GetDeviceCapabilities_IA
HRD_GetDeviceCapabilities_IW
HRD_GetDeviceClassGUID_FA
HRD_GetDeviceClassGUID_FW
HRD_GetDeviceClassGUID_IA
HRD_GetDeviceClassGUID_IW
HRD_GetDeviceCount
HRD_GetDeviceDesc_FA
HRD_GetDeviceDesc_FW
HRD_GetDeviceDesc_IA
HRD_GetDeviceDesc_IW
HRD_GetDeviceDriver_FA
HRD_GetDeviceDriver_FW
HRD_GetDeviceDriver_IA
HRD_GetDeviceDriver_IW
HRD_GetDeviceInstanceID_FA
HRD_GetDeviceInstanceID_FW
HRD_GetDevicePath_FA
HRD_GetDevicePath_FW
HRD_GetDevicePath_IA
HRD_GetDevicePath_IW
HRD_GetDevicePropertiesEx_FA
HRD_GetDevicePropertiesEx_FW
HRD_GetDevicePropertiesEx_IA
HRD_GetDevicePropertiesEx_IW
HRD_GetDeviceProperties_FA
HRD_GetDeviceProperties_FW
HRD_GetDeviceProperties_IA
HRD_GetDeviceProperties_IW
HRD_GetHardwareIDWithoutRevision
HRD_GetHardwareID_FA
HRD_GetHardwareID_FW
HRD_GetHardwareID_IA
HRD_GetHardwareID_IW
HRD_GetHardwareIDsList_FA
HRD_GetHardwareIDsList_FW
HRD_GetHardwareIDsList_IA
HRD_GetHardwareIDsList_IW
HRD_GetPhysicalDeviceObjectName_FA
HRD_GetPhysicalDeviceObjectName_FW
HRD_GetPhysicalDeviceObjectName_IA
HRD_GetPhysicalDeviceObjectName_IW
HRD_GetSpecifiedDeviceCount_DA
HRD_GetSpecifiedDeviceCount_DW
HRD_GetSpecifiedDeviceCount_HA
HRD_GetSpecifiedDeviceCount_HW
HRD_Initial
HRD_InterfaceConstantToGUIDA
HRD_InterfaceConstantToGUIDW
HRD_IsControlObjectValid
HRD_IsDeviceInstallWell_F
HRD_IsDeviceInstallWell_IA
HRD_IsDeviceInstallWell_IW
HRD_IsDeviceReadable_F
HRD_IsDeviceReadable_IA
HRD_IsDeviceReadable_IW
HRD_IsDeviceWritable_F
HRD_IsDeviceWritable_IA
HRD_IsDeviceWritable_IW
HRD_IsGetHardwareIDWithoutRevision
HRD_IsHardwareIDSeekDeeper
HRD_Obj_ClearBufferWhenXRead
HRD_Obj_GetDeviceIndex
HRD_Obj_GetFeature
HRD_Obj_GetLastReadError
HRD_Obj_GetReadPacketData
HRD_Obj_GetReadPacketDataSize
HRD_Obj_IsInstanceMatchA
HRD_Obj_IsInstanceMatchW
HRD_Obj_IsReadingConnected
HRD_Obj_IsReadingPaused
HRD_Obj_IsReadingStarted
HRD_Obj_NotifyReadDataMessageBySend
HRD_Obj_OutputPacketData
HRD_Obj_PauseReading
HRD_Obj_RejectCodesSameAsPrevious
HRD_Obj_ResumeReading
HRD_Obj_SetBreakRetryOutputIfSuccess
HRD_Obj_SetDeviceIndex
HRD_Obj_SetDevicePathA
HRD_Obj_SetDevicePathW
HRD_Obj_SetFeature
HRD_Obj_SetInstanceA
HRD_Obj_SetInstanceW
HRD_Obj_SetMaxReadAtOnce
HRD_Obj_SetOutputLength
HRD_Obj_SetOutputReportID
HRD_Obj_SetOutputWithReportIDPrefixed
HRD_Obj_SetReadControl
HRD_Obj_SetReadable
HRD_Obj_SetWritable
HRD_Obj_StartReading
HRD_Obj_StopReading
HRD_OpenEnumDeviceInfo
HRD_StrToGUIDA
HRD_StrToGUIDW

Sections

.text
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.BGR
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.CZE
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.Dan
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.Dut
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.EST
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.Eng
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.Fin
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.Fre
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.GRC
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.Ger
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.HRV
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.HUN
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.Ita
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.Jap
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.Kor
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.LTU
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.LVA
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.NOR
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.POL
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.Por
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.ROU
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.RUS
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.SVK
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.SVN
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.SWE
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.Sch
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.Spa
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.TUR
LaunchManager_Dritek_7.0.4_W8x64/INFs/Setup.Tch
LaunchManager_Dritek_7.0.4_W8x64/IdCardHelp.dll
.dll windows:5 windows x86 arch:x86

bf71e3984f24cc8ce5dc1ca0c97d1239

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b0:0b:70:5d:64:9f:d0:c6:17:a5:65:1f:8f:b4:d7:fa:86:79:f4:e7
Signer

Actual PE Digest

b0:0b:70:5d:64:9f:d0:c6:17:a5:65:1f:8f:b4:d7:fa:86:79:f4:e7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdiplus

GdiplusStartup
GdipAlloc
GdipDisposeImage
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectI
GdipDrawString
GdipGetImageGraphicsContext
GdipSetStringFormatTrimming
GdipCreateSolidFill
GdipCloneBrush
GdipDeleteBrush
GdiplusShutdown
GdipFree
GdipCreateBitmapFromStream
GdipCloneImage
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipMeasureString
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetStringFormatLineAlign

comctl32

ord17

shlwapi

PathAppendW
PathUnExpandEnvStringsW
SHStrDupW

kernel32

HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
ExitProcess
GetVersionExW
FindResourceW
SizeofResource
LoadResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetCurrentProcess
lstrcpynW
lstrcmpW
lstrcpyW
GetModuleFileNameW
GetLastError
Sleep
HeapFree
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileType
TerminateProcess
GetCommandLineA
DecodePointer
GetCurrentThreadId
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
WriteFile
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
IsProcessorFeaturePresent
lstrlenW
RaiseException

user32

SendMessageTimeoutW
CreateWindowExW
IsWindow
UnregisterClassW
RegisterClassExW
SetCapture
PostMessageW
SetCursor
ShowWindow
EndPaint
UpdateLayeredWindow
BeginPaint
DefWindowProcW
GetWindowRect
SetWindowPos
LoadIconW
wsprintfW
KillTimer
SetClassLongW
PtInRect
GetClientRect
IsWindowVisible
SetTimer
UpdateWindow
InvalidateRgn
ScreenToClient
GetCursorPos
DestroyCursor
DestroyWindow
MonitorFromRect
GetSystemMetrics
LoadStringW
ReleaseDC
GetDC
SendMessageW
CopyRect
LoadCursorW
InvalidateRect
GetClassLongW

gdi32

DeleteDC
SelectObject
CreateCompatibleDC
SetRectRgn
CreateRectRgn
CombineRgn
DeleteObject

advapi32

RegQueryValueExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW

shell32

SHGetFolderPathW

ole32

CoTaskMemFree
PropVariantClear
OleInitialize
OleUninitialize
CreateStreamOnHGlobal

Exports

Exports

IdCardHelp_Deinit
IdCardHelp_GetWindow
IdCardHelp_Init
IdCardHelp_IsVisible
IdCardHelp_SetItemEnable
IdCardHelp_SetRelaunchInfo
IdCardHelp_SetUserGuideButtonStringId
IdCardHelp_SetWindowTitle
IdCardHelp_Show
IdCardHelp_ShowWindowTitle

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/InstScript/SetupMCE.w7
LaunchManager_Dritek_7.0.4_W8x64/InstScript/SetupMCE.w8
LaunchManager_Dritek_7.0.4_W8x64/InstScript/SetupMCE64.w7
LaunchManager_Dritek_7.0.4_W8x64/InstScript/SetupMCE64.w8
LaunchManager_Dritek_7.0.4_W8x64/LGKCUTL.DLL
.dll windows:5 windows x86 arch:x86

1308d6b1e03be2bbc760a45ec504ee86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17-10-2006 00:00

Not After

16-10-2009 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:55:f7:22:18:5d:89:f6:50:26:47:9e:9d:58:d7:51:1c:83:b1:f9
Signer

Actual PE Digest

48:55:f7:22:18:5d:89:f6:50:26:47:9e:9d:58:d7:51:1c:83:b1:f9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntW
CreateFileW
lstrcatW
lstrcpyW
GetPrivateProfileStringW
lstrlenW
Sleep
GetShortPathNameW
GetModuleFileNameW
lstrcpynW
GetVersionExW
GetCurrentThread
WideCharToMultiByte
HeapSize
LoadLibraryA
RtlUnwind
WaitForSingleObject
CloseHandle
GetCurrentThreadId
MultiByteToWideChar
DeviceIoControl
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount

user32

wsprintfW
KillTimer
SetTimer
MessageBoxW
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
GetKeyState
PostMessageW

advapi32

OpenServiceW
CloseServiceHandle
QueryServiceStatus
OpenSCManagerW

Exports

Exports

LgKCUtl_AddEraseFnKeyCodeToDriver
LgKCUtl_AddEraseKeyCodeToDriver
LgKCUtl_CheckIfWorkWell
LgKCUtl_CtrlKeyState
LgKCUtl_DeInit
LgKCUtl_DirverNotifyMessage
LgKCUtl_DoCommand
LgKCUtl_HookScanCode
LgKCUtl_IgnoreRejectKeyWhenCtrlKeysPressed
LgKCUtl_Init
LgKCUtl_InitA
LgKCUtl_InitW
LgKCUtl_InputByteValue
LgKCUtl_InputDWordValue
LgKCUtl_InputDWordValueEx
LgKCUtl_InputWordValue
LgKCUtl_LoadDriver
LgKCUtl_OutputByteValue
LgKCUtl_OutputDWordValue
LgKCUtl_OutputDWordValueEx
LgKCUtl_OutputWordValue
LgKCUtl_PrepareKeyCode
LgKCUtl_RegisterWindow
LgKCUtl_SendCommandAndGetResponse
LgKCUtl_SendCommandAndGetResponseA
LgKCUtl_SendCommandAndGetResponseW
LgKCUtl_SendECCommand
LgKCUtl_SendECCommandA
LgKCUtl_SendECCommandAndGetResponse
LgKCUtl_SendECCommandAndGetResponseA
LgKCUtl_SendECCommandAndGetResponseEx
LgKCUtl_SendECCommandAndGetResponseExA
LgKCUtl_SendECCommandAndGetResponseExW
LgKCUtl_SendECCommandAndGetResponseW
LgKCUtl_SendECCommandEx
LgKCUtl_SendECCommandExA
LgKCUtl_SendECCommandExW
LgKCUtl_SendECCommandW
LgKCUtl_SetCapsLockLEDState
LgKCUtl_SetNumLockLEDState
LgKCUtl_SetScrollLockLEDState
LgKCUtl_StartHookKeyCode
LgKCUtl_UnLoadDriver
LgKCUtl_UnRegisterWindow

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/LMLang.dll
.dll windows:5 windows x86 arch:x86

826c02e30a05521bb6ee55255924c5fa

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17-10-2006 00:00

Not After

16-10-2009 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f1:3f:24:99:71:7c:87:bf:8d:8c:fc:20:de:81:0e:8c:4c:71:e3:26
Signer

Actual PE Digest

f1:3f:24:99:71:7c:87:bf:8d:8c:fc:20:de:81:0e:8c:4c:71:e3:26

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
RaiseException
Sleep
ExitProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
GlobalFindAtomW
LoadLibraryA
GetVersionExA
GlobalFlags
GetModuleHandleA
WritePrivateProfileStringW
InterlockedIncrement
lstrlenA
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
GlobalAddAtomW
CloseHandle
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
lstrcmpW
GetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
FreeLibrary
InterlockedDecrement
GetModuleFileNameW
SetLastError
GetModuleHandleW
GetProcAddress
lstrlenW
WideCharToMultiByte
FindResourceW
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
GetTickCount
FindResourceExW

user32

DestroyMenu
ShowWindow
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DefWindowProcW
CallWindowProcW
CopyRect
GetMenu
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
ClientToScreen
GrayStringW
UnhookWindowsHookEx
GetSubMenu
GetMenuItemCount
DrawTextExW
DrawTextW
TabbedTextOutW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowTextW
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageW
CheckMenuItem
EnableMenuItem
ModifyMenuW
SendMessageW
GetParent
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
UnregisterClassW
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible

gdi32

DeleteDC
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
TextOutW
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
GetDeviceCaps
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
ExtTextOutW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shlwapi

PathFindFileNameW
PathFindExtensionW

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

Lang_GetTranslateStringA
Lang_GetTranslateStringW
Lang_Init

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/LManager.exe
.exe windows:5 windows x86 arch:x86

0e457ae532dff087db91fc22f24f8c49

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:57:18:07:f6:e4:ec:97:23:f7:11:db:7c:09:ee:d9:cf:c0:b1:de
Signer

Actual PE Digest

5f:57:18:07:f6:e4:ec:97:23:f7:11:db:7c:09:ee:d9:cf:c0:b1:de

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIcon
ord17
ImageList_GetImageCount

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

setupapi

CM_Get_DevNode_Status
SetupDiDestroyDeviceInfoList
CM_Get_DevNode_Registry_PropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW

shlwapi

PathAppendW
PathRemoveFileSpecW
PathFileExistsA
PathFileExistsW
PathUnquoteSpacesW
SHStrDupW
PathRemoveBackslashW
PathIsRelativeW
PathRenameExtensionW
AssocQueryStringW
PathAddBackslashW
PathQuoteSpacesW
StrTrimW
PathRemoveArgsW

powrprof

SetSuspendState

wlanapi

WlanSetInterface
WlanOpenHandle
WlanEnumInterfaces
WlanQueryInterface
WlanCloseHandle
WlanGetInterfaceCapability
WlanRegisterNotification
WlanFreeMemory

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

comfnutl

ComFnUtl_RotateApplication
ComFnUtl_ExecuteScreenSaver
ComFnUtl_GetSpecialFolderPathW
ComFnUtl_GetSystemDefaultMailFileNameW
ComFnUtl_ShowShutDownWindows
ComFnUtl_ShutDownWindows
ComFnUtl_OpenSpecialFolderW
ComFnUtl_CopyTextToClipboardW
ComFnUtl_IsScreenSaverRunning
ComFnUtl_CloseScreenSaver
ComFnUtl_GetFocusHandle
ComFnUtl_GetSpecialFolderW
ComFnUtl_GetAssociateExecuteFileFromExtNameW
ComFnUtl_BroadcastMessage
ComFnUtl_RetrieveRegisterWindowMessage
ComFnUtl_GetDefaultPlayerFileNameByExtNameW
ComFnUtl_GetSystemDefaultPlayerFileNameW
ComFnUtl_ExecuteCommandW
ComFnUtl_IssueWindowsAPPCommand
ComFnUtl_SetWindowToForeground
ComFnUtl_GetSystemDefaultBrowserFileNameW

cdromutl

CDRomUtl_DeInit
CDRomUtl_GetCDRomDrive
CDRomUtl_GetCDTitle
CDRomUtl_OpenCDRomDoor
CDRomUtl_DeviceChange
CDRomUtl_GetTotalCDRomDrives
CDRomUtl_Init
CDRomUtl_IsCDRomDoorOpen

mixerutl

MixerUtl_GetMaxMinValue
MixerUtl_SetValue
MixerUtl_GetValueItemCount
MixerUtl_UnHookDevice
MixerUtl_GetControlID
MixerUtl_GetLineNameExByCtrlIDW
MixerUtl_HookDevice
MixerUtl_GetValueExByCtrlID
MixerUtl_FreeValueItems
MixerUtl_GetValue

wnd2file

WND2FILE_GetWindowHandleFromExecutableFileW

powerutl

PowerUtl_Init
PowerUtl_GetAllPowerScheme
PowerUtl_GetPowerSchemeCounts
PowerUtl_GetActivePowerScheme
PowerUtl_DeInit
PowerUtl_SetActivePowerScheme

osdutl2

OSDUtl_HideAll
OSDUtl_ShowStringW
OSDUtl_HideAllOthers
OSDUtl_Show
OSDUtl_Hide
OSDUtl_SetPredefinedOSDStringW
OSDUtl_ShowVolume
OSDUtl_InitW
OSDUtl_SetProperties
OSDUtl_DeInit
OSDUtl_ShowConfigDialog

szupfutl

SzUPFUtl_GetProfileStringW
SzUPFUtl_GetProfileDWordW
SzUPFUtl_SetUserProfileInfoW
SzUPFUtl_SetProfileStringW
SzUPFUtl_GetProfileDWordExW
SzUPFUtl_EnumKeyNameW
SzUPFUtl_SetRegistryValueW
SzUPFUtl_QueryRegistryValueW
SzUPFUtl_CreateKeyW
SzUPFUtl_OpenKeyW
SzUPFUtl_GetProfileStringExW
SzUPFUtl_SetProfileBooleanW
SzUPFUtl_GetProfileBooleanW
SzUPFUtl_GetProfileBooleanExW

radiowndutl

RadioWndUtl_SetDeviceSystemStatus
RadioWndUtl_DeviceChangeNotify
RadioWndUtl_DeviceExisted
RadioWndUtl_Show
RadioWndUtl_GetWindow
RadioWndUtl_RegisterMessage
RadioWndUtl_Init
RadioWndUtl_SetStyle
RadioWndUtl_DeInit

kernel32

LoadLibraryA
InitializeCriticalSection
EncodePointer
DecodePointer
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetStartupInfoW
UnhandledExceptionFilter
GetConsoleCP
GetConsoleMode
SetStdHandle
GetFileType
ExitProcess
RtlUnwind
GetCPInfo
LCMapStringW
IsProcessorFeaturePresent
HeapCreate
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetLocaleInfoW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetTimeZoneInformation
WriteConsoleW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateProcessW
CloseHandle
WaitForSingleObject
lstrlenW
ExpandEnvironmentStringsW
lstrcpyW
lstrcatW
lstrcpynW
GetSystemDefaultLangID
lstrcmpiW
CreateFileA
GetVersionExW
GetVersionExA
LoadLibraryW
GetProcAddress
FreeLibrary
GetLastError
lstrcmpW
GetTempPathW
DeleteFileW
GetPrivateProfileIntW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetVolumeInformationW
WideCharToMultiByte
FindFirstFileW
WriteFile
FindNextFileW
FindClose
CreateFileW
GetModuleFileNameW
GetWindowsDirectoryW
GetSystemDirectoryW
GetSystemInfo
SetSystemPowerState
GetCurrentProcess
Sleep
GetSystemWindowsDirectoryW
GetFileAttributesW
GetCurrentThreadId
GetTickCount
GetModuleHandleW
CreateMutexW
CreateEventW
SetCurrentDirectoryW
LocalAlloc
LocalFree
OpenProcess
InterlockedCompareExchange
InterlockedExchange
CreateThread
SetEvent
FormatMessageW
WTSGetActiveConsoleSessionId
GetTempFileNameW
lstrlenA
TerminateProcess
InterlockedIncrement
InterlockedDecrement
GetUserGeoID
ProcessIdToSessionId
GetCurrentProcessId
GetUserDefaultUILanguage
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
CreateDirectoryW
CopyFileW
GetFileSizeEx
GetSystemTime
OpenEventW
ResetEvent
DeleteFileA
ReleaseMutex
SetLastError
SetFilePointer
OutputDebugStringA
FormatMessageA
GetModuleHandleA
GetCommandLineW
GetStdHandle
HeapSetInformation
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
ReadFile
SetEnvironmentVariableW
GetEnvironmentVariableW
GetFileAttributesExW
RemoveDirectoryW
GetCurrentDirectoryW
RaiseException
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GlobalMemoryStatusEx
SetEndOfFile
FlushFileBuffers
QueryPerformanceCounter
MultiByteToWideChar
CompareStringW
SetEnvironmentVariableA

user32

wsprintfW
FindWindowW
PostThreadMessageW
WaitForInputIdle
MessageBoxW
SendMessageTimeoutW
DrawTextW
CopyRect
DrawIcon
FillRect
GetSysColor
DestroyWindow
CreateWindowExW
RegisterClassW
LoadCursorW
DefWindowProcW
KillTimer
SetForegroundWindow
BringWindowToTop
mouse_event
SetCursorPos
GetCursorPos
EndPaint
BeginPaint
GetClientRect
IsIconic
GetDesktopWindow
GetSystemMetrics
GetWindowThreadProcessId
GetForegroundWindow
SetWindowPos
MapWindowPoints
GetSubMenu
GetMenu
RegisterWindowMessageW
SetClassLongW
LoadImageW
PostQuitMessage
LoadIconW
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW
SendMessageW
GetWindow
GetClassNameW
WindowFromPoint
SystemParametersInfoW
GetParent
GetKeyboardLayout
GetTopWindow
keybd_event
EnumWindows
GetWindowTextW
IsWindowEnabled
GetFocus
AttachThreadInput
MapVirtualKeyW
GetMenuState
GetSystemMenu
CreateDialogParamW
SendDlgItemMessageW
GetKeyState
LoadStringW
GetWindowLongW
GetWindowRect
DrawIconEx
DrawFocusRect
SetRect
DestroyIcon
SetWindowTextW
SetTimer
ShowWindow
GetDlgItem
EndDialog
DestroyMenu
IsWindowVisible
PostMessageW
IsWindow
TrackPopupMenu
ReleaseDC
AppendMenuW
CreatePopupMenu
GetDC

gdi32

DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetTextExtentPoint32W
SetBkMode
SetTextColor
DeleteObject

advapi32

RegQueryInfoKeyW
RegEnumKeyExW
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyW
GetUserNameW
DuplicateTokenEx
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
GetTokenInformation
GetSidSubAuthority
GetSidSubAuthorityCount

shell32

SHFileOperationW
CommandLineToArgvW
ord43
SHGetFileInfoW
ExtractAssociatedIconW
ExtractIconW
FindExecutableW
ShellExecuteExW
ShellExecuteW
SHGetFolderPathW

ole32

PropVariantClear
CoInitializeSecurity
CoInitializeEx
CoTaskMemFree
CoCreateInstance
CoUninitialize

oleaut32

VariantClear
SysAllocString
SysFreeString
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetVartype

winmm

timeGetTime

Sections

.text
Size: 532KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 389KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/LManager.exe.manifest
.xml
LaunchManager_Dritek_7.0.4_W8x64/LMconfig.exe
.exe windows:5 windows x86 arch:x86

a8a7a1876e9c61f302d4bd95f33d1d75

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

34:39:0f:1f:df:b7:0b:53:90:3d:b0:0f:6a:b2:2f:8c:17:08:b2:ee
Signer

Actual PE Digest

34:39:0f:1f:df:b7:0b:53:90:3d:b0:0f:6a:b2:2f:8c:17:08:b2:ee

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

WriteConsoleW
GetLocaleInfoA
GetOEMCP
IsValidLocale
GetDriveTypeW
SetEnvironmentVariableA
GetACP
GetCPInfo
GetStringTypeW
IsProcessorFeaturePresent
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
LoadLibraryA
HeapSize
HeapQueryInformation
ExitThread
RtlUnwind
HeapAlloc
ExitProcess
HeapReAlloc
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
HeapFree
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
FindResourceExW
VirtualProtect
SearchPathW
SetErrorMode
GetFileSizeEx
GetFileAttributesExW
GetFileTime
GetFileAttributesW
GetUserDefaultLCID
GetTempPathW
GetTempFileNameW
GetNumberFormatW
GetWindowsDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
ReadFile
lstrcmpiW
GetSystemDirectoryW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
GetTimeZoneInformation
LocalAlloc
InterlockedIncrement
LCMapStringW
lstrlenA
GlobalGetAtomNameW
GlobalFlags
WritePrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
GetProfileIntW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileW
FindNextFileW
FindClose
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
CopyFileW
GlobalSize
MulDiv
WideCharToMultiByte
FormatMessageW
RaiseException
GetCurrentThread
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedExchange
OutputDebugStringA
WriteFile
CreateFileW
SetFilePointer
CreateProcessW
DeleteFileW
ReleaseMutex
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetCommandLineW
LocalFree
CloseHandle
CreateMutexW
Sleep
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
CreateThread
ExpandEnvironmentStringsW
WaitForSingleObject
MultiByteToWideChar
GetVersionExW
GetModuleFileNameW
GetPrivateProfileStringW
lstrcmpW
lstrcpynW
FreeLibrary
LoadLibraryW
GetCurrentProcess
GetProcAddress
GetModuleHandleW
lstrlenW
lstrcpyW
FindResourceW
LoadResource
LockResource
SizeofResource
GetThreadLocale
IsValidCodePage
EnumSystemLocalesA

user32

UnionRect
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
DrawEdge
DrawStateW
GetSystemMenu
SetClassLongW
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
DrawIconEx
GetIconInfo
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
GetAsyncKeyState
GetMenuDefaultItem
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
PostThreadMessageW
DeleteMenu
WaitMessage
WindowFromPoint
SetCapture
UnpackDDElParam
ReuseDDElParam
LoadImageW
ReleaseCapture
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
OffsetRect
BringWindowToTop
TranslateAcceleratorW
SetLayeredWindowAttributes
EnumDisplayMonitors
CopyImage
DestroyMenu
GetMenuItemInfoW
UnregisterClassW
LoadCursorW
GetSysColorBrush
RealChildWindowFromPoint
ShowOwnedPopups
SetCursor
TranslateMessage
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
PostQuitMessage
IsClipboardFormatAvailable
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
InflateRect
MapVirtualKeyW
GetKeyNameTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
LoadMenuW
RegisterWindowMessageW
OpenClipboard
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
RedrawWindow
ValidateRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcW
CallWindowProcW
GetMenu
GetFocus
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SendDlgItemMessageW
CheckRadioButton
CheckDlgButton
UnhookWindowsHookEx
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
GetWindow
SetFocus
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
SetClipboardData
CloseClipboard
EmptyClipboard
IsCharLowerW
MapVirtualKeyExW
UpdateLayeredWindow
MonitorFromPoint
IsMenu
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
GetWindowRgn
DestroyCursor
DestroyWindow
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
GetClassNameW
SystemParametersInfoW
GetKeyState
RemovePropW
SubtractRect
GetDoubleClickTime
CharUpperBuffW
CopyIcon
GetUpdateRect
FrameRect
SetMenuDefaultItem
CreateMenu
SendDlgItemMessageA
MessageBoxW
CharUpperW
FindWindowW
GetClipboardFormatNameW
EnumWindows
GetPropW
DestroyIcon
IntersectRect
ReleaseDC
GetSysColor
GetDC
UpdateWindow
SetRectEmpty
SetWindowPos
PtInRect
GetCursorPos
IsWindowVisible
CopyRect
DrawIcon
wsprintfW
GetSystemMetrics
GetClientRect
SendMessageW
PostMessageW
SetWindowLongW
GetWindowLongW
SetPropW
LoadIconW
EnableWindow
SetTimer
InvalidateRect
IsIconic
KillTimer
GetWindowRect
IsWindow
LoadStringW
GetMessageW

gdi32

SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
OffsetRgn
GetTextCharsetInfo
CreateDIBitmap
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceW
PtVisible
GetPixel
EnumFontFamiliesW
EnumFontFamiliesExW
CreateCompatibleBitmap
BitBlt
GetWindowExtEx
GetViewportExtEx
GetTextMetricsW
GetTextExtentPoint32W
CreateHatchBrush
CreateSolidBrush
CreatePen
RectVisible
GetObjectType
SelectPalette
GetStockObject
CreateCompatibleDC
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
LPtoDP
DeleteObject
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
PatBlt
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
CreateDCW
CopyMetaFileW
GetDeviceCaps
CreateFontIndirectW
GetObjectW
TextOutW

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetOpenFileNameW
GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegOpenKeyExW
GetUserNameW
RegCreateKeyExW
RegEnumKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteKeyW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegCloseKey
RegEnumValueW

shell32

SHBrowseForFolderW
SHGetFileInfoW
SHGetPathFromIDListW
ord25
ord152
CommandLineToArgvW
DragFinish
DragQueryFileW
SHGetDesktopFolder
SHAppBarMessage
SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderLocation

comctl32

ImageList_GetIconSize

shlwapi

PathQuoteSpacesW
PathFileExistsW
PathAppendW
SHStrDupW
PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

ole32

CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoGetClassObject
CoTaskMemFree
CreateStreamOnHGlobal
CoUninitialize
CoCreateInstance
CoInitialize
PropVariantClear
DoDragDrop
OleLockRunning
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
CreateILockBytesOnHGlobal

oleaut32

SysFreeString
OleCreateFontIndirect
VarBstrFromDate
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

oledlg

OleUIBusyW

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdiplusStartup
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipDrawImageRectI
GdipGetImageHeight
GdipGetImageWidth
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipDrawImageI

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 298KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LaunchManager_Dritek_7.0.4_W8x64/LMconfig.exe.manifest
.xml
LaunchManager_Dritek_7.0.4_W8x64/LMconfigV2.exe
.exe windows:5 windows x86 arch:x86

6bd913d6e5af028ed87f7265c9664f97

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b7:9d:e7:0c:45:15:95:91:a2:f1:f6:99:5c:2b:e0:56:e6:81:e0:1d
Signer

Actual PE Digest

b7:9d:e7:0c:45:15:95:91:a2:f1:f6:99:5c:2b:e0:56:e6:81:e0:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_BeginDrag
ImageList_Add
ImageList_Destroy
ImageList_Remove
ImageList_DragMove
ImageList_DragEnter
ord17
ImageList_Create
ImageList_EndDrag
ImageList_DragLeave

gdiplus

GdipDrawImageRectRect
GdipDrawImage
GdipGetImageWidth
GdipDeleteGraphics
GdipBitmapGetPixel
GdipCloneBitmapAreaI
GdipGetImageGraphicsContext
GdipDisposeImage
GdipAlloc
GdipFree
GdiplusShutdown
GdiplusStartup
GdipFillRectangleI
GdipGetDC
GdipBitmapSetPixel
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipGetImageVerticalResolution
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipCloneImage
GdipReleaseDC
GdipResetClip
GdipDrawImagePointRect
GdipDrawImageRect
GdipDrawString
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCreateSolidFill
GdipCloneBrush
GdipDeleteBrush
GdipCreateHBITMAPFromBitmap
GdipDeleteFont
GdipGetLogFontW
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipSetClipRectI
GdipDrawImagePointRectI
GdipDrawLine
GdipGetDpiY
GdipDeletePen
GdipCreatePen1
GdipDrawImageI
GdipDeleteRegion
GdipCreateRegionHrgn
GdipSetClipRegion
GdipDrawImageRectI
GdipGraphicsClear
GdipCreateFromHDC
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetImageThumbnail
GdipGetImagePixelFormat
GdipCreateBitmapFromHICON

shlwapi

PathRemoveBackslashW
PathRemoveFileSpecW
PathUnquoteSpacesW
PathRemoveExtensionW
PathFindFileNameW
SHStrDupW
PathAppendW
ord219
PathFileExistsW

uxtheme

DrawThemeBackground
OpenThemeData
IsAppThemed
CloseThemeData

metroapp

?GetAppIconProperties@MetroAppImpl@app@@QBE_NPA_WKPAK@Z
?GetPackageID@MetroAppImpl@app@@QBE_NPAUMetroAppPackageID@2@@Z
?GetAppID@MetroAppImpl@app@@QBE_NPA_WK@Z
?GetHBITMAP@MetroAppImpl@app@@QBEPAUHBITMAP__@@XZ
?GetFilePath@MetroAppImpl@app@@QBE_NPA_WK@Z
?SetName@MetroAppImpl@app@@QAEXPB_W@Z
?GetName@MetroAppImpl@app@@QBE_NPA_WK@Z
?CreateMetroAppImplFromPackageID@app@@YAPAVMetroAppImpl@1@PBUMetroAppPackageID@1@@Z
?CreateMetroAppImpl@app@@YAPAVMetroAppImpl@1@PB_W@Z
?IsInstalled@MetroAppImpl@app@@QBE_NXZ

comfnutl

ComFnUtl_ResolveShortcutW

kernel32

HeapSetInformation
HeapAlloc
HeapFree
InitializeCriticalSection
DecodePointer
EncodePointer
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetTimeZoneInformation
WriteConsoleW
GetStartupInfoW
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
UnhandledExceptionFilter
GetStdHandle
TerminateProcess
GetConsoleCP
GetConsoleMode
GetProcessHeap
ExitProcess
HeapReAlloc
RtlUnwind
GetCPInfo
LCMapStringW
IsProcessorFeaturePresent
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
SetStdHandle
TlsFree
CompareStringW
SetUnhandledExceptionFilter
GetProcAddress
LoadLibraryW
FreeLibrary
GetCurrentThreadId
CreateMutexW
GetLastError
CloseHandle
CreateDirectoryW
CopyFileW
CreateFileW
GetFileSizeEx
GetCurrentProcessId
GetSystemTime
ExpandEnvironmentStringsW
GetModuleHandleW
GetCurrentProcess
GetVersionExW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcpynW
lstrlenW
lstrcmpW
lstrcpyW
GetModuleFileNameW
MulDiv
GlobalAlloc
GlobalFree
InterlockedIncrement
InterlockedDecrement
FindResourceW
SizeofResource
LoadResource
FreeResource
GetTickCount
WaitForSingleObject
ReleaseMutex
SetLastError
DeleteFileW
CreateProcessW
SetFilePointer
WriteFile
OutputDebugStringA
FormatMessageA
GetModuleHandleA
LocalFree
GetCommandLineW
GetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
GetTempPathW
ReadFile
GetCurrentDirectoryW
InterlockedCompareExchange
InterlockedExchange
SetEnvironmentVariableW
GetEnvironmentVariableW
FormatMessageW
GetUserDefaultLangID
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetEndOfFile
FlushFileBuffers
Sleep
RaiseException
GetSystemDirectoryW
GetWindowsDirectoryW
MultiByteToWideChar
WideCharToMultiByte
SetEnvironmentVariableA

user32

GetDlgCtrlID
CheckRadioButton
wsprintfW
CallWindowProcW
DefWindowProcW
GetParent
GetFocus
GetCaretPos
DestroyCursor
ReleaseCapture
SetCursor
LoadCursorW
MapWindowPoints
GetDesktopWindow
SetCapture
GetCursorPos
PtInRect
GetScrollBarInfo
CopyRect
SetRect
OffsetRect
ShowWindow
DialogBoxParamW
RegisterClipboardFormatW
BringWindowToTop
MonitorFromWindow
GetMonitorInfoW
EndPaint
LoadImageW
GetIconInfo
MessageBoxW
GetCaretBlinkTime
SetTimer
EnableWindow
SetWindowPos
SetClassLongW
LoadIconW
SetWindowTextW
SetWindowLongW
GetWindowLongW
SendMessageW
ScreenToClient
GetWindowRect
IsWindowVisible
UpdateLayeredWindow
GetWindow
DestroyIcon
BeginPaint
GetClientRect
SetFocus
EndDialog
GetWindowTextW
IsWindowEnabled
KillTimer
UpdateWindow
InvalidateRect
GetDlgItem
PostMessageW
IsRectEmpty
ReleaseDC
GetDC
UnhookWindowsHookEx
SetWindowsHookExW
LoadStringW
IsWindow
CallNextHookEx

gdi32

DeleteDC
GetPixel
CombineRgn
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetRectRgn
PtInRegion
CreatePatternBrush
CreateFontIndirectW
SetBkMode
SetTextColor
GetObjectW
GetDeviceCaps
GetRgnBox
CreateRectRgn

comdlg32

GetOpenFileNameW

advapi32

RegQueryInfoKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumKeyExW
RegLoadMUIStringW

shell32

CommandLineToArgvW
SHGetKnownFolderPath
SHCreateShellItemArrayFromDataObject
SHGetFileInfoW
SHGetFolderPathW
ord727

ole32

CreateStreamOnHGlobal
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
RevokeDragDrop
RegisterDragDrop
CoCreateInstance
PropVariantClear
OleUninitialize
OleInitialize
CoTaskMemFree

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

winmm

timeGetTime

Sections

.text
Size: 387KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 556KB - Virtual size: 555KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/LMutilps.exe
.exe windows:5 windows x86 arch:x86

d653a6ab280578faa3dbbbab42006a5b

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

40:1d:ee:24:aa:49:6f:98:45:e5:cb:a7:bb:49:34:ba:72:bb:7f:6e
Signer

Actual PE Digest

40:1d:ee:24:aa:49:6f:98:45:e5:cb:a7:bb:49:34:ba:72:bb:7f:6e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSQueryUserToken
WTSFreeMemory
WTSQuerySessionInformationW
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification

kernel32

GetSystemTime
ExpandEnvironmentStringsW
LocalFree
WaitForSingleObject
SetEvent
CreateEventW
CreateThread
WTSGetActiveConsoleSessionId
InterlockedIncrement
GetCurrentThreadId
GetModuleFileNameW
lstrcpynW
lstrlenW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
lstrcpyW
lstrcatW
TerminateProcess
WaitForMultipleObjects
ResetEvent
TerminateThread
OpenEventW
ReleaseMutex
SetLastError
DeleteFileW
CreateProcessW
SetFilePointer
WriteFile
OutputDebugStringA
FormatMessageA
GetModuleHandleA
InterlockedCompareExchange
InterlockedExchange
GetStdHandle
HeapSetInformation
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
ReadFile
GetCommandLineW
SetEnvironmentVariableW
GetEnvironmentVariableW
GetFileAttributesW
GetFileSizeEx
GetTempPathW
GetCurrentDirectoryW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
GetSystemDirectoryW
GetWindowsDirectoryW
RaiseException
QueryPerformanceCounter
FlushFileBuffers
MultiByteToWideChar
WideCharToMultiByte
TlsAlloc
IsProcessorFeaturePresent
HeapDestroy
HeapCreate
GetLocaleInfoW
LCMapStringW
GetCPInfo
RtlUnwind
GetProcessHeap
ExitProcess
HeapReAlloc
GetFileType
SetStdHandle
GetConsoleMode
GetConsoleCP
UnhandledExceptionFilter
GetStartupInfoW
HeapAlloc
HeapFree
InitializeCriticalSection
DecodePointer
EncodePointer
TlsSetValue
TlsFree
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetTimeZoneInformation
WriteConsoleW
GetUserDefaultLCID
GetLocaleInfoA
CompareStringW
CreateFileW
CopyFileW
CreateDirectoryW
InterlockedDecrement
LoadLibraryW
FreeLibrary
CreateMutexW
GetTickCount
GetVersionExW
AssignProcessToJobObject
GetCurrentProcess
SetInformationJobObject
CreateJobObjectW
Sleep
GetCurrentProcessId
ProcessIdToSessionId
GetProcAddress
GetLastError
CloseHandle
GetModuleHandleW
SetEnvironmentVariableA
lstrlenA
IsValidLocale
TlsGetValue
EnumSystemLocalesA

user32

MessageBoxW
wsprintfW
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
IsWindowVisible
GetShellWindow
SwitchToThisWindow
BringWindowToTop
GetLastActivePopup
IsWindow
PostQuitMessage
KillTimer
SetTimer
RegisterClassExW
LoadCursorW
LoadIconW
PostMessageW
FindWindowW
keybd_event
TranslateMessage
DispatchMessageW
GetMessageW
DestroyWindow
DefWindowProcW
GetWindowLongW
SetWindowLongW
CreateWindowExW
RegisterClassW

advapi32

GetSidSubAuthorityCount
GetSidSubAuthority
CreateProcessAsUserW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetUserNameW
LookupAccountSidW
GetTokenInformation
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
DuplicateTokenEx
OpenProcessToken
FreeSid
CheckTokenMembership
AllocateAndInitializeSid

shell32

SHGetFolderPathW
CommandLineToArgvW

ole32

CoInitializeSecurity
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

SysAllocStringLen
VariantInit
SysAllocString
SysFreeString
VariantClear

shlwapi

PathAppendW
PathFileExistsW
PathRemoveBackslashW
PathRemoveFileSpecW

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

winmm

timeGetTime
timeSetEvent

Sections

.text
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/LMutilps.x64
.exe windows:5 windows x64 arch:x64

9ba7c57fdd4c0539f098411f8c8c98c4

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4a:b3:f2:f2:c3:fd:e3:60:c5:27:32:36:78:13:d1:d3:2b:55:4a:3d
Signer

Actual PE Digest

4a:b3:f2:f2:c3:fd:e3:60:c5:27:32:36:78:13:d1:d3:2b:55:4a:3d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

wtsapi32

WTSQueryUserToken
WTSFreeMemory
WTSQuerySessionInformationW
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification

kernel32

ExpandEnvironmentStringsW
LocalFree
WaitForSingleObject
SetEvent
CreateEventW
CreateThread
WTSGetActiveConsoleSessionId
GetCurrentThreadId
GetModuleFileNameW
lstrcpynW
lstrlenW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
lstrcpyW
lstrcatW
TerminateProcess
WaitForMultipleObjects
ResetEvent
TerminateThread
OpenEventW
ReleaseMutex
SetLastError
DeleteFileW
CreateProcessW
SetFilePointer
WriteFile
OutputDebugStringA
FormatMessageA
GetModuleHandleA
GetStdHandle
HeapSetInformation
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
ReadFile
GetCommandLineW
SetEnvironmentVariableW
GetEnvironmentVariableW
GetFileAttributesW
GetSystemTime
GetCurrentDirectoryW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
GetSystemDirectoryW
GetWindowsDirectoryW
RaiseException
QueryPerformanceCounter
FlushFileBuffers
MultiByteToWideChar
WideCharToMultiByte
FlsGetValue
HeapDestroy
HeapCreate
GetVersion
GetLocaleInfoW
LCMapStringW
GetCPInfo
GetProcessHeap
RtlUnwindEx
ExitProcess
HeapReAlloc
GetFileType
SetStdHandle
GetConsoleMode
GetConsoleCP
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetStartupInfoW
HeapAlloc
HeapFree
RtlPcToFileHeader
InitializeCriticalSection
DecodePointer
EncodePointer
FlsFree
FlsAlloc
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetTimeZoneInformation
WriteConsoleW
GetFileSizeEx
CreateFileW
CopyFileW
CreateDirectoryW
LoadLibraryW
FreeLibrary
CreateMutexW
GetTickCount
GetVersionExW
AssignProcessToJobObject
GetCurrentProcess
SetInformationJobObject
CreateJobObjectW
Sleep
GetCurrentProcessId
ProcessIdToSessionId
GetProcAddress
GetLastError
CloseHandle
GetModuleHandleW
SetEnvironmentVariableA
lstrlenA
IsValidLocale
GetTempPathW
FlsSetValue
GetUserDefaultLCID
GetLocaleInfoA
CompareStringW
EnumSystemLocalesA

user32

MessageBoxW
wsprintfW
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
IsWindowVisible
GetShellWindow
SwitchToThisWindow
BringWindowToTop
GetLastActivePopup
IsWindow
PostQuitMessage
KillTimer
SetTimer
RegisterClassExW
LoadCursorW
LoadIconW
PostMessageW
FindWindowW
keybd_event
TranslateMessage
DispatchMessageW
GetMessageW
DefWindowProcW
GetWindowLongPtrW
SetWindowLongPtrW
CreateWindowExW
RegisterClassW
DestroyWindow

advapi32

GetSidSubAuthorityCount
GetSidSubAuthority
CreateProcessAsUserW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetUserNameW
LookupAccountSidW
GetTokenInformation
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
DuplicateTokenEx
OpenProcessToken
FreeSid
CheckTokenMembership
AllocateAndInitializeSid

shell32

SHGetFolderPathW
CommandLineToArgvW

ole32

CoInitializeSecurity
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

SysAllocString
SysFreeString
VariantClear
VariantInit
SysAllocStringLen

shlwapi

PathFileExistsW
PathRemoveFileSpecW
PathAppendW
PathRemoveBackslashW

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

winmm

timeGetTime
timeSetEvent

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/LMworker.exe
.exe windows:5 windows x86 arch:x86

f5086b0b3370da7ac88b84ac4a8afb5f

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c4:c9:1c:61:6d:68:94:e4:07:ed:79:fb:d2:b6:5d:2d:ca:52:71:f2
Signer

Actual PE Digest

c4:c9:1c:61:6d:68:94:e4:07:ed:79:fb:d2:b6:5d:2d:ca:52:71:f2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalFree
GetTickCount
WaitForSingleObject
ReleaseMutex
SetLastError
DeleteFileW
CreateProcessW
SetFilePointer
WriteFile
OutputDebugStringA
FormatMessageA
GetModuleHandleA
SetEnvironmentVariableW
GetEnvironmentVariableW
Sleep
RaiseException
IsDebuggerPresent
GetCommandLineW
GetSystemDirectoryW
GetWindowsDirectoryW
GetFileAttributesW
GetTempPathW
GetCurrentDirectoryW
WTSGetActiveConsoleSessionId
ReadFile
VirtualFree
VirtualAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
FlushFileBuffers
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
CompareStringA
CreateFileA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
SetEnvironmentVariableA
WriteConsoleA
GetTimeZoneInformation
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
GetModuleFileNameA
GetStdHandle
GetVersionExW
GetCurrentProcess
GetSystemTime
GetCurrentProcessId
GetFileSizeEx
CreateFileW
CopyFileW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
CloseHandle
GetLastError
CreateMutexW
GetCurrentThreadId
GetProcAddress
GetModuleHandleW
InterlockedExchange
InterlockedCompareExchange
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
HeapReAlloc
ExitProcess
GetConsoleMode
GetConsoleCP
GetStartupInfoW
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement

user32

LoadCursorW
TranslateMessage
BringWindowToTop
LoadIconW
CreateWindowExW
RegisterClassExW
DispatchMessageW
SwitchToThisWindow
GetShellWindow
IsWindowVisible
GetMessageW
SetTimer
KillTimer
GetLastActivePopup
MessageBoxW
RegisterWindowMessageW
keybd_event
DefWindowProcW
PostQuitMessage
PostMessageW
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow

advapi32

GetUserNameW

shell32

CommandLineToArgvW
SHGetFolderPathW

winmm

timeGetTime

Sections

.text
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/LmSmbFile.dll
.dll windows:5 windows x86 arch:x86

373761ccec28511352d07d2d56aa17db

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:f5:da:49:41:fd:0e:cf:ad:a5:61:5d:b1:48:ce:10:a7:26:f9:33
Signer

Actual PE Digest

49:f5:da:49:41:fd:0e:cf:ad:a5:61:5d:b1:48:ce:10:a7:26:f9:33

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
GetFileSize
CloseHandle
ReadFile
WriteFile
MultiByteToWideChar
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

Exports

Exports

ASF_OpenSMBiosToBinaryFormatFileA
ASF_OpenSMBiosToBinaryFormatFileW
ASF_SaveSMBiosToBinaryFormatFileA
ASF_SaveSMBiosToBinaryFormatFileW
ASF_SaveSMBiosToTextFormatFileA
ASF_SaveSMBiosToTextFormatFileW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/LmSmbKel.dll
.dll windows:5 windows x86 arch:x86

c18df02319f110b9baca068e44db0ae1

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:5c:12:65:d3:4f:ee:16:a6:2d:4d:fe:a2:b8:d1:1e:da:d1:10:41
Signer

Actual PE Digest

f9:5c:12:65:d3:4f:ee:16:a6:2d:4d:fe:a2:b8:d1:1e:da:d1:10:41

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
GetFileAttributesW
WideCharToMultiByte
GetModuleFileNameW
lstrlenW
LoadLibraryW
GetProcAddress
FreeLibrary
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

user32

wsprintfW

Exports

Exports

ASK_BiosFunctionParameterStrA
ASK_BiosFunctionParameterStrW
ASK_BiosFunctionStrA
ASK_BiosFunctionStrW
ASK_ButtonFunction2Acer
ASK_ButtonFunctionFieldIDStrA
ASK_ButtonFunctionFieldIDStrW
ASK_ButtonFunctionFieldStrA
ASK_ButtonFunctionFieldStrW
ASK_ButtonFunctionGroupStrA
ASK_ButtonFunctionGroupStrW
ASK_ButtonFunctionIDStrA
ASK_ButtonFunctionIDStrW
ASK_ButtonFunctionStrA
ASK_ButtonFunctionStrW
ASK_ButtonKeyType2Acer
ASK_ButtonKeyTypeStrA
ASK_ButtonKeyTypeStrW
ASK_ButtonNumber2Acer
ASK_CombinedFunction2Array
ASK_CombinedFunctionFieldIDStrA
ASK_CombinedFunctionFieldIDStrArrayA
ASK_CombinedFunctionFieldIDStrArrayW
ASK_CombinedFunctionFieldIDStrW
ASK_Deinitial
ASK_DeviceType2Acer
ASK_DeviceTypeStrA
ASK_DeviceTypeStrW
ASK_GetAcerSMBiosRevision
ASK_GetApplicationFunctionSupported
ASK_GetBaseboardProductNameA
ASK_GetBaseboardProductNameW
ASK_GetBiosFunctionInfo
ASK_GetButtonFunctionInfo
ASK_GetCommunicationFunctionSupported
ASK_GetDisplayFunctionSupported
ASK_GetFirstAcerSMBiosSupportedRevision
ASK_GetFirstSMBiosSupportedVersion
ASK_GetHotkeyFunctionRawBlock
ASK_GetLastAcerSMBiosSupportedRevision
ASK_GetLastSMBiosSupportedVersion
ASK_GetManufactureNameA
ASK_GetManufactureNameW
ASK_GetMediaFunctionSupported
ASK_GetOEMStringA
ASK_GetOEMStringW
ASK_GetOtherFunctionSupported
ASK_GetPlatformConfigInfo
ASK_GetPlatformConfigInfoRawBlock
ASK_GetProductNameA
ASK_GetProductNameW
ASK_GetRawBlockFileNameA
ASK_GetRawBlockFileNameW
ASK_GetRevisionSupportRawBlock
ASK_GetSMBiosBaseBoardInformation
ASK_GetSMBiosBiosInformation
ASK_GetSMBiosOEMStrings
ASK_GetSMBiosSystemConfigurationOptions
ASK_GetSMBiosSystemEnclosureOrClassis
ASK_GetSMBiosSystemInformation
ASK_GetSMBiosVersion
ASK_GetSystemConfigurationOptionA
ASK_GetSystemConfigurationOptionW
ASK_GetSystemDeviceInfo
ASK_GetSystemDeviceRawBlock
ASK_Initial
ASK_IsInitialed
ASK_IsInitialedEx
ASK_PlatformBitmapStrA
ASK_PlatformBitmapStrW
ASK_PlatformSubtypeStrA
ASK_PlatformSubtypeStrW
ASK_RevisionEQ
ASK_RevisionGE
ASK_RevisionGT
ASK_RevisionLE
ASK_RevisionLT
ASK_SaveRawBlockToFileA
ASK_SaveRawBlockToFileW
ASK_SetRawBlockFromFileA
ASK_SetRawBlockFromFileW

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/LmSmbKel16.dll
.dll windows:5 windows x86 arch:x86

c18df02319f110b9baca068e44db0ae1

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

47:15:12:ee:a2:a6:4f:38:58:a4:56:f6:53:8e:af:f0:b1:ca:83:4e
Signer

Actual PE Digest

47:15:12:ee:a2:a6:4f:38:58:a4:56:f6:53:8e:af:f0:b1:ca:83:4e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
GetFileAttributesW
WideCharToMultiByte
GetModuleFileNameW
lstrlenW
LoadLibraryW
GetProcAddress
FreeLibrary
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

user32

wsprintfW

Exports

Exports

ASK_ButtonFunction2Acer
ASK_ButtonFunctionFieldIDStrA
ASK_ButtonFunctionFieldIDStrW
ASK_ButtonFunctionFieldStrA
ASK_ButtonFunctionFieldStrW
ASK_ButtonFunctionGroupStrA
ASK_ButtonFunctionGroupStrW
ASK_ButtonFunctionIDStrA
ASK_ButtonFunctionIDStrW
ASK_ButtonFunctionStrA
ASK_ButtonFunctionStrW
ASK_ButtonKeyType2Acer
ASK_ButtonKeyTypeStrA
ASK_ButtonKeyTypeStrW
ASK_ButtonNumber2Acer
ASK_CombinedFunction2Array
ASK_CombinedFunctionFieldIDStrA
ASK_CombinedFunctionFieldIDStrArrayA
ASK_CombinedFunctionFieldIDStrArrayW
ASK_CombinedFunctionFieldIDStrW
ASK_Deinitial
ASK_DeviceType2Acer
ASK_GetAcerSMBiosRevision
ASK_GetApplicationFunctionSupported
ASK_GetBaseboardProductNameA
ASK_GetBaseboardProductNameW
ASK_GetButtonFunctionInfo
ASK_GetCommunicationFunctionSupported
ASK_GetDisplayFunctionSupported
ASK_GetFirstAcerSMBiosSupportedRevision
ASK_GetFirstSMBiosSupportedVersion
ASK_GetHotkeyFunctionRawBlock
ASK_GetLastAcerSMBiosSupportedRevision
ASK_GetLastSMBiosSupportedVersion
ASK_GetManufactureNameA
ASK_GetManufactureNameW
ASK_GetMediaFunctionSupported
ASK_GetOEMStringA
ASK_GetOEMStringW
ASK_GetOtherFunctionSupported
ASK_GetProductNameA
ASK_GetProductNameW
ASK_GetRawBlockFileNameA
ASK_GetRawBlockFileNameW
ASK_GetRevisionSupportRawBlock
ASK_GetSMBiosBaseBoardInformation
ASK_GetSMBiosBiosInformation
ASK_GetSMBiosOEMStrings
ASK_GetSMBiosSystemConfigurationOptions
ASK_GetSMBiosSystemEnclosureOrClassis
ASK_GetSMBiosSystemInformation
ASK_GetSMBiosVersion
ASK_GetSystemConfigurationOptionA
ASK_GetSystemConfigurationOptionW
ASK_GetSystemDeviceInfo
ASK_GetSystemDeviceRawBlock
ASK_GeviceTypeStrA
ASK_GeviceTypeStrW
ASK_Initial
ASK_IsInitialed
ASK_IsInitialedEx
ASK_SaveRawBlockToFileA
ASK_SaveRawBlockToFileW
ASK_SetRawBlockFromFileA
ASK_SetRawBlockFromFileW

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MIXERUTL.DLL
.dll windows:5 windows x86 arch:x86

036dbeb14cb4cdcb4440988c9a8ed348

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17-10-2006 00:00

Not After

16-10-2009 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:6c:d3:e2:e4:dd:42:22:cf:eb:c3:50:83:f0:1a:ae:6f:17:2d:0c
Signer

Actual PE Digest

0a:6c:d3:e2:e4:dd:42:22:cf:eb:c3:50:83:f0:1a:ae:6f:17:2d:0c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetLineInfoW
mixerGetDevCapsW
mixerGetNumDevs
mixerOpen
mixerSetControlDetails
mixerClose

kernel32

TlsFree
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
VirtualFree
WideCharToMultiByte
lstrcpyW
MultiByteToWideChar
VirtualAlloc
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA

Exports

Exports

MixerUtl_CanRecordMultipleSelected
MixerUtl_FindDefaultMixerNumber
MixerUtl_FreeValueItems
MixerUtl_GetControlID
MixerUtl_GetControlIDEx
MixerUtl_GetControlNameA
MixerUtl_GetControlNameExA
MixerUtl_GetControlNameExByCtrlIDA
MixerUtl_GetControlNameExByCtrlIDW
MixerUtl_GetControlNameExW
MixerUtl_GetControlNameW
MixerUtl_GetDeviceNameA
MixerUtl_GetDeviceNameW
MixerUtl_GetDevicesCount
MixerUtl_GetLineNameA
MixerUtl_GetLineNameExA
MixerUtl_GetLineNameExByCtrlIDA
MixerUtl_GetLineNameExByCtrlIDW
MixerUtl_GetLineNameExW
MixerUtl_GetLineNameW
MixerUtl_GetMaxMinValue
MixerUtl_GetMaxMinValueEx
MixerUtl_GetMaxMinValueExByCtrlID
MixerUtl_GetRecordSelectedCount
MixerUtl_GetValue
MixerUtl_GetValueEx
MixerUtl_GetValueExByCtrlID
MixerUtl_GetValueItemCount
MixerUtl_GetValueItemCountEx
MixerUtl_GetValueItemCountExByCtrlID
MixerUtl_HookDevice
MixerUtl_IsRecordSelected
MixerUtl_IsRecordSelectedEx
MixerUtl_IsRecordSelectedExByCtrlID
MixerUtl_SetRecordSelected
MixerUtl_SetRecordSelectedEx
MixerUtl_SetRecordSelectedExByCtrlID
MixerUtl_SetValue
MixerUtl_SetValueEx
MixerUtl_SetValueExByCtrlID
MixerUtl_UnHookDevice

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MMDUtl.cfg
LaunchManager_Dritek_7.0.4_W8x64/MMDUtl.dll
.dll windows:5 windows x86 arch:x86

2bf92266a560c03711c99216ae37b143

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

28:07:c6:04:93:cb:7d:2f:9a:af:ed:ba:c0:c7:04:68:05:d4:7e:17
Signer

Actual PE Digest

28:07:c6:04:93:cb:7d:2f:9a:af:ed:ba:c0:c7:04:68:05:d4:7e:17

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

SHGetValueA
PathCombineA
PathFileExistsA
PathRemoveBackslashW
PathRemoveFileSpecW

comctl32

ord17

kernel32

GetPrivateProfileIntA
WritePrivateProfileStringA
GetTempPathA
DeleteFileA
InterlockedIncrement
InterlockedDecrement
FindResourceExW
FindResourceW
LoadResource
WideCharToMultiByte
SizeofResource
LockResource
MultiByteToWideChar
GetCurrentProcess
OutputDebugStringW
ExpandEnvironmentStringsA
CreateProcessA
GetModuleFileNameA
GetLastError
CreateDirectoryW
CopyFileW
CreateFileW
GetFileSizeEx
GetCurrentProcessId
GetSystemTime
ExpandEnvironmentStringsW
GetVersionExW
InterlockedCompareExchange
InterlockedExchange
LocalFree
GetCurrentThreadId
GetTickCount
ReleaseMutex
SetLastError
DeleteFileW
CreateProcessW
CreateMutexW
SetFilePointer
WriteFile
FormatMessageA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEnvironmentVariableW
GetEnvironmentVariableW
GetFileAttributesW
GetTempPathW
ReadFile
lstrcpyA
GetCommandLineW
RaiseException
IsDebuggerPresent
GetSystemDirectoryW
GetWindowsDirectoryW
QueryPerformanceCounter
GetSystemTimeAsFileTime
FlushFileBuffers
CompareStringW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LoadLibraryW
SetStdHandle
WriteConsoleW
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
SetHandleCount
GetLocaleInfoW
GetStdHandle
HeapCreate
IsProcessorFeaturePresent
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
LCMapStringW
RtlUnwind
GetCPInfo
ExitProcess
GetConsoleMode
GetConsoleCP
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
lstrcpynA
HeapAlloc
HeapDestroy
InitializeCriticalSection
DecodePointer
EncodePointer
GetStringTypeW
LocalAlloc
LoadLibraryA
FreeLibrary
CreateThread
CloseHandle
GetVersionExA
OutputDebugStringA
CreateToolhelp32Snapshot
GetModuleHandleA
Process32Next
GetPrivateProfileStringA
GetProcAddress
GetPrivateProfileIntW
lstrlenW
GetModuleFileNameW
Sleep
CreateEventA
GetModuleHandleW
SetEvent
WaitForSingleObject
Process32First
lstrlenA
GetCurrentDirectoryW
SetEnvironmentVariableA

user32

GetDesktopWindow
GetWindow
RegisterClassA
EnumDisplaySettingsW
EnumDisplayDevicesA
UpdateWindow
MapWindowPoints
DispatchMessageA
PostMessageA
EnumChildWindows
GetCursorPos
SetWindowPos
DefWindowProcA
MonitorFromWindow
ReleaseDC
GetClassNameW
CreateWindowExA
GetWindowTextW
GetWindowLongA
BringWindowToTop
InvalidateRect
SetWindowLongA
ChangeDisplaySettingsExA
EnumWindows
GetClientRect
FindWindowW
EnumDisplaySettingsA
GetParent
TranslateMessage
GetDC
GetMonitorInfoA
MessageBoxW
PostQuitMessage
KillTimer
CreateDialogParamA
PostThreadMessageA
GetWindowRect
SetTimer
UpdateLayeredWindow
GetMessageA
EnumDisplaySettingsExA
DestroyWindow
ChangeDisplaySettingsA
SetCursorPos
EnumDisplayDevicesW
RegisterClassExW
ShowWindow
CreateWindowExW
DefWindowProcW
keybd_event
SetForegroundWindow
wsprintfA
GetForegroundWindow
PtInRect

gdi32

CreateSolidBrush
CreateDCA
ExtEscape
DeleteDC
DeleteObject
CreateCompatibleDC
SelectObject

advapi32

RegQueryValueExW
OpenServiceW
OpenSCManagerW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExA
RegOpenKeyExA
CloseServiceHandle

shell32

CommandLineToArgvW
SHGetSpecialFolderPathA
SHGetFolderPathW

ole32

CoCreateInstance
CLSIDFromProgID
CoUninitialize

oleaut32

SysAllocString

gdiplus

GdipLoadImageFromFile
GdipDrawImageRectI
GdipGetImageWidth
GdipCreatePen1
GdipDeletePen
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipCreateHBITMAPFromBitmap
GdipDisposeImage
GdipAlloc
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipCloneBitmapAreaI
GdipFree
GdipGetImageHeight

winmm

waveOutGetNumDevs
timeGetTime

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
CM_Get_DevNode_Status
SetupDiGetClassDevsW
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Exports

Exports

MMDUtl_Cancel
MMDUtl_ChangeToNBOnlySingleDisplayMode
MMDUtl_DeInit
MMDUtl_DeInitExtendMode
MMDUtl_DetectDisplayConnectedFeatureIsValid
MMDUtl_EnableExtendMode
MMDUtl_FlushRememberedSettings
MMDUtl_GetActiveDisplays
MMDUtl_GetConnectedDisplays
MMDUtl_GetCurrentDisplayMode
MMDUtl_GetVgaVendor
MMDUtl_HasDualOutputCapability
MMDUtl_HasExternalMonitorConnected
MMDUtl_Init
MMDUtl_InitExtendMode
MMDUtl_IsExtendModeEnabled
MMDUtl_PermitToChangeMode
MMDUtl_RegisterNotification
MMDUtl_Run
MMDUtl_RunEx
MMDUtl_SaveCurrentMode
MMDUtl_SetLassoBoxStatus
MMDUtl_SetNewDisplayMode
MMDUtl_Stop

Sections

.text
Size: 602KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MMDUtl.x64
.dll windows:5 windows x64 arch:x64

ee82dba2966adbd790c4b0cfffc602c8

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d3:bc:93:2f:3e:65:94:2f:cc:1e:ac:2a:5e:15:1c:ec:c6:62:00:89
Signer

Actual PE Digest

d3:bc:93:2f:3e:65:94:2f:cc:1e:ac:2a:5e:15:1c:ec:c6:62:00:89

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

shlwapi

PathFileExistsA
SHGetValueA
PathRemoveBackslashW
PathRemoveFileSpecW
PathCombineA

comctl32

ord17

kernel32

GetPrivateProfileIntA
WritePrivateProfileStringA
GetTempPathA
DeleteFileA
FindResourceExW
FindResourceW
LoadResource
WideCharToMultiByte
SizeofResource
LockResource
MultiByteToWideChar
GetCurrentProcess
OutputDebugStringW
ExpandEnvironmentStringsA
CreateProcessA
GetModuleFileNameA
GetLastError
CreateDirectoryW
CopyFileW
CreateFileW
GetFileSizeEx
GetCurrentProcessId
GetSystemTime
ExpandEnvironmentStringsW
GetVersionExW
LocalFree
GetCurrentThreadId
GetTickCount
ReleaseMutex
SetLastError
DeleteFileW
CreateProcessW
CreateMutexW
SetFilePointer
WriteFile
FormatMessageA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEnvironmentVariableW
GetEnvironmentVariableW
GetFileAttributesW
GetTempPathW
ReadFile
GetCurrentDirectoryW
Process32Next
GetCommandLineW
RaiseException
IsDebuggerPresent
GetSystemDirectoryW
GetWindowsDirectoryW
lstrcpyA
QueryPerformanceCounter
GetSystemTimeAsFileTime
FlushFileBuffers
CompareStringW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LoadLibraryW
SetStdHandle
WriteConsoleW
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
SetHandleCount
GetLocaleInfoW
GetStdHandle
HeapCreate
GetVersion
HeapSetInformation
FlsAlloc
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
LCMapStringW
GetCPInfo
ExitProcess
RtlUnwindEx
GetConsoleMode
GetConsoleCP
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
FlsSetValue
RtlPcToFileHeader
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
GetPrivateProfileStringA
HeapAlloc
HeapDestroy
InitializeCriticalSection
DecodePointer
EncodePointer
GetStringTypeW
LocalAlloc
GetProcAddress
GetPrivateProfileIntW
lstrlenW
GetModuleFileNameW
Sleep
CreateEventA
GetModuleHandleW
SetEvent
WaitForSingleObject
Process32First
lstrcpynA
LoadLibraryA
FreeLibrary
CreateThread
CloseHandle
GetVersionExA
CreateToolhelp32Snapshot
OutputDebugStringA
lstrlenA
GetModuleHandleA
SetEnvironmentVariableA

user32

GetWindow
RegisterClassA
EnumDisplaySettingsW
EnumDisplayDevicesA
UpdateWindow
MapWindowPoints
DispatchMessageA
PostMessageA
SetWindowLongPtrA
EnumChildWindows
GetCursorPos
SetWindowPos
DefWindowProcA
MonitorFromWindow
ReleaseDC
GetClassNameW
CreateWindowExA
GetWindowTextW
GetWindowLongA
BringWindowToTop
InvalidateRect
ChangeDisplaySettingsExA
TranslateMessage
GetDC
GetMonitorInfoA
PtInRect
EnumWindows
GetClientRect
FindWindowW
EnumDisplaySettingsA
MessageBoxW
GetParent
KillTimer
CreateDialogParamA
PostThreadMessageA
GetWindowLongPtrA
GetWindowRect
SetTimer
UpdateLayeredWindow
GetMessageA
EnumDisplaySettingsExA
DestroyWindow
ChangeDisplaySettingsA
PostQuitMessage
keybd_event
RegisterClassExW
ShowWindow
CreateWindowExW
DefWindowProcW
SetForegroundWindow
wsprintfA
GetForegroundWindow
GetDesktopWindow
EnumDisplayDevicesW
SetCursorPos

gdi32

CreateDCA
CreateSolidBrush
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
ExtEscape

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
CloseServiceHandle
OpenSCManagerW
OpenServiceW
RegSetValueExW

shell32

CommandLineToArgvW
SHGetSpecialFolderPathA
SHGetFolderPathW

ole32

CoCreateInstance
CLSIDFromProgID
CoUninitialize

oleaut32

SysAllocString

gdiplus

GdipCreateHBITMAPFromBitmap
GdipGetImageHeight
GdipGetImageWidth
GdipFree
GdipCloneBitmapAreaI
GdipCreateBitmapFromScan0
GdipCreatePen1
GdipDeletePen
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDrawImageRectI
GdipDisposeImage
GdipAlloc
GdipLoadImageFromFile
GdipGetImageGraphicsContext
GdipDeleteGraphics

winmm

waveOutGetNumDevs
timeGetTime

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status
SetupDiGetClassDevsA
SetupDiOpenDevRegKey

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Exports

Exports

MMDUtl_Cancel
MMDUtl_ChangeToNBOnlySingleDisplayMode
MMDUtl_DeInit
MMDUtl_DeInitExtendMode
MMDUtl_DetectDisplayConnectedFeatureIsValid
MMDUtl_EnableExtendMode
MMDUtl_FlushRememberedSettings
MMDUtl_GetActiveDisplays
MMDUtl_GetConnectedDisplays
MMDUtl_GetCurrentDisplayMode
MMDUtl_GetVgaVendor
MMDUtl_HasDualOutputCapability
MMDUtl_HasExternalMonitorConnected
MMDUtl_Init
MMDUtl_InitExtendMode
MMDUtl_IsExtendModeEnabled
MMDUtl_PermitToChangeMode
MMDUtl_RegisterNotification
MMDUtl_Run
MMDUtl_RunEx
MMDUtl_SaveCurrentMode
MMDUtl_SetLassoBoxStatus
MMDUtl_SetNewDisplayMode
MMDUtl_Stop

Sections

.text
Size: 658KB - Virtual size: 657KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MMDx64Fx.exe
.exe windows:5 windows x64 arch:x64

a3dc778167745481f7f5586bcdd164be

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

87:a3:57:37:34:83:06:be:8a:36:61:b3:e6:d6:5d:e8:56:86:0e:43
Signer

Actual PE Digest

87:a3:57:37:34:83:06:be:8a:36:61:b3:e6:d6:5d:e8:56:86:0e:43

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mmdutl

MMDUtl_RegisterNotification
MMDUtl_ChangeToNBOnlySingleDisplayMode
MMDUtl_IsExtendModeEnabled
MMDUtl_EnableExtendMode
MMDUtl_HasExternalMonitorConnected
MMDUtl_DetectDisplayConnectedFeatureIsValid
MMDUtl_HasDualOutputCapability
MMDUtl_DeInitExtendMode
MMDUtl_InitExtendMode
MMDUtl_SetLassoBoxStatus
MMDUtl_Cancel
MMDUtl_PermitToChangeMode
MMDUtl_SaveCurrentMode
MMDUtl_Stop
MMDUtl_RunEx
MMDUtl_Init
MMDUtl_DeInit

kernel32

CloseHandle
CreateMutexW
CreateEventA
WritePrivateProfileStringW
GetTempPathW
CreateFileW
GetCurrentProcessId
GetModuleHandleW
GetProcAddress
GetCurrentProcess
GetVersionExW
GetCurrentThreadId
GetTickCount
WaitForSingleObject
ReleaseMutex
SetLastError
CreateProcessW
GetModuleFileNameW
SetFilePointer
WriteFile
OutputDebugStringA
FormatMessageA
GetModuleHandleA
GetFileAttributesW
ReadFile
GetCurrentDirectoryW
SetEvent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetWindowsDirectoryW
Sleep
RaiseException
FlushFileBuffers
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LoadLibraryW
GetLocaleInfoW
GetStringTypeW
RtlUnwindEx
IsValidCodePage
GetOEMCP
GetACP
SetStdHandle
WriteConsoleW
GetTimeZoneInformation
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
FlsAlloc
GetLastError
CreateEventW
HeapReAlloc
ExitProcess
GetConsoleMode
GetConsoleCP
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetCommandLineA
HeapAlloc
HeapFree
InitializeCriticalSection
EncodePointer
SetEnvironmentVariableA
FlsFree
FlsSetValue
FlsGetValue
HeapCreate
GetVersion
HeapSetInformation
HeapSize
LCMapStringW
GetCPInfo
RtlPcToFileHeader
DecodePointer

user32

DispatchMessageA
LoadCursorA
TranslateMessage
GetMessageA
DefWindowProcA
PostQuitMessage
RegisterClassExA
CreateWindowExA
IsWindow
IsWindowVisible
PostMessageW
FindWindowW
MessageBoxW

shell32

SHGetFolderPathW

ole32

CoUninitialize
CoInitializeEx

winmm

timeGetTime

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MMDx64Fx.exe.manifest
.xml
LaunchManager_Dritek_7.0.4_W8x64/MMKEYBD.CFG
LaunchManager_Dritek_7.0.4_W8x64/MMKEYBD.w8
LaunchManager_Dritek_7.0.4_W8x64/MMRes/3Clone_DSub_DP.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/3Clone_DSub_HDMI.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/3Clone_HDMI_DP.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/3Extend_DSub_DP.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/3Extend_DSub_HDMI.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/3Extend_HDMI_DP.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/AdvancedP1.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/AdvancedP1DP.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/AdvancedP1DPHDMI.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/AdvancedP1DSUBDPHDMI.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/AdvancedP1DSUBHDMIDP.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/AdvancedP1HDMIDP.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/AdvancedP2.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/AdvancedP2DP.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/AdvancedP2DPHDMI.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/AdvancedP2DSUBDPHDMI.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/AdvancedP2DSUBHDMIDP.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/AdvancedP2HDMIDP.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/CRT.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/DP.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/DVI.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/Extend.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/Extend2CRT.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/Extend2DP.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/Extend2HDMI.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/Extend2WiDi.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/HDMI.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/LCD.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/NB-CRT.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/NB-DP.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/NB-DVI.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/NB-HDMI.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/NB-TV.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/NB-WiDi.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/NB.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/TV.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/WiDi.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/bg_center.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/bg_left.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/bg_right.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/p1024x768.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/p800x600.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MMRes/selected.png
.png
LaunchManager_Dritek_7.0.4_W8x64/MUI/Mui_Index.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:29:00:72:8b:fc:61:01:ad:a2:6f:07:bf:5f:f3:e3:49:bc:04:9b
Signer

Actual PE Digest

08:29:00:72:8b:fc:61:01:ad:a2:6f:07:bf:5f:f3:e3:49:bc:04:9b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/bg-BG.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d5:13:71:fc:3d:59:a3:46:8c:4a:ce:fb:2c:b7:58:d4:b4:be:a4:4f
Signer

Actual PE Digest

d5:13:71:fc:3d:59:a3:46:8c:4a:ce:fb:2c:b7:58:d4:b4:be:a4:4f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/cs-CZ.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

df:7f:8c:ad:7f:ae:06:92:6d:fe:72:a9:75:d2:26:90:44:45:34:1b
Signer

Actual PE Digest

df:7f:8c:ad:7f:ae:06:92:6d:fe:72:a9:75:d2:26:90:44:45:34:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/da-DK.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

80:1a:3b:d7:60:88:83:00:53:a3:a8:79:61:ef:a4:3f:18:a2:68:89
Signer

Actual PE Digest

80:1a:3b:d7:60:88:83:00:53:a3:a8:79:61:ef:a4:3f:18:a2:68:89

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/de-DE.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ca:4d:04:f1:1f:48:25:50:d9:c2:ec:0b:72:53:61:00:20:f3:5e:40
Signer

Actual PE Digest

ca:4d:04:f1:1f:48:25:50:d9:c2:ec:0b:72:53:61:00:20:f3:5e:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/el-GR.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:69:22:49:b4:45:31:23:28:4a:9d:a2:8c:de:b7:b6:59:fd:e9:76
Signer

Actual PE Digest

36:69:22:49:b4:45:31:23:28:4a:9d:a2:8c:de:b7:b6:59:fd:e9:76

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/en-US.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ac:05:60:4f:d1:3d:40:e9:c1:e1:d0:6f:7b:83:5a:83:4e:fe:77:15
Signer

Actual PE Digest

ac:05:60:4f:d1:3d:40:e9:c1:e1:d0:6f:7b:83:5a:83:4e:fe:77:15

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/es-ES.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

25:a1:dd:a8:c8:06:7c:6e:a9:99:45:a3:d2:5e:c9:34:91:93:c1:23
Signer

Actual PE Digest

25:a1:dd:a8:c8:06:7c:6e:a9:99:45:a3:d2:5e:c9:34:91:93:c1:23

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/fi-FI.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:ba:d2:f2:44:f6:9d:df:94:05:b8:3c:99:da:74:1f:45:33:39:ee
Signer

Actual PE Digest

51:ba:d2:f2:44:f6:9d:df:94:05:b8:3c:99:da:74:1f:45:33:39:ee

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/fr-FR.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

da:51:9a:fc:fd:d0:8e:ce:98:1c:28:e8:a6:4d:35:2b:d0:5c:34:14
Signer

Actual PE Digest

da:51:9a:fc:fd:d0:8e:ce:98:1c:28:e8:a6:4d:35:2b:d0:5c:34:14

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/hr-HR.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d6:15:a6:9b:8b:be:56:89:57:9e:d4:57:7a:11:98:a1:a3:22:43:b0
Signer

Actual PE Digest

d6:15:a6:9b:8b:be:56:89:57:9e:d4:57:7a:11:98:a1:a3:22:43:b0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/hu-HU.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

66:2f:14:bb:72:89:7c:5d:dc:02:17:9c:e6:58:43:30:76:01:47:18
Signer

Actual PE Digest

66:2f:14:bb:72:89:7c:5d:dc:02:17:9c:e6:58:43:30:76:01:47:18

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/it-IT.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:17:1b:22:e9:a8:55:50:47:13:67:26:7d:d8:2f:15:cb:48:ac:67
Signer

Actual PE Digest

43:17:1b:22:e9:a8:55:50:47:13:67:26:7d:d8:2f:15:cb:48:ac:67

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/ja-JP.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2c:f5:c9:39:02:de:be:a0:cd:8d:df:a3:92:47:2b:6f:cd:0f:c7:09
Signer

Actual PE Digest

2c:f5:c9:39:02:de:be:a0:cd:8d:df:a3:92:47:2b:6f:cd:0f:c7:09

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 645KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/ko-KR.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a4:75:dc:c4:5d:68:c1:48:f3:96:db:b8:4d:3b:b3:78:85:bc:71:31
Signer

Actual PE Digest

a4:75:dc:c4:5d:68:c1:48:f3:96:db:b8:4d:3b:b3:78:85:bc:71:31

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 645KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/nl-NL.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

aa:9f:dc:91:c3:76:03:47:c7:fb:54:5e:a3:52:d1:13:c9:7a:7e:a2
Signer

Actual PE Digest

aa:9f:dc:91:c3:76:03:47:c7:fb:54:5e:a3:52:d1:13:c9:7a:7e:a2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/no-NO.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:38:f8:60:1d:36:61:fe:8c:0e:78:1e:77:7d:74:f4:a9:c6:e1:b5
Signer

Actual PE Digest

78:38:f8:60:1d:36:61:fe:8c:0e:78:1e:77:7d:74:f4:a9:c6:e1:b5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/pl-PL.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1e:be:35:75:77:2a:30:e8:b4:b8:f7:28:68:ff:d6:6a:b6:1d:91:1b
Signer

Actual PE Digest

1e:be:35:75:77:2a:30:e8:b4:b8:f7:28:68:ff:d6:6a:b6:1d:91:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/pt-PT.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

99:76:8b:d4:4e:aa:2b:00:b6:53:c0:68:9f:2a:02:43:32:49:b7:18
Signer

Actual PE Digest

99:76:8b:d4:4e:aa:2b:00:b6:53:c0:68:9f:2a:02:43:32:49:b7:18

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/ro-RO.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e3:f9:3a:bb:7d:ac:cd:a3:82:67:bd:15:66:62:78:5a:0d:35:67:2a
Signer

Actual PE Digest

e3:f9:3a:bb:7d:ac:cd:a3:82:67:bd:15:66:62:78:5a:0d:35:67:2a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/ru-RU.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

18:d9:fb:9a:54:bf:98:06:e3:59:f2:8c:75:f3:0f:cf:44:11:a4:cf
Signer

Actual PE Digest

18:d9:fb:9a:54:bf:98:06:e3:59:f2:8c:75:f3:0f:cf:44:11:a4:cf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/sk-SK.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:cc:18:6c:c5:f5:28:90:10:09:77:a0:0e:c1:e7:d5:68:21:39:bb
Signer

Actual PE Digest

6d:cc:18:6c:c5:f5:28:90:10:09:77:a0:0e:c1:e7:d5:68:21:39:bb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/sl-SI.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

50:e7:99:bf:8e:b8:0f:b2:77:9f:62:5a:10:8b:8a:42:4b:45:2b:07
Signer

Actual PE Digest

50:e7:99:bf:8e:b8:0f:b2:77:9f:62:5a:10:8b:8a:42:4b:45:2b:07

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/sv-SE.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3c:f1:f1:13:46:c5:fd:52:97:0f:11:3e:d8:4a:24:8a:0e:78:71:d9
Signer

Actual PE Digest

3c:f1:f1:13:46:c5:fd:52:97:0f:11:3e:d8:4a:24:8a:0e:78:71:d9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/tr-TR.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:05:74:5d:8c:71:42:df:34:e4:c4:20:a3:2b:b6:3f:1b:f4:ce:cc
Signer

Actual PE Digest

0c:05:74:5d:8c:71:42:df:34:e4:c4:20:a3:2b:b6:3f:1b:f4:ce:cc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/zh-CN.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b0:a8:c3:1e:64:d2:71:b3:d2:c9:ab:c4:a1:3c:f6:63:8b:67:f1:68
Signer

Actual PE Digest

b0:a8:c3:1e:64:d2:71:b3:d2:c9:ab:c4:a1:3c:f6:63:8b:67:f1:68

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 645KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MUI/zh-TW.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:29:6d:0a:fa:76:7a:9f:9d:01:e7:18:8d:3f:bf:3f:ff:83:fe:95
Signer

Actual PE Digest

69:29:6d:0a:fa:76:7a:9f:9d:01:e7:18:8d:3f:bf:3f:ff:83:fe:95

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 646KB - Virtual size: 645KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MetroApp.dll
.dll windows:6 windows x86 arch:x86

e199b3e43c76d97250dd9e80dabb52d9

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:bf:c9:f7:29:af:db:9a:c9:02:11:2c:2e:de:d6:b5:39:33:e5:da
Signer

Actual PE Digest

43:bf:c9:f7:29:af:db:9a:c9:02:11:2c:2e:de:d6:b5:39:33:e5:da

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
GetFileAttributesW
ReadFile
GetCurrentProcess
LoadLibraryExW
GetTickCount
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
QueryPerformanceCounter
GetSystemTimeAsFileTime
RaiseException
Sleep
FlushFileBuffers
SetFilePointerEx
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetEnvironmentVariableA
EnumSystemLocalesEx
GetUserDefaultLocaleName
LoadLibraryW
OutputDebugStringW
ReadConsoleW
GetEnvironmentStringsW
GetTimeZoneInformation
WriteConsoleW
SetStdHandle
CreateProcessW
GetCurrentThreadId
GetCurrentProcessId
PackageFullNameFromId
CreateMutexW
WaitForSingleObject
ReleaseMutex
SetLastError
GetLastError
CloseHandle
OutputDebugStringA
WriteFile
SetFilePointer
CreateFileW
ClosePackageInfo
GetPackageInfo
OpenPackageInfoByFullName
IsDebuggerPresent
GetModuleHandleW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount64
GetModuleFileNameA
GetStartupInfoW
InitOnceExecuteOnce
GetFileType
IsValidLocaleName
FlsFree
FlsAlloc
GetOEMCP
GetACP
IsValidCodePage
HeapSize
GetStdHandle
LCMapStringEx
GetCPInfo
RtlUnwind
HeapReAlloc
GetProcessHeap
HeapAlloc
GetProcAddress
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
InitializeCriticalSectionEx
GetLocaleInfoEx
GetStringTypeW
HeapFree
GetCommandLineA
FlsGetValue
FlsSetValue
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
GetModuleHandleExW

user32

MessageBoxW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

shlwapi

SHCreateStreamOnFileEx

xmllite

CreateXmlReader

winmm

timeGetTime

Exports

Exports

??0MetroAppImpl@app@@QAE@ABV01@@Z
??0MetroAppImpl@app@@QAE@PAVMetroAppImplInternal@1@@Z
??1MetroAppImpl@app@@UAE@XZ
??4MetroAppImpl@app@@QAEAAV01@ABV01@@Z
??4MetroAppPackageID@app@@QAEAAU01@ABU01@@Z
??4Version@app@@QAEAAU01@ABU01@@Z
??_7MetroAppImpl@app@@6B@
?CreateMetroAppImpl@app@@YAPAVMetroAppImpl@1@PB_W@Z
?CreateMetroAppImplFromPackageID@app@@YAPAVMetroAppImpl@1@PBUMetroAppPackageID@1@@Z
?GetAppID@MetroAppImpl@app@@QBE_NPA_WK@Z
?GetAppIconProperties@MetroAppImpl@app@@QBE_NPA_WKPAK@Z
?GetFilePath@MetroAppImpl@app@@QBE_NPA_WK@Z
?GetHBITMAP@MetroAppImpl@app@@QBEPAUHBITMAP__@@XZ
?GetName@MetroAppImpl@app@@QBE_NPA_WK@Z
?GetPackageID@MetroAppImpl@app@@QBE_NPAUMetroAppPackageID@2@@Z
?IsInstalled@MetroAppImpl@app@@QBE_NXZ
?LaunchMetroApp@app@@YAHPB_WH@Z
?SetFilePath@MetroAppImpl@app@@QAEXPB_W@Z
?SetName@MetroAppImpl@app@@QAEXPB_W@Z

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/MkServis.exe
.exe windows:4 windows x86 arch:x86

219345e4e0b041131b9890cba487fa86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17-10-2006 00:00

Not After

16-10-2009 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:6a:f6:11:ee:c2:3d:d2:8e:cb:5d:14:3b:5a:2a:03:84:6c:3c:bd
Signer

Actual PE Digest

97:6a:f6:11:ee:c2:3d:d2:8e:cb:5d:14:3b:5a:2a:03:84:6c:3c:bd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetProcAddress
FreeLibrary
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
Sleep
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/NTKCUtl.dll
.dll windows:5 windows x86 arch:x86

6a92969349c19ddaf3b9ed645e0b6bdb

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4b:29:98:6e:07:3b:e5:90:76:39:1c:34:bc:c4:ad:17:8a:e2:bb:20
Signer

Actual PE Digest

4b:29:98:6e:07:3b:e5:90:76:39:1c:34:bc:c4:ad:17:8a:e2:bb:20

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathAppendW
PathRemoveFileSpecW

kernel32

GetLastError
WaitForSingleObject
OutputDebugStringW
Sleep
SetThreadPriority
CloseHandle
CreateThread
GetVersionExW
GetModuleFileNameW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetLocalTime
lstrcpyW
GetPrivateProfileStringW
GetFileAttributesW
lstrlenW
lstrcatW
GetCurrentThreadId
MultiByteToWideChar
LCMapStringW
IsProcessorFeaturePresent
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
WriteFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
EncodePointer
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
GetStringTypeW
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy

user32

AttachThreadInput
GetForegroundWindow
GetWindowThreadProcessId
SetTimer
UnregisterClassW
PostMessageW
KillTimer
GetKeyState
wsprintfW
RegisterClassExW
IsWindow
CreateWindowExW
SetWindowsHookExW
UnhookWindowsHookEx
DefWindowProcW
GetMessageW
PostThreadMessageW
MapVirtualKeyW
CallNextHookEx

shell32

SHGetFolderPathW

Exports

Exports

NTKCUtl_DeInit
NTKCUtl_DeleteAllRegisterKey
NTKCUtl_HookKey
NTKCUtl_IgnoreRejectKeyWhenFnKeyPressed
NTKCUtl_Init
NTKCUtl_IsKeyStateEnabled
NTKCUtl_Register
NTKCUtl_RegisterCheckMessage
NTKCUtl_RegisterKey
NTKCUtl_RegisterKeyBySectionA
NTKCUtl_RegisterKeyBySectionW
NTKCUtl_UnRegister
NTKCUtl_UnRegisterKey
NTKCUtl_UnRegisterKeyBySectionA
NTKCUtl_UnRegisterKeyBySectionW

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/3G_Disable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/3G_Enable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Bluetooth_Disable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Bluetooth_Enable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/CapsLock_Off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/CapsLock_On.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_000.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_001.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_002.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_003.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_004.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_005.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_006.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_007.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_008.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_009.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_010.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_011.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_012.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_013.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_014.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_015.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Cir_016.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Mute.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/NumLock_Off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/NumLock_On.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Power.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/RF_2Devices_WiFi_Off_3G_On.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/RF_2Devices_WiFi_On_3G_Off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/RF_3Devices_WiFi_WiMax_Off_3G_On.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/RF_3Devices_WiFi_WiMax_On_3G_Off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/RF_Disable_2Devices.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/RF_Disable_3Devices.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/RF_Enable_2Devices.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/RF_Enable_3Devices.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/ScrollLock_Off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/ScrollLock_On.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Setting.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Touchpad_Disable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Touchpad_Enable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/UnMute.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_000.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_001.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_002.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_003.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_004.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_005.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_006.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_007.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_008.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_009.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_010.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_011.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_012.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_013.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_014.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_015.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/Vol_016.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/WiFi_Disable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/WiFi_Enable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/WiMax_Disable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/WiMax_Enable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/email.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/mic_off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/mic_on.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/no_device.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/wimax_wifi_off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC/wimax_wifi_on.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/3G_Disable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/3G_Enable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Bluetooth_Disable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Bluetooth_Enable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/CapsLock_Off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/CapsLock_On.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_000.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_001.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_002.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_003.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_004.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_005.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_006.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_007.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_008.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_009.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_010.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_011.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_012.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_013.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_014.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_015.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Cir_016.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Mute.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/NumLock_Off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/NumLock_On.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Power.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/RF_2Devices_WiFi_Off_3G_On.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/RF_2Devices_WiFi_On_3G_Off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/RF_3Devices_WiFi_WiMax_Off_3G_On.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/RF_3Devices_WiFi_WiMax_On_3G_Off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/RF_Disable_2Devices.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/RF_Disable_3Devices.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/RF_Enable_2Devices.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/RF_Enable_3Devices.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/ScrollLock_Off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/ScrollLock_On.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Setting.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Touchpad_Disable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Touchpad_Enable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/UnMute.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_000.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_001.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_002.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_003.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_004.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_005.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_006.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_007.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_008.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_009.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_010.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_011.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_012.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_013.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_014.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_015.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/Vol_016.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/WiFi_Disable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/WiFi_Enable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/WiMax_Disable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/WiMax_Enable.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/email.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/mic_off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/mic_on.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/no_device.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/wimax_wifi_off.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDRC2/wimax_wifi_on.png
.png
LaunchManager_Dritek_7.0.4_W8x64/OSDUtl2.dll
.dll windows:5 windows x86 arch:x86

1e241e83aafa7a4de249c62ac682d964

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fc:13:18:39:bc:75:45:8d:39:c1:ba:19:c5:77:1c:9d:ee:42:cf:08
Signer

Actual PE Digest

fc:13:18:39:bc:75:45:8d:39:c1:ba:19:c5:77:1c:9d:ee:42:cf:08

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapAlloc
HeapFree
RtlUnwind
RaiseException
ExitThread
HeapReAlloc
ExitProcess
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringW
GlobalFlags
lstrlenA
InterlockedIncrement
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetModuleHandleA
GetCurrentProcessId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryA
lstrcmpW
GetVersionExA
SuspendThread
GetCurrentThreadId
ResumeThread
GetLastError
GlobalFree
FormatMessageW
LocalFree
InterlockedDecrement
SetLastError
GetProcAddress
GetModuleHandleW
SetThreadPriority
GetCurrentThread
GetThreadPriority
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
TerminateThread
QueryPerformanceFrequency
LoadLibraryW
FreeLibrary
GetModuleFileNameW
CreateThread
WideCharToMultiByte
Sleep
lstrcpyW
MultiByteToWideChar
QueryPerformanceCounter
LockResource
CreateEventW
SizeofResource
LoadResource
FindResourceW
lstrlenW
WaitForSingleObject
SetEvent
GetEnvironmentStrings
CloseHandle

user32

DestroyMenu
GetSysColorBrush
UnregisterClassW
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ShowWindow
SetWindowTextW
GetWindowThreadProcessId
IsWindowEnabled
SetCursor
PostQuitMessage
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetLastActivePopup
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
GetDlgCtrlID
CallWindowProcW
PtInRect
GetMenu
GetWindowLongW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
SendMessageW
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnhookWindowsHookEx
DestroyIcon
EnableWindow
GetSystemMetrics
EnumDisplayMonitors
UpdateWindow
InvalidateRect
GetWindowRect
GetWindow
GetWindowTextW
GetForegroundWindow
FindWindowW
UpdateLayeredWindow
EqualRect
SystemParametersInfoW
SetRect
IsWindowVisible
CopyRect
GetDC
ReleaseDC
PostThreadMessageW
MonitorFromWindow
PostMessageW
MonitorFromPoint
IsWindow
LoadCursorW
DefWindowProcW

gdi32

GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteDC
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
BitBlt
CreateDIBSection
SelectObject
GetObjectW
GetDeviceCaps
DeleteObject
CreateCompatibleDC

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueW
RegOpenKeyW
RegEnumKeyW
GetUserNameW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW

shlwapi

PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW

ole32

CreateStreamOnHGlobal

oleaut32

VariantClear
VariantChangeType
VariantInit

gdiplus

GdipSetCompositingMode
GdipDeletePen
GdipCreatePen1
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipDrawPath
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteGraphics
GdipCreateFromHDC
GdipAddPathLineI
GdipAddPathArcI
GdipFillPath
GdipDrawString
GdipMeasureString
GdipAlloc
GdiplusStartup
GdiplusShutdown
GdipDeleteFont
GdipFree
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipCloneFont
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCloneImage
GdipDisposeImage
GdipCreateHBITMAPFromBitmap
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipCreatePath
GdipDeletePath
GdipClonePath

Exports

Exports

OSDUtl_AddStringA
OSDUtl_AddStringW
OSDUtl_ChangeStringA
OSDUtl_ChangeStringW
OSDUtl_DeInit
OSDUtl_DeleteString
OSDUtl_EnableShowString
OSDUtl_GetPredefinedOSDStringA
OSDUtl_GetPredefinedOSDStringW
OSDUtl_GetProperties
OSDUtl_GetShowMonitorFromPoint
OSDUtl_GetShowMonitorFromWindow
OSDUtl_GetVolumePropertiesA
OSDUtl_Hide
OSDUtl_HideAll
OSDUtl_HideAllOthers
OSDUtl_HideNow
OSDUtl_InitA
OSDUtl_InitW
OSDUtl_MultipleAdd
OSDUtl_MultipleAddStringA
OSDUtl_MultipleAddStringW
OSDUtl_MultipleDelete
OSDUtl_MultipleDeleteAll
OSDUtl_MultipleHideNow
OSDUtl_MultipleHideNowForAll
OSDUtl_MultipleHideNowbyMonitor
OSDUtl_MultipleSetShowMonitor
OSDUtl_MultipleShow
OSDUtl_MultipleVolumeShow
OSDUtl_SetPredefinedOSDStringA
OSDUtl_SetPredefinedOSDStringW
OSDUtl_SetProperties
OSDUtl_SetShowMonitor
OSDUtl_SetShowMonitorFromPoint
OSDUtl_SetShowMonitorFromWindow
OSDUtl_SetVolumePropertiesA
OSDUtl_SetVolumePropertiesW
OSDUtl_Show
OSDUtl_ShowConfigDialog
OSDUtl_ShowStringA
OSDUtl_ShowStringW
OSDUtl_ShowVolume

Sections

.text
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/Panel/Help.ico
LaunchManager_Dritek_7.0.4_W8x64/Panel/LManager.ICO
LaunchManager_Dritek_7.0.4_W8x64/Panel/LMconfigV2.ico
LaunchManager_Dritek_7.0.4_W8x64/PowerUtl.dll
.dll windows:4 windows x86 arch:x86

26607775cdea552bbc2d9d5872fa209a

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17-10-2006 00:00

Not After

16-10-2009 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

af:f8:51:3f:7f:af:42:64:6a:97:2d:b0:92:bb:f6:eb:23:02:ab:0a
Signer

Actual PE Digest

af:f8:51:3f:7f:af:42:64:6a:97:2d:b0:92:bb:f6:eb:23:02:ab:0a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

powrprof

EnumPwrSchemes
SetActivePwrScheme
GetActivePwrScheme

kernel32

FreeEnvironmentStringsW
WideCharToMultiByte
GetVersionExW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSection
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

PowerUtl_DeInit
PowerUtl_GetActivePowerScheme
PowerUtl_GetActivePowerSchemeEx
PowerUtl_GetAllPowerScheme
PowerUtl_GetPowerSchemeCounts
PowerUtl_Init
PowerUtl_SetActivePowerScheme
PowerUtl_SetActivePowerSchemeEx
PowerUtl_SetPowerPolicy

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/RGNMAKER.DLL
.dll windows:4 windows x86 arch:x86

0cc3b6f861618b87f9dee2896facab8b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17-10-2006 00:00

Not After

16-10-2009 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:c7:c3:a7:62:d5:a6:4a:aa:bc:f0:d7:24:12:80:14:e4:e6:22:e9
Signer

Actual PE Digest

4c:c7:c3:a7:62:d5:a6:4a:aa:bc:f0:d7:24:12:80:14:e4:e6:22:e9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
lstrlenW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

GetDC
SetRect
ReleaseDC
CopyRect
IntersectRect

gdi32

SetBkMode
OffsetRgn
GetRgnBox
CreateRectRgn
GetPixel
CreateRectRgnIndirect
CombineRgn
GetObjectW
CreateCompatibleDC
DeleteDC
DeleteObject
ExtTextOutW
SetTextColor
PatBlt
CreateCompatibleBitmap
GetTextExtentPoint32W
SelectObject

Exports

Exports

RgnMaker_CombineRegion
RgnMaker_CopyRegion
RgnMaker_CreateRegionByBitmap
RgnMaker_CreateRegionByDC
RgnMaker_CreateRegionByString
RgnMaker_CreateRegionByStringA
RgnMaker_CreateRegionByStringW
RgnMaker_GetRegionRect
RgnMaker_OffsetRegion

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/RadioWndUtl.dll
.dll windows:5 windows x86 arch:x86

fab3bb45db448545914770633a8b8d32

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8e:45:62:f7:23:f7:04:1d:d7:3d:52:b8:59:8d:32:52:f1:fa:e9:03
Signer

Actual PE Digest

8e:45:62:f7:23:f7:04:1d:d7:3d:52:b8:59:8d:32:52:f1:fa:e9:03

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdiplus

GdiplusShutdown
GdipAlloc
GdipDisposeImage
GdipCreateStringFormat
GdipCloneBitmapAreaI
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImagePointRectI
GdipDrawImageI
GdipDrawImage
GdipDrawString
GdipGetImageGraphicsContext
GdipGetStringFormatFlags
GdipSetStringFormatFlags
GdipCreateSolidFill
GdipCloneBrush
GdipDeleteBrush
GdipFree
GdiplusStartup
GdipCreateBitmapFromStream
GdipCloneImage
GdipDeleteFont
GdipCreateFont
GdipCreateFontFromDC
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipNewInstalledFontCollection
GdipMeasureString
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat

comctl32

ord17

shlwapi

PathRemoveFileSpecW
PathAppendW
SHStrDupW
PathUnExpandEnvStringsW

kernel32

GetCPInfo
WriteFile
HeapSize
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
GetVersionExW
FindResourceW
GetLastError
SizeofResource
LoadResource
IsValidCodePage
FreeResource
GlobalLock
GlobalUnlock
GlobalFree
lstrcpyW
lstrlenW
GetModuleHandleW
GetProcAddress
GetCurrentProcess
lstrcpynW
lstrcmpW
GetModuleFileNameW
SetEvent
CreateEventW
CreateThread
WaitForSingleObject
CloseHandle
TlsGetValue
TlsAlloc
HeapFree
RaiseException
HeapAlloc
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCommandLineA
DecodePointer
GetCurrentThreadId
Sleep
ExitProcess
SetHandleCount
GetStdHandle
HeapReAlloc
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
IsProcessorFeaturePresent
GlobalAlloc

user32

LoadCursorW
SetRect
SetRectEmpty
SetCapture
SetCursor
SetClassLongW
EqualRect
OffsetRect
CopyRect
PtInRect
UpdateWindow
InvalidateRect
UpdateLayeredWindow
EndPaint
BeginPaint
SendMessageW
SetTimer
IsWindowVisible
KillTimer
DestroyWindow
GetWindowLongW
PostMessageW
SetWindowPos
SystemParametersInfoW
GetWindowRect
SetWindowLongW
DefWindowProcW
wsprintfW
IsWindow
LoadStringW
ReleaseDC
GetDC
GetDesktopWindow
ShowWindow
GetForegroundWindow
UnregisterClassW
LoadIconW
RegisterClassExW
CreateWindowExW

gdi32

CombineRgn
CreateRectRgn
PtInRegion
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
GetDeviceCaps

advapi32

RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetFolderPathW

ole32

CoTaskMemFree
PropVariantClear
CreateStreamOnHGlobal

Exports

Exports

RadioWndUtl_DeInit
RadioWndUtl_DeviceChangeNotify
RadioWndUtl_DeviceExisted
RadioWndUtl_GetStyle
RadioWndUtl_GetWindow
RadioWndUtl_Init
RadioWndUtl_RegisterMessage
RadioWndUtl_SetDeviceSystemStatus
RadioWndUtl_SetStyle
RadioWndUtl_SetWindowTitle
RadioWndUtl_Show

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/Readme.txt
LaunchManager_Dritek_7.0.4_W8x64/SZUPFUTL.DLL
.dll windows:4 windows x86 arch:x86

7e55b0c14062a29d92e735c0cf9c5175

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17-10-2006 00:00

Not After

16-10-2009 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3f:5c:38:fc:c0:fb:f4:5a:09:d3:64:47:e8:09:d2:a8:49:1f:5e:28
Signer

Actual PE Digest

3f:5c:38:fc:c0:fb:f4:5a:09:d3:64:47:e8:09:d2:a8:49:1f:5e:28

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExpandEnvironmentStringsW
VirtualAlloc
VirtualFree
ExpandEnvironmentStringsA
WideCharToMultiByte
MultiByteToWideChar
lstrcatW
lstrcpyW
lstrlenW
lstrcatA
lstrcpyA
lstrlenA
GetSystemDefaultLangID
GetUserDefaultLangID
GetCommandLineA
GetVersion
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind

user32

wsprintfA
wsprintfW

advapi32

RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegCreateKeyExW
RegCreateKeyExA
RegOpenKeyExW
RegOpenKeyExA
RegEnumValueW
RegEnumValueA
RegEnumKeyExW
RegEnumKeyExA

Exports

Exports

SzUPFUtl_CopyRegistryTree
SzUPFUtl_CopyRegistryTreeA
SzUPFUtl_CopyRegistryTreeW
SzUPFUtl_CreateKey
SzUPFUtl_CreateKeyA
SzUPFUtl_CreateKeyW
SzUPFUtl_DeleteRegistryTree
SzUPFUtl_DeleteRegistryTreeA
SzUPFUtl_DeleteRegistryTreeW
SzUPFUtl_EnumKeyName
SzUPFUtl_EnumKeyNameA
SzUPFUtl_EnumKeyNameW
SzUPFUtl_EnumValueName
SzUPFUtl_EnumValueNameA
SzUPFUtl_EnumValueNameW
SzUPFUtl_GetProfileBoolean
SzUPFUtl_GetProfileBooleanA
SzUPFUtl_GetProfileBooleanEx
SzUPFUtl_GetProfileBooleanExA
SzUPFUtl_GetProfileBooleanExW
SzUPFUtl_GetProfileBooleanW
SzUPFUtl_GetProfileByteArray
SzUPFUtl_GetProfileByteArrayA
SzUPFUtl_GetProfileByteArrayEx
SzUPFUtl_GetProfileByteArrayExA
SzUPFUtl_GetProfileByteArrayExW
SzUPFUtl_GetProfileByteArrayW
SzUPFUtl_GetProfileDWord
SzUPFUtl_GetProfileDWordA
SzUPFUtl_GetProfileDWordByRadix
SzUPFUtl_GetProfileDWordByRadixA
SzUPFUtl_GetProfileDWordByRadixW
SzUPFUtl_GetProfileDWordEx
SzUPFUtl_GetProfileDWordExA
SzUPFUtl_GetProfileDWordExByRadix
SzUPFUtl_GetProfileDWordExByRadixA
SzUPFUtl_GetProfileDWordExByRadixW
SzUPFUtl_GetProfileDWordExW
SzUPFUtl_GetProfileDWordW
SzUPFUtl_GetProfileMultiString
SzUPFUtl_GetProfileMultiStringA
SzUPFUtl_GetProfileMultiStringEx
SzUPFUtl_GetProfileMultiStringExA
SzUPFUtl_GetProfileMultiStringExW
SzUPFUtl_GetProfileMultiStringW
SzUPFUtl_GetProfileString
SzUPFUtl_GetProfileStringA
SzUPFUtl_GetProfileStringEx
SzUPFUtl_GetProfileStringExA
SzUPFUtl_GetProfileStringExW
SzUPFUtl_GetProfileStringW
SzUPFUtl_GetUserProfileInfo
SzUPFUtl_GetUserProfileInfoA
SzUPFUtl_GetUserProfileInfoW
SzUPFUtl_GetUserProfileSettings
SzUPFUtl_GetUserProfileSettingsA
SzUPFUtl_GetUserProfileSettingsW
SzUPFUtl_GetUserProfileSuffixSubKeySettings
SzUPFUtl_GetUserProfileSuffixSubKeySettingsA
SzUPFUtl_GetUserProfileSuffixSubKeySettingsW
SzUPFUtl_OpenKey
SzUPFUtl_OpenKeyA
SzUPFUtl_OpenKeyW
SzUPFUtl_QueryRegistryValue
SzUPFUtl_QueryRegistryValueA
SzUPFUtl_QueryRegistryValueW
SzUPFUtl_SetProfileBoolean
SzUPFUtl_SetProfileBooleanA
SzUPFUtl_SetProfileBooleanW
SzUPFUtl_SetProfileByteArray
SzUPFUtl_SetProfileByteArrayA
SzUPFUtl_SetProfileByteArrayW
SzUPFUtl_SetProfileDWord
SzUPFUtl_SetProfileDWordA
SzUPFUtl_SetProfileDWordByRadix
SzUPFUtl_SetProfileDWordByRadixA
SzUPFUtl_SetProfileDWordByRadixW
SzUPFUtl_SetProfileDWordW
SzUPFUtl_SetProfileMultiString
SzUPFUtl_SetProfileMultiStringA
SzUPFUtl_SetProfileMultiStringW
SzUPFUtl_SetProfileString
SzUPFUtl_SetProfileStringA
SzUPFUtl_SetProfileStringW
SzUPFUtl_SetRegistryValue
SzUPFUtl_SetRegistryValueA
SzUPFUtl_SetRegistryValueW
SzUPFUtl_SetUserProfileInfo
SzUPFUtl_SetUserProfileInfoA
SzUPFUtl_SetUserProfileInfoEx
SzUPFUtl_SetUserProfileInfoExA
SzUPFUtl_SetUserProfileInfoExW
SzUPFUtl_SetUserProfileInfoW
SzUPFUtl_SetUserProfileSettings
SzUPFUtl_SetUserProfileSettingsA
SzUPFUtl_SetUserProfileSettingsW
SzUPFUtl_SetUserProfileSuffixSubKeySettings
SzUPFUtl_SetUserProfileSuffixSubKeySettingsA
SzUPFUtl_SetUserProfileSuffixSubKeySettingsW

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/SetMail.exe
.exe windows:5 windows x86 arch:x86

cf1a80717cc7aa531c6286021eb416e4

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a8:fc:95:85:e6:3d:6b:f0:19:a6:c0:b0:2e:74:eb:63:d8:b0:f5:c1
Signer

Actual PE Digest

a8:fc:95:85:e6:3d:6b:f0:19:a6:c0:b0:2e:74:eb:63:d8:b0:f5:c1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

shlwapi

PathAppendW

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

netapi32

NetUserGetInfo
NetApiBufferFree

shell32

ShellExecuteExW

kernel32

WideCharToMultiByte
RtlUnwind
IsValidCodePage
GetOEMCP
ProcessIdToSessionId
GetCurrentProcessId
GetCurrentThreadId
SetEvent
lstrcmpW
CreateEventW
CreateThread
WaitForSingleObject
CloseHandle
OpenThread
GetExitCodeThread
GetVersionExW
lstrcatW
FormatMessageW
GetProcessId
HeapSize
GetSystemDirectoryW
CreateProcessW
CreateMutexW
GetLastError
GetModuleHandleW
GetProcAddress
GetACP
GetCPInfo
HeapFree
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapAlloc
HeapReAlloc
IsProcessorFeaturePresent
LCMapStringW
MultiByteToWideChar
Sleep
GetCommandLineW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapCreate
GetStringTypeW

user32

LoadStringW
LoadIconW
SetClassLongW
EnumThreadWindows
GetClassNameW
MessageBoxW
DestroyIcon
WaitForInputIdle
GetForegroundWindow
keybd_event
FindWindowW
SendMessageW
GetWindowThreadProcessId

advapi32

FreeSid
AllocateAndInitializeSid
CheckTokenMembership

imm32

ImmDisableIME

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/SetMail64.exe
.exe windows:5 windows x64 arch:x64

6522e20dd04229560abb4702450f958c

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

37:5d:fd:cf:5f:af:b8:d2:59:33:e6:3f:12:30:5d:c6:2b:26:9c:53
Signer

Actual PE Digest

37:5d:fd:cf:5f:af:b8:d2:59:33:e6:3f:12:30:5d:c6:2b:26:9c:53

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

ord17

shlwapi

PathAppendW

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

netapi32

NetUserGetInfo
NetApiBufferFree

shell32

ShellExecuteExW

kernel32

IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ProcessIdToSessionId
GetCurrentProcessId
GetCurrentThreadId
SetEvent
lstrcmpW
CreateEventW
CreateThread
WaitForSingleObject
CloseHandle
OpenThread
GetExitCodeThread
GetVersionExW
lstrcatW
FormatMessageW
GetProcessId
WideCharToMultiByte
GetSystemDirectoryW
CreateProcessW
CreateMutexW
GetLastError
GetModuleHandleW
GetProcAddress
HeapFree
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapCreate
GetVersion
HeapSize
HeapAlloc
HeapReAlloc
LCMapStringW
MultiByteToWideChar
Sleep
GetCommandLineW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
FlsAlloc
HeapSetInformation
GetStringTypeW

user32

LoadStringW
LoadIconW
SetClassLongPtrW
EnumThreadWindows
GetClassNameW
MessageBoxW
DestroyIcon
WaitForInputIdle
GetForegroundWindow
keybd_event
FindWindowW
SendMessageW
GetWindowThreadProcessId

advapi32

FreeSid
AllocateAndInitializeSid
CheckTokenMembership

imm32

ImmDisableIME

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/Setup.exe
.exe windows:5 windows x86 arch:x86

7370d07bd378052579c0e2488af1aca2

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

37:64:dd:4e:b9:03:d3:f0:8a:f5:ab:9e:7d:e8:dc:72:6a:bb:54:2f
Signer

Actual PE Digest

37:64:dd:4e:b9:03:d3:f0:8a:f5:ab:9e:7d:e8:dc:72:6a:bb:54:2f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerInstallFileW

ole32

CoCreateInstance
CoUninitialize
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
CoInitialize
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CoTreatAsClass
OleDuplicateData
CoDisconnectObject
CLSIDFromString
CoInitializeEx
PropVariantClear
CoTaskMemFree
StringFromGUID2
ReadClassStg

shlwapi

PathIsDirectoryW
PathAddBackslashW
PathAppendW
SHStrDupW
PathFileExistsA
PathFileExistsW
StrStrW
PathFindExtensionW
PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathRemoveExtensionW
PathAddExtensionW

setupapi

CM_Locate_DevNodeW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList

kernel32

MoveFileW
GetStringTypeExW
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
GetModuleHandleA
GlobalGetAtomNameW
GetCurrentProcessId
InterlockedExchange
CompareStringA
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
InterlockedIncrement
GetAtomNameW
lstrlenA
LocalUnlock
LocalLock
GetFileAttributesExW
WideCharToMultiByte
SetFileTime
GetFileSizeEx
GetTempFileNameW
GetStartupInfoW
RtlUnwind
RaiseException
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
CreateThread
HeapReAlloc
SetStdHandle
GetFileType
ExitProcess
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
FatalAppExitA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GlobalSize
FormatMessageW
CreateEventW
SuspendThread
SetEvent
SetThreadPriority
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
InterlockedDecrement
SetLastError
CreateMutexW
SetThreadLocale
GetUserDefaultUILanguage
GetLocaleInfoW
CopyFileW
GetDiskFreeSpaceW
Sleep
GetSystemDefaultLangID
WaitForSingleObject
OutputDebugStringW
GetProfileStringW
WriteProfileStringW
CreateProcessW
MulDiv
GetModuleFileNameW
GetShortPathNameW
ResumeThread
OpenProcess
MoveFileExW
SetFilePointer
LoadLibraryExW
GetCurrentThread
LocalAlloc
LocalFree
GetSystemWindowsDirectoryW
FindFirstFileW
FindNextFileW
FindClose
ExpandEnvironmentStringsW
GetComputerNameW
GetDriveTypeW
GetVersion
GetVersionExW
SetFileAttributesW
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateDirectoryW
GetLastError
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
VirtualFree
GetModuleHandleW
GetCurrentProcess
ReadFile
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetVersionExA
GetPrivateProfileStringA
GetTempPathA
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrcmpW
MultiByteToWideChar
SetEndOfFile
GetSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
GetCurrentThreadId
WriteFile
DeleteFileW
WritePrivateProfileStringW
CreateFileW
GetFileSize
CloseHandle
GetSystemDirectoryW
GetWindowsDirectoryW
SetErrorMode
LoadLibraryW
GetProcAddress
FreeLibrary
FindResourceW
LoadResource
LockResource
SizeofResource
lstrcmpiW
lstrcpynW
GetFileAttributesW
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrcpyW
lstrlenW
lstrcatW
LocalFileTimeToFileTime

user32

UnionRect
WindowFromPoint
GetDCEx
LockWindowUpdate
SetCapture
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
GetTabbedTextExtentW
SetRect
MessageBeep
IsClipboardFormatAvailable
GetDialogBaseUnits
LoadCursorW
SystemParametersInfoW
GetMenuItemInfoW
InflateRect
UnregisterClassW
ShowOwnedPopups
UnpackDDElParam
ReuseDDElParam
DestroyMenu
GetMenuBarInfo
SetCursor
ReleaseCapture
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
CharUpperW
MapVirtualKeyW
GetKeyNameTextW
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
LoadMenuW
ScrollWindowEx
IsWindowEnabled
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetActiveWindow
GetCursorPos
ValidateRect
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
GetParent
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
GetWindowLongW
SetWindowLongW
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
UnhookWindowsHookEx
SetClassLongW
keybd_event
GetForegroundWindow
ShowWindow
SetForegroundWindow
LoadImageW
DdeCreateDataHandle
PostQuitMessage
OffsetRect
FindWindowW
InvalidateRect
UpdateWindow
GetWindowThreadProcessId
ExitWindowsEx
DdeInitializeW
DdeCreateStringHandleW
DdeConnect
DdeClientTransaction
DdeFreeStringHandle
DdeDisconnect
DdeAccessData
DdeUnaccessData
DdeFreeDataHandle
DdeUninitialize
GetMessageW
GetDC
GetSysColorBrush
GetSysColor
GetDesktopWindow
FillRect
DrawTextW
ReleaseDC
GetDlgItem
IsWindow
PostMessageW
IsWindowVisible
MapWindowPoints
GetClientRect
PeekMessageW
DispatchMessageW
TranslateMessage
LoadIconW
DestroyIcon
wsprintfW
GetSystemMetrics
SendMessageW
EnableWindow
KillTimer
SetTimer
GetWindowRect
LoadStringW
MessageBoxW
GetClassInfoW

gdi32

CreateHatchBrush
GetTextMetricsW
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetCharWidthW
ExtCreatePen
StartPage
EndPage
PlayMetaFile
AbortDoc
EndDoc
GetBkColor
StretchDIBits
CreatePen
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
EnumMetaFile
GetObjectType
PlayMetaFileRecord
CreatePatternBrush
CreateDIBPatternBrushPt
ExtSelectClipRgn
PolyBezierTo
GetClipBox
GetDCOrgEx
StretchBlt
CreateSolidBrush
Rectangle
CreateDIBitmap
SelectPalette
RealizePalette
SetTextColor
GetDeviceCaps
CreatePalette
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
BitBlt
CreateFontIndirectW
CreateFontW
GetTextExtentPoint32W
GetOutlineTextMetricsW
DeleteObject
GetObjectW
GetStockObject
SelectObject
SetBkMode
SetAbortProc
SetBkColor
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
StartDocW
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
PatBlt
CreateRectRgnIndirect
CreateDCW
CopyMetaFileW
CreateBitmap
PolylineTo

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetJobW

advapi32

SetFileSecurityW
RegDeleteValueW
RegCreateKeyW
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegSetValueW
RegDeleteKeyW
ImpersonateSelf
OpenThreadToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
RevertToSelf
FreeSid
GetUserNameW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
GetFileSecurityW

shell32

SHBrowseForFolderW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetFileInfoW
DragFinish
DragQueryFileW
SHChangeNotify
ShellExecuteW
SHGetFolderPathW
ExtractIconW
SHGetPathFromIDListW

oleaut32

VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VarDateFromStr
SystemTimeToVariantTime
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantTimeToSystemTime

Sections

.text
Size: 622KB - Virtual size: 621KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LaunchManager_Dritek_7.0.4_W8x64/Setup.inf
LaunchManager_Dritek_7.0.4_W8x64/SetupDev.dll
.dll windows:4 windows x86 arch:x86

3fb1b236ed57fc51f5a729d5ddd40d85

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:29:36:cb:fc:d6:21:46:e1:ad:09:0f:cd:40:4a:2a:ad:5d:d1:f7
Signer

Actual PE Digest

f9:29:36:cb:fc:d6:21:46:e1:ad:09:0f:cd:40:4a:2a:ad:5d:d1:f7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpynA
GetPrivateProfileStringA
LocalAlloc
GetVersionExA
GlobalAlloc
LocalFree
GetPrivateProfileIntA
GlobalFree
GetCurrentProcess
GetCurrentThread
GetLastError
SetErrorMode
CloseHandle
FreeLibrary
lstrcpyA
LoadLibraryA
GetProcAddress
lstrlenA
lstrcmpiA
GetModuleFileNameA
InterlockedDecrement
FreeEnvironmentStringsA
GetStartupInfoA
RtlUnwind
GetCommandLineA
GetVersion
lstrcatA
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
GetACP
GetOEMCP
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
VirtualAlloc
HeapReAlloc

user32

wsprintfA

advapi32

OpenThreadToken
OpenProcessToken
InitializeSecurityDescriptor
GetLengthSid
AllocateAndInitializeSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
InitializeAcl
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
SetSecurityDescriptorGroup
RevertToSelf
FreeSid
AccessCheck
RegQueryValueExA
RegEnumKeyExA
GetUserNameA
RegSetValueExA
RegOpenKeyExA
ImpersonateSelf
RegCloseKey

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiSetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList

Exports

Exports

SetupDev_AddDevicesRegistry
SetupDev_AddDevicesRegistryEx
SetupDev_IsAdministrator

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/SzPtcUtl.dll
.dll windows:4 windows x86 arch:x86

05736871180a0ca59eaa47fc7b128712

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:05:46:dc:04:26:ce:05:a0:04:f2:13:db:7a:38:0d:2d:64:b5:6f
Signer

Actual PE Digest

06:05:46:dc:04:26:ce:05:a0:04:f2:13:db:7a:38:0d:2d:64:b5:6f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapDestroy
lstrlenA
lstrcatA
VirtualFree
HeapFree
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
InterlockedDecrement
InterlockedIncrement
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
lstrcpyA
HeapCreate
GetOEMCP
GetACP
WriteFile
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind

user32

wsprintfA

Exports

Exports

SzPtcUtl_Decode
SzPtcUtl_DecodeEx
SzPtcUtl_Encode
SzPtcUtl_EncodeEx

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/UNINST32.EXE
.exe windows:5 windows x86 arch:x86

36de80a0ca2ef0b5c09d271eafce31c3

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

42:6b:84:8f:7e:71:60:77:65:b4:c9:03:f0:19:f2:c2:03:c5:fa:95
Signer

Actual PE Digest

42:6b:84:8f:7e:71:60:77:65:b4:c9:03:f0:19:f2:c2:03:c5:fa:95

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

shlwapi

StrStrW
StrTrimW
StrStrIW
StrCmpIW
PathRemoveBackslashW
PathFileExistsA
PathIsRootW
PathFindFileNameW
PathIsDirectoryW
PathStripPathW
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
PathAddBackslashW

setupapi

CM_Locate_DevNodeW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller
SetupDiGetDeviceInstanceIdW

kernel32

CloseHandle
GetWindowsDirectoryW
DeleteFileW
lstrcpyW
SetFileAttributesW
VirtualFree
LeaveCriticalSection
GetLastError
VirtualAlloc
EnterCriticalSection
DeleteCriticalSection
lstrcpynW
SetErrorMode
GetCurrentProcess
GetCurrentThread
GlobalAlloc
GlobalFree
LocalFree
SetEndOfFile
WideCharToMultiByte
GetModuleFileNameW
GetTempPathW
LocalAlloc
lstrcmpW
SetThreadLocale
GetUserDefaultUILanguage
CreateMutexW
GetSystemWindowsDirectoryW
OpenProcess
GetSystemDirectoryW
SetLastError
Process32FirstW
ProcessIdToSessionId
Process32NextW
WTSGetActiveConsoleSessionId
GetModuleHandleA
CreateToolhelp32Snapshot
OutputDebugStringA
GetVersion
ExpandEnvironmentStringsW
GetCurrentThreadId
GetProfileStringW
WriteProfileStringW
GetPrivateProfileIntA
FindClose
GetTempPathA
DeleteFileA
GetShortPathNameW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetModuleFileNameA
GetStdHandle
HeapReAlloc
HeapCreate
ExitProcess
HeapSize
Sleep
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
RtlUnwind
RaiseException
GetStartupInfoW
HeapAlloc
HeapFree
WriteConsoleA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetProcAddress
GetLongPathNameW
GetPrivateProfileIntW
WritePrivateProfileStringW
lstrlenW
CreateFileW
GetFileAttributesW
GetVersionExW
LoadLibraryW
FindNextFileW
lstrcatW
lstrcmpiW
RemoveDirectoryW
MultiByteToWideChar
SetCurrentDirectoryW
WriteFile
GetPrivateProfileStringW
GetModuleHandleW
WaitForSingleObject
MoveFileExW
CreateProcessW
FreeLibrary
SetFilePointer
FindFirstFileW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
ReadFile
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetConsoleOutputCP
WriteConsoleW
CreateFileA

user32

LoadIconW
PeekMessageW
ReleaseDC
GetDlgItem
EndDialog
SetWindowPos
LoadStringW
MessageBoxW
GetSystemMetrics
TranslateMessage
EnableWindow
SetWindowTextW
GetWindowThreadProcessId
DispatchMessageW
DdeInitializeW
DdeCreateStringHandleW
PostMessageW
FindWindowW
DdeFreeStringHandle
DdeUninitialize
DdeCreateDataHandle
DdeClientTransaction
DdeConnect
DdeDisconnect
DdeFreeDataHandle
wsprintfW
GetDC
SetFocus
MessageBeep
DialogBoxParamW
KillTimer
GetWindowRect
MoveWindow
IsWindowVisible
IsWindow
ShowWindow
GetWindowLongW
GetForegroundWindow
GetClientRect
IsWindowEnabled
AttachThreadInput
GetParent
SetForegroundWindow
IsIconic
SetTimer
SendMessageW
MapWindowPoints

gdi32

LineTo
DeleteObject
SelectObject
CreatePen
MoveToEx

advapi32

SetSecurityDescriptorGroup
RegEnumValueW
RegDeleteKeyW
RegCreateKeyExW
ConvertSidToStringSidW
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
CreateProcessAsUserW
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
GetSecurityDescriptorDacl
RegEnumKeyExW
GetLengthSid
IsValidSecurityDescriptor
AddAce
RegSetKeySecurity
AddAccessAllowedAce
InitializeAcl
RegDeleteValueW
RegGetKeySecurity
GetAce
SetSecurityDescriptorDacl
LookupAccountNameW
InitializeSecurityDescriptor
GetAclInformation
RegEnumKeyW
GetUserNameW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
AccessCheck
ImpersonateSelf
AllocateAndInitializeSid
SetSecurityDescriptorOwner
RevertToSelf
FreeSid
OpenThreadToken

shell32

ShellExecuteExW
SHChangeNotify
SHGetFolderPathW
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteW

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LaunchManager_Dritek_7.0.4_W8x64/UuinstLM.bat
LaunchManager_Dritek_7.0.4_W8x64/VistaVol.dll
.dll windows:5 windows x86 arch:x86

1b929c3f3eeaf824c0ef24844fa7dd72

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17-10-2006 00:00

Not After

16-10-2009 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6f:49:55:41:37:a0:70:06:f9:a5:b6:f1:61:b9:00:cf:bd:cc:89:f8
Signer

Actual PE Digest

6f:49:55:41:37:a0:70:06:f9:a5:b6:f1:61:b9:00:cf:bd:cc:89:f8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitOnceExecuteOnce
CloseHandle
CreateEventW
WaitForSingleObject
ResetEvent
SetEvent
InterlockedIncrement
InterlockedDecrement
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
HeapAlloc
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetModuleHandleA

user32

PostMessageW

ole32

CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree

Exports

Exports

VistaVol_DeInit
VistaVol_DeviceChanged
VistaVol_GetMute
VistaVol_GetVolumeLevel
VistaVol_Init
VistaVol_InitEx
VistaVol_OnDefaultDeviceChanged
VistaVol_OnDeviceRemoved
VistaVol_Register
VistaVol_SetMute
VistaVol_SetVolumeLevel
VistaVol_Unregister
VistaVol_VolumeLevelStepDown
VistaVol_VolumeLevelStepUp

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/WND2FILE.DLL
.dll windows:4 windows x86 arch:x86

f2a7f3fd605127138b4990dfa2acea0f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17-10-2006 00:00

Not After

16-10-2009 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

af:34:79:6a:14:5d:32:0e:72:df:a4:17:96:44:36:7c:a0:b2:22:f5
Signer

Actual PE Digest

af:34:79:6a:14:5d:32:0e:72:df:a4:17:96:44:36:7c:a0:b2:22:f5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryW
lstrcpyA
WideCharToMultiByte
GetVersionExW
MultiByteToWideChar
lstrcmpiW
GetModuleFileNameW
lstrlenW
lstrcatW
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
HeapReAlloc
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetStringTypeA
GetStringTypeW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
LCMapStringA

user32

IsWindowEnabled
GetClassNameW
IsIconic
EnumWindows
wsprintfW
IsWindow
GetWindowThreadProcessId
IsWindowVisible

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

FindExecutableW

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Exports

Exports

WND2FILE_GetExecutableFileFromWindowHandle
WND2FILE_GetExecutableFileFromWindowHandleA
WND2FILE_GetExecutableFileFromWindowHandleW
WND2FILE_GetWindowHandleFromExecutableFile
WND2FILE_GetWindowHandleFromExecutableFileA
WND2FILE_GetWindowHandleFromExecutableFileW
WND2FILE_GetWindowHandlesFromExecutableFile
WND2FILE_GetWindowHandlesFromExecutableFileA
WND2FILE_GetWindowHandlesFromExecutableFileW

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/WmiProp.dll
.dll windows:4 windows x86 arch:x86

0411aaa0e6d02e841e37951cd3594c51

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

65:62:48:15:2b:d6:98:c6:09:4b:30:ba:cd:76:9b:4c:fd:60:b4:56
Signer

Actual PE Digest

65:62:48:15:2b:d6:98:c6:09:4b:30:ba:cd:76:9b:4c:fd:60:b4:56

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetStringTypeW
GetLastError
lstrlenA
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
InitializeCriticalSection
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA

user32

wsprintfW

ole32

CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoInitializeEx
CoSetProxyBlanket

oleaut32

VariantClear
SysFreeString
SysAllocString

Exports

Exports

WMIP_Deinitial
WMIP_GetCurrentNameSpaceA
WMIP_GetCurrentNameSpaceW
WMIP_GetInstanceIndexByNameA
WMIP_GetInstanceIndexByNameW
WMIP_GetPropertyByteArrayA
WMIP_GetPropertyByteArrayW
WMIP_GetPropertyByteValueA
WMIP_GetPropertyByteValueByIndexA
WMIP_GetPropertyByteValueByIndexW
WMIP_GetPropertyByteValueByNameA
WMIP_GetPropertyByteValueByNameW
WMIP_GetPropertyByteValueW
WMIP_GetPropertyDWordArrayA
WMIP_GetPropertyDWordArrayW
WMIP_GetPropertyDWordValueA
WMIP_GetPropertyDWordValueByIndexA
WMIP_GetPropertyDWordValueByIndexW
WMIP_GetPropertyDWordValueByNameA
WMIP_GetPropertyDWordValueByNameW
WMIP_GetPropertyDWordValueW
WMIP_GetPropertyStringA
WMIP_GetPropertyStringByIndexA
WMIP_GetPropertyStringByIndexW
WMIP_GetPropertyStringByNameA
WMIP_GetPropertyStringByNameW
WMIP_GetPropertyStringW
WMIP_GetPropertyWordArrayA
WMIP_GetPropertyWordArrayW
WMIP_GetPropertyWordValueA
WMIP_GetPropertyWordValueByIndexA
WMIP_GetPropertyWordValueByIndexW
WMIP_GetPropertyWordValueByNameA
WMIP_GetPropertyWordValueByNameW
WMIP_GetPropertyWordValueW
WMIP_Initial
WMIP_SetNameSpaceA
WMIP_SetNameSpaceW

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/addsvis.bat
LaunchManager_Dritek_7.0.4_W8x64/aiPlatformSetupAddOn.dll
.dll windows:5 windows x86 arch:x86

18a8be5315517ad21d20d9557486a8ff

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c1:fb:84:ca:e6:84:81:7f:ba:37:9d:18:9f:ab:a4:e2:17:f2:d1:21
Signer

Actual PE Digest

c1:fb:84:ca:e6:84:81:7f:ba:37:9d:18:9f:ab:a4:e2:17:f2:d1:21

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReleaseMutex
GetLastError
SetLastError
DeleteFileW
CreateProcessW
GetModuleFileNameW
CreateMutexW
SetFilePointer
WriteFile
OutputDebugStringA
FormatMessageA
GetModuleHandleA
InterlockedCompareExchange
InterlockedExchange
GetFileAttributesW
lstrlenW
GetTempPathW
ReadFile
GetCurrentDirectoryW
LocalFree
WaitForSingleObject
SetEnvironmentVariableW
GetEnvironmentVariableW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
Sleep
RaiseException
GetSystemDirectoryW
GetWindowsDirectoryW
QueryPerformanceCounter
GetSystemTimeAsFileTime
FlushFileBuffers
MultiByteToWideChar
WideCharToMultiByte
SetEnvironmentVariableA
CompareStringW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
SetStdHandle
WriteConsoleW
GetTimeZoneInformation
GetTickCount
LoadLibraryW
GetCurrentThreadId
GetVersionExW
GetSystemTime
GetCurrentProcessId
CloseHandle
GetFileSizeEx
CreateFileW
CopyFileW
CreateDirectoryW
FindResourceExW
FindResourceW
SizeofResource
LockResource
LoadResource
InterlockedDecrement
ExpandEnvironmentStringsW
GetCurrentProcess
FreeLibrary
GetModuleHandleW
GetProcAddress
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
SetHandleCount
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetLocaleInfoW
IsProcessorFeaturePresent
HeapCreate
GetStdHandle
LCMapStringW
GetCPInfo
RtlUnwind
ExitProcess
GetConsoleMode
GetConsoleCP
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
InterlockedIncrement
EncodePointer
DecodePointer
InitializeCriticalSection
lstrlenA

user32

MessageBoxW
LoadStringW

advapi32

OpenServiceW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CloseServiceHandle
QueryServiceStatus
OpenSCManagerW

shell32

CommandLineToArgvW
SHGetFolderPathW

ole32

CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoCreateInstance
PropVariantClear

oleaut32

VariantClear
SysFreeString
SysAllocString

shlwapi

PathRemoveBackslashW
PathUnExpandEnvStringsW
SHStrDupW

winmm

timeGetTime

Exports

Exports

AddOnAfterReplaceString
AddOnAfterWriteReg
InitialAddOnDLL
Setup_CheckExistedHardwareFeatures
UnInitialAddOnDLL

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/aipflib.dll
.dll windows:5 windows x86 arch:x86

9b430713f9e5b2bb253986e8262d5740

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:43:71:bb:51:55:35:e7:5b:3d:fc:e4:f2:d0:c5:9c:5f:f1:58:58
Signer

Actual PE Digest

8c:43:71:bb:51:55:35:e7:5b:3d:fc:e4:f2:d0:c5:9c:5f:f1:58:58

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
GetSystemTime
ExpandEnvironmentStringsW
GetModuleHandleW
GetVersionExW
SetEvent
CreateEventW
GetTickCount
LoadLibraryW
CreateNamedPipeW
ConnectNamedPipe
ReadFile
FlushFileBuffers
DisconnectNamedPipe
ReleaseMutex
CreateMutexW
GetCurrentThreadId
SetLastError
DeleteFileW
CreateProcessW
GetModuleFileNameW
SetFilePointer
OutputDebugStringA
SetEnvironmentVariableW
GetEnvironmentVariableW
GetFileAttributesW
GetTempPathW
GetCurrentDirectoryW
CopyFileW
GetCommandLineW
InterlockedCompareExchange
InterlockedExchange
GetStdHandle
SetUnhandledExceptionFilter
GetProcessTimes
TerminateProcess
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
QueryPerformanceCounter
GetSystemDirectoryW
GetWindowsDirectoryW
RaiseException
MultiByteToWideChar
WideCharToMultiByte
DecodePointer
EncodePointer
HeapFree
HeapAlloc
CreateDirectoryW
WaitForSingleObject
GetCommandLineA
FindClose
lstrlenA
SetEnvironmentVariableA
CompareStringW
GetCurrentProcessId
ProcessIdToSessionId
GetSystemTimeAsFileTime
GetModuleHandleA
GetProcAddress
FreeLibrary
LoadLibraryA
WriteFile
SetFilePointerEx
SetEndOfFile
RemoveDirectoryA
CreateDirectoryA
GetFileSizeEx
DeleteFileA
CreateFileA
MapViewOfFileEx
CreateFileMappingA
UnmapViewOfFile
GetCurrentProcess
FindNextFileA
FindFirstFileA
LocalFree
FormatMessageA
GetLastError
Sleep
GetTempPathA
InterlockedDecrement
InterlockedIncrement
CloseHandle
GetSystemInfo
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
WriteConsoleW
GetTimeZoneInformation
UnhandledExceptionFilter
GetConsoleCP
GetConsoleMode
SetStdHandle
GetFileType
HeapReAlloc
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
SetHandleCount
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
HeapDestroy
HeapCreate
GetLocaleInfoW
LCMapStringW
GetCPInfo
RtlUnwind
GetProcessHeap
ExitProcess
InitializeCriticalSection

user32

MessageBoxW

advapi32

OpenProcessToken
GetSidSubAuthorityCount
GetSidSubAuthority
OpenServiceA
ControlService
QueryServiceStatusEx
LookupAccountSidW
GetTokenInformation
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
DuplicateTokenEx
AllocateAndInitializeSid
CheckTokenMembership
FreeSid

shell32

SHGetFolderPathW
CommandLineToArgvW

ole32

CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
CoInitializeSecurity

oleaut32

VariantClear
SafeArrayUnaccessData
SafeArrayAccessData
SysFreeString
SysAllocString

shlwapi

PathCombineA
PathRemoveBackslashW
PathFileExistsA
PathFileExistsW

wtsapi32

WTSQueryUserToken

winmm

timeGetTime

psapi

QueryWorkingSet

Exports

Exports

DsiCreateInstance
DsiDllCanUnloadNow

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/apps.json
LaunchManager_Dritek_7.0.4_W8x64/dsiwmis.exe
.exe windows:5 windows x86 arch:x86

b78a605ba0aeff2933795b6724ff1978

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01-05-2012 00:00

Not After

31-12-2012 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01-10-2009 00:00

Not After

15-10-2012 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f7:a3:3e:67:04:a0:c1:5d:c2:a4:d6:2e:1b:f2:e6:75:d2:9b:93:79
Signer

Actual PE Digest

f7:a3:3e:67:04:a0:c1:5d:c2:a4:d6:2e:1b:f2:e6:75:d2:9b:93:79

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSFreeMemory
WTSEnumerateSessionsW
WTSQuerySessionInformationW
WTSQueryUserToken

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
OpenProcessToken
DuplicateTokenEx
SetTokenInformation
CreateProcessAsUserW
ConvertStringSecurityDescriptorToSecurityDescriptorW
AllocateAndInitializeSid
CheckTokenMembership
FreeSid

kernel32

GetLastError
FormatMessageA
LocalFree
CloseHandle
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcess
WaitForSingleObject
UnmapViewOfFile
CreateFileMappingA
MapViewOfFileEx
CreateFileA
DeleteFileA
GetSystemInfo
GetFileSizeEx
CreateDirectoryA
RemoveDirectoryA
WriteFile
LoadLibraryA
FreeLibrary
GetProcAddress
Sleep
GetSystemTimeAsFileTime
OpenEventW
CreateFileW
GetCurrentThreadId
CreateEventW
ResetEvent
CreateDirectoryW
CopyFileW
GetCurrentProcessId
GetSystemTime
ExpandEnvironmentStringsW
GetModuleHandleW
GetVersionExW
InterlockedIncrement
ProcessIdToSessionId
GetModuleHandleA
LoadLibraryW
lstrlenW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
lstrcpynW
GetExitCodeThread
WaitForMultipleObjects
TerminateThread
ReleaseMutex
SetLastError
DeleteFileW
CreateProcessW
GetModuleFileNameW
CreateMutexW
SetFilePointer
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WTSGetActiveConsoleSessionId
SetEnvironmentVariableW
GetEnvironmentVariableW
GetFileAttributesW
GetTempPathW
ReadFile
GetCurrentDirectoryW
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent
HeapDestroy
QueryPerformanceCounter
GetSystemDirectoryW
GetWindowsDirectoryW
RaiseException
FlushFileBuffers
MultiByteToWideChar
WideCharToMultiByte
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
SetStdHandle
WriteConsoleW
GetTimeZoneInformation
GetStartupInfoW
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
GetLocaleInfoW
GetStdHandle
IsProcessorFeaturePresent
GetStringTypeW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
HeapSetInformation
UnhandledExceptionFilter
SetEvent
CreateThread
LCMapStringW
GetCPInfo
RtlUnwind
ExitProcess
GetConsoleMode
GetConsoleCP
TerminateProcess
SetUnhandledExceptionFilter
InterlockedDecrement
GetTickCount
CompareStringW
SetEnvironmentVariableA
lstrlenA
DecodePointer
InitializeCriticalSection
GetCommandLineW
EncodePointer

user32

MessageBoxW
wsprintfW

shell32

SHGetFolderPathW
CommandLineToArgvW

ole32

CoInitializeSecurity
CoInitialize
CoCreateInstance
CoInitializeEx
CoUninitialize

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantInit
SysAllocString

winmm

timeGetTime

Sections

.text
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/dummy.url
.url
LaunchManager_Dritek_7.0.4_W8x64/gdiplus.dll
.dll windows:5 windows x86 arch:x86

7941976a82dd7ff8b1a2ea069878fab3

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12-05-1997 00:00

Not After

07-01-2004 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28-02-2001 00:00

Not After

06-01-2004 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:06:2a:8d:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

29-03-2001 21:27

Not After

29-05-2002 21:37

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2001 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-12-2000 08:00

Not After

12-11-2005 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetOEMCP
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
InterlockedExchange
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
RaiseException
Sleep
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
SetEvent
lstrcmpiA
CreateThread
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
GetSystemDefaultLCID
GetProcAddress
GetModuleHandleW
GetACP
GetVersionExA
VirtualQuery
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetCommandLineA
GetSystemInfo
HeapReAlloc
HeapFree
VirtualAlloc
IsValidLocale
ConvertDefaultLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
GetProfileIntA
GetProfileStringA
lstrcmpiW
IsDBCSLeadByteEx
LocalReAlloc
MulDiv
SetLastError
LocalAlloc
LocalFree
GetFileTime
SearchPathW
SearchPathA
InterlockedIncrement
CreateSemaphoreA
lstrcpyW
lstrcatW
LoadLibraryW
lstrcpyA
lstrcatA
GetSystemDirectoryA
CreateFileMappingW
ReleaseSemaphore
GetProfileSectionA
CreateFileW
SetEndOfFile
SetFilePointer
ReadFile
UnlockFile
GetFileInformationByHandle
LockFile
FlushFileBuffers
GetLastError
VirtualFree
GlobalAlloc
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GlobalLock
GlobalSize
GlobalUnlock
GlobalFree
HeapCreate
GetModuleHandleA
GetSystemDirectoryW
GetWindowsDirectoryA
FreeLibrary
HeapDestroy
LoadLibraryA

user32

ReleaseDC
LoadBitmapW
LoadBitmapA
wsprintfW
SystemParametersInfoA
GetDC
wsprintfA
GetSysColor
UnregisterClassA
DestroyWindow
GetSystemMetrics
DefWindowProcA
CreateWindowExA
RegisterClassA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
GetClientRect
GetDesktopWindow
GetWindowRect
WindowFromDC
CreateIconIndirect
GetIconInfo
ClientToScreen
wvsprintfA
GetDCEx
GetWindowLongA
GetClassLongA

gdi32

GetNearestPaletteIndex
GetDIBColorTable
FillRgn
SetMiterLimit
CreateSolidBrush
StrokePath
GetGraphicsMode
SetPolyFillMode
FillPath
StrokeAndFillPath
GetViewportExtEx
ExtTextOutA
GetTextCharsetInfo
TranslateCharsetInfo
PolylineTo
Polyline
LineTo
GetCurrentPositionEx
ArcTo
SetArcDirection
SelectClipPath
GetPath
CloseFigure
AbortPath
FlattenPath
WidenPath
BeginPath
Ellipse
AngleArc
PolyBezierTo
PolyBezier
RoundRect
PolyDraw
Pie
Chord
Arc
EndPath
OffsetClipRgn
GetRgnBox
CombineRgn
SetPaletteEntries
ResizePalette
ExcludeClipRect
MoveToEx
PlayEnhMetaFile
GetWinMetaFileBits
PlgBlt
BitBlt
OffsetViewportOrgEx
StretchBlt
ScaleViewportExtEx
ScaleWindowExtEx
CombineTransform
SetMapperFlags
CreatePen
CreateDIBitmap
CreatePatternBrush
ExtSelectClipRgn
GetBkMode
GetTextAlign
ModifyWorldTransform
ExtCreateRegion
CreateCompatibleBitmap
GetNearestColor
SetStretchBltMode
StretchDIBits
SetTextAlign
SetTextJustification
PolyPolygon
PlayMetaFileRecord
ExtCreatePen
GetWorldTransform
GetROP2
SetROP2
Rectangle
Polygon
IntersectClipRect
SetBrushOrgEx
GetClipRgn
SelectClipRgn
GetBkColor
GetTextColor
CreatePenIndirect
GetObjectW
DPtoLP
CreateDIBPatternBrushPt
ExtTextOutW
SetBitmapBits
CreateEnhMetaFileW
GdiComment
GetMetaFileW
GetMetaFileA
SaveDC
SetWindowOrgEx
SetViewportOrgEx
SetGraphicsMode
SetWorldTransform
GetEnhMetaFileW
GetEnhMetaFileA
GetEnhMetaFileBits
CopyEnhMetaFileA
CopyMetaFileA
DeleteMetaFile
GetEnhMetaFileHeader
SetMetaFileBitsEx
SetEnhMetaFileBits
CreateEnhMetaFileA
SetMapMode
SetViewportExtEx
SetWindowExtEx
PlayMetaFile
CloseEnhMetaFile
DeleteEnhMetaFile
SetMetaRgn
GetMetaFileBitsEx
EnumMetaFile
EnumEnhMetaFile
PlayEnhMetaFileRecord
RestoreDC
GetStockObject
CreateBitmap
SetTextColor
SetBkColor
SetBkMode
SetDIBits
CreatePalette
GetSystemPaletteEntries
GetSystemPaletteUse
GetDeviceCaps
ExtEscape
GetObjectType
GetPixel
SetDIBColorTable
DeleteObject
SelectPalette
GetTextFaceA
GetTextMetricsA
GetTextFaceW
GetTextMetricsW
EnumFontFamiliesExA
EnumFontFamiliesExW
SelectObject
CreateFontIndirectW
CreateFontIndirectA
GetRegionData
DeleteDC
CreateDCA
CreateICA
CreateRectRgn
GetRandomRgn
LPtoDP
GetWindowExtEx
PolyPolyline
GetWindowOrgEx
GetViewportOrgEx
GetMapMode
SetICMMode
Escape
GetDCOrgEx
GetObjectA
GetCurrentObject
GetDIBits
CreateCompatibleDC
CreateDIBSection
RealizePalette
GetPaletteEntries
GdiFlush
PatBlt
CreateBrushIndirect

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal

advapi32

RegSetValueExA
RegCloseKey
RegEnumValueW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegEnumKeyExA
RegEnumKeyExW
RegCreateKeyExA
RegQueryValueExW
RegSetValueExW
RegEnumValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW

Exports

Exports

GdipAddPathArc
GdipAddPathArcI
GdipAddPathBezier
GdipAddPathBezierI
GdipAddPathBeziers
GdipAddPathBeziersI
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathClosedCurve2I
GdipAddPathClosedCurveI
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathCurve2I
GdipAddPathCurve3
GdipAddPathCurve3I
GdipAddPathCurveI
GdipAddPathEllipse
GdipAddPathEllipseI
GdipAddPathLine
GdipAddPathLine2
GdipAddPathLine2I
GdipAddPathLineI
GdipAddPathPath
GdipAddPathPie
GdipAddPathPieI
GdipAddPathPolygon
GdipAddPathPolygonI
GdipAddPathRectangle
GdipAddPathRectangleI
GdipAddPathRectangles
GdipAddPathRectanglesI
GdipAddPathString
GdipAddPathStringI
GdipAlloc
GdipBeginContainer
GdipBeginContainer2
GdipBeginContainerI
GdipBitmapGetPixel
GdipBitmapLockBits
GdipBitmapSetPixel
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipClearPathMarkers
GdipCloneBitmapArea
GdipCloneBitmapAreaI
GdipCloneBrush
GdipCloneCustomLineCap
GdipCloneFont
GdipCloneFontFamily
GdipCloneImage
GdipCloneImageAttributes
GdipCloneMatrix
GdipClonePath
GdipClonePen
GdipCloneRegion
GdipCloneStringFormat
GdipClosePathFigure
GdipClosePathFigures
GdipCombineRegionPath
GdipCombineRegionRect
GdipCombineRegionRectI
GdipCombineRegionRegion
GdipComment
GdipCreateAdjustableArrowCap
GdipCreateBitmapFromDirectDrawSurface
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateCachedBitmap
GdipCreateCustomLineCap
GdipCreateFont
GdipCreateFontFamilyFromName
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCreateFontFromLogfontW
GdipCreateFromHDC
GdipCreateFromHDC2
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreateHalftonePalette
GdipCreateHatchBrush
GdipCreateImageAttributes
GdipCreateLineBrush
GdipCreateLineBrushFromRect
GdipCreateLineBrushFromRectI
GdipCreateLineBrushFromRectWithAngle
GdipCreateLineBrushFromRectWithAngleI
GdipCreateLineBrushI
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCreateMatrix3I
GdipCreateMetafileFromEmf
GdipCreateMetafileFromFile
GdipCreateMetafileFromStream
GdipCreateMetafileFromWmf
GdipCreateMetafileFromWmfFile
GdipCreatePath
GdipCreatePath2
GdipCreatePath2I
GdipCreatePathGradient
GdipCreatePathGradientFromPath
GdipCreatePathGradientI
GdipCreatePathIter
GdipCreatePen1
GdipCreatePen2
GdipCreateRegion
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionRgnData
GdipCreateSolidFill
GdipCreateStreamOnFile
GdipCreateStringFormat
GdipCreateTexture
GdipCreateTexture2
GdipCreateTexture2I
GdipCreateTextureIA
GdipCreateTextureIAI
GdipDeleteBrush
GdipDeleteCachedBitmap
GdipDeleteCustomLineCap
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteMatrix
GdipDeletePath
GdipDeletePathIter
GdipDeletePen
GdipDeletePrivateFontCollection
GdipDeleteRegion
GdipDeleteStringFormat
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawArc
GdipDrawArcI
GdipDrawBezier
GdipDrawBezierI
GdipDrawBeziers
GdipDrawBeziersI
GdipDrawCachedBitmap
GdipDrawClosedCurve
GdipDrawClosedCurve2
GdipDrawClosedCurve2I
GdipDrawClosedCurveI
GdipDrawCurve
GdipDrawCurve2
GdipDrawCurve2I
GdipDrawCurve3
GdipDrawCurve3I
GdipDrawCurveI
GdipDrawDriverString
GdipDrawEllipse
GdipDrawEllipseI
GdipDrawImage
GdipDrawImageI
GdipDrawImagePointRect
GdipDrawImagePointRectI
GdipDrawImagePoints
GdipDrawImagePointsI
GdipDrawImagePointsRect
GdipDrawImagePointsRectI
GdipDrawImageRect
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipDrawLine
GdipDrawLineI
GdipDrawLines
GdipDrawLinesI
GdipDrawPath
GdipDrawPie
GdipDrawPieI
GdipDrawPolygon
GdipDrawPolygonI
GdipDrawRectangle
GdipDrawRectangleI
GdipDrawRectangles
GdipDrawRectanglesI
GdipDrawString
GdipEmfToWmfBits
GdipEndContainer
GdipEnumerateMetafileDestPoint
GdipEnumerateMetafileDestPointI
GdipEnumerateMetafileDestPoints
GdipEnumerateMetafileDestPointsI
GdipEnumerateMetafileDestRect
GdipEnumerateMetafileDestRectI
GdipEnumerateMetafileSrcRectDestPoint
GdipEnumerateMetafileSrcRectDestPointI
GdipEnumerateMetafileSrcRectDestPoints
GdipEnumerateMetafileSrcRectDestPointsI
GdipEnumerateMetafileSrcRectDestRect
GdipEnumerateMetafileSrcRectDestRectI
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillClosedCurve2I
GdipFillClosedCurveI
GdipFillEllipse
GdipFillEllipseI
GdipFillPath
GdipFillPie
GdipFillPieI
GdipFillPolygon
GdipFillPolygon2
GdipFillPolygon2I
GdipFillPolygonI
GdipFillRectangle
GdipFillRectangleI
GdipFillRectangles
GdipFillRectanglesI
GdipFillRegion
GdipFlattenPath
GdipFlush
GdipFree
GdipGetAdjustableArrowCapFillState
GdipGetAdjustableArrowCapHeight
GdipGetAdjustableArrowCapMiddleInset
GdipGetAdjustableArrowCapWidth
GdipGetAllPropertyItems
GdipGetBrushType
GdipGetCellAscent
GdipGetCellDescent
GdipGetClip
GdipGetClipBounds
GdipGetClipBoundsI
GdipGetCompositingMode
GdipGetCompositingQuality
GdipGetCustomLineCapBaseCap
GdipGetCustomLineCapBaseInset
GdipGetCustomLineCapStrokeCaps
GdipGetCustomLineCapStrokeJoin
GdipGetCustomLineCapType
GdipGetCustomLineCapWidthScale
GdipGetDC
GdipGetDpiX
GdipGetDpiY
GdipGetEmHeight
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipGetFamily
GdipGetFamilyName
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFontUnit
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetHatchBackgroundColor
GdipGetHatchForegroundColor
GdipGetHatchStyle
GdipGetHemfFromMetafile
GdipGetImageAttributesAdjustedPalette
GdipGetImageBounds
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageFlags
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageThumbnail
GdipGetImageType
GdipGetImageVerticalResolution
GdipGetImageWidth
GdipGetInterpolationMode
GdipGetLineBlend
GdipGetLineBlendCount
GdipGetLineColors
GdipGetLineGammaCorrection
GdipGetLinePresetBlend
GdipGetLinePresetBlendCount
GdipGetLineRect
GdipGetLineRectI
GdipGetLineSpacing
GdipGetLineTransform
GdipGetLineWrapMode
GdipGetLogFontA
GdipGetLogFontW
GdipGetMatrixElements
GdipGetMetafileDownLevelRasterizationLimit
GdipGetMetafileHeaderFromEmf
GdipGetMetafileHeaderFromFile
GdipGetMetafileHeaderFromMetafile
GdipGetMetafileHeaderFromStream
GdipGetMetafileHeaderFromWmf
GdipGetNearestColor
GdipGetPageScale
GdipGetPageUnit
GdipGetPathData
GdipGetPathFillMode
GdipGetPathGradientBlend
GdipGetPathGradientBlendCount
GdipGetPathGradientCenterColor
GdipGetPathGradientCenterPoint
GdipGetPathGradientCenterPointI
GdipGetPathGradientFocusScales
GdipGetPathGradientGammaCorrection
GdipGetPathGradientPath
GdipGetPathGradientPointCount
GdipGetPathGradientPresetBlend
GdipGetPathGradientPresetBlendCount
GdipGetPathGradientRect
GdipGetPathGradientRectI
GdipGetPathGradientSurroundColorCount
GdipGetPathGradientSurroundColorsWithCount
GdipGetPathGradientTransform
GdipGetPathGradientWrapMode
GdipGetPathLastPoint
GdipGetPathPoints
GdipGetPathPointsI
GdipGetPathTypes
GdipGetPathWorldBounds
GdipGetPathWorldBoundsI
GdipGetPenBrushFill
GdipGetPenColor
GdipGetPenCompoundArray
GdipGetPenCompoundCount
GdipGetPenCustomEndCap
GdipGetPenCustomStartCap
GdipGetPenDashArray
GdipGetPenDashCap197819
GdipGetPenDashCount
GdipGetPenDashOffset
GdipGetPenDashStyle
GdipGetPenEndCap
GdipGetPenFillType
GdipGetPenLineJoin
GdipGetPenMiterLimit
GdipGetPenMode
GdipGetPenStartCap
GdipGetPenTransform
GdipGetPenUnit
GdipGetPenWidth
GdipGetPixelOffsetMode
GdipGetPointCount
GdipGetPropertyCount
GdipGetPropertyIdList
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetPropertySize
GdipGetRegionBounds
GdipGetRegionBoundsI
GdipGetRegionData
GdipGetRegionDataSize
GdipGetRegionHRgn
GdipGetRegionScans
GdipGetRegionScansCount
GdipGetRegionScansI
GdipGetRenderingOrigin
GdipGetSmoothingMode
GdipGetSolidFillColor
GdipGetStringFormatAlign
GdipGetStringFormatDigitSubstitution
GdipGetStringFormatFlags
GdipGetStringFormatHotkeyPrefix
GdipGetStringFormatLineAlign
GdipGetStringFormatMeasurableCharacterRangeCount
GdipGetStringFormatTabStopCount
GdipGetStringFormatTabStops
GdipGetStringFormatTrimming
GdipGetTextContrast
GdipGetTextRenderingHint
GdipGetTextureImage
GdipGetTextureTransform
GdipGetTextureWrapMode
GdipGetVisibleClipBounds
GdipGetVisibleClipBoundsI
GdipGetWorldTransform
GdipGraphicsClear
GdipImageForceValidation
GdipImageGetFrameCount
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageRotateFlip
GdipImageSelectActiveFrame
GdipInvertMatrix
GdipIsClipEmpty
GdipIsEmptyRegion
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsMatrixEqual
GdipIsMatrixIdentity
GdipIsMatrixInvertible
GdipIsOutlineVisiblePathPoint
GdipIsOutlineVisiblePathPointI
GdipIsStyleAvailable
GdipIsVisibleClipEmpty
GdipIsVisiblePathPoint
GdipIsVisiblePathPointI
GdipIsVisiblePoint
GdipIsVisiblePointI
GdipIsVisibleRect
GdipIsVisibleRectI
GdipIsVisibleRegionPoint
GdipIsVisibleRegionPointI
GdipIsVisibleRegionRect
GdipIsVisibleRegionRectI
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipMeasureCharacterRanges
GdipMeasureDriverString
GdipMeasureString
GdipMultiplyLineTransform
GdipMultiplyMatrix
GdipMultiplyPathGradientTransform
GdipMultiplyPenTransform
GdipMultiplyTextureTransform
GdipMultiplyWorldTransform
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPathIterCopyData
GdipPathIterEnumerate
GdipPathIterGetCount
GdipPathIterGetSubpathCount
GdipPathIterHasCurve
GdipPathIterIsValid
GdipPathIterNextMarker
GdipPathIterNextMarkerPath
GdipPathIterNextPathType
GdipPathIterNextSubpath
GdipPathIterNextSubpathPath
GdipPathIterRewind
GdipPlayMetafileRecord
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipRecordMetafile
GdipRecordMetafileFileName
GdipRecordMetafileFileNameI
GdipRecordMetafileI
GdipRecordMetafileStream
GdipRecordMetafileStreamI
GdipReleaseDC
GdipRemovePropertyItem
GdipResetClip
GdipResetImageAttributes
GdipResetLineTransform
GdipResetPageTransform
GdipResetPath
GdipResetPathGradientTransform
GdipResetPenTransform
GdipResetTextureTransform
GdipResetWorldTransform
GdipRestoreGraphics
GdipReversePath
GdipRotateLineTransform
GdipRotateMatrix
GdipRotatePathGradientTransform
GdipRotatePenTransform
GdipRotateTextureTransform
GdipRotateWorldTransform
GdipSaveAdd
GdipSaveAddImage
GdipSaveGraphics
GdipSaveImageToFile
GdipSaveImageToStream
GdipScaleLineTransform
GdipScaleMatrix
GdipScalePathGradientTransform
GdipScalePenTransform
GdipScaleTextureTransform
GdipScaleWorldTransform
GdipSetAdjustableArrowCapFillState
GdipSetAdjustableArrowCapHeight
GdipSetAdjustableArrowCapMiddleInset
GdipSetAdjustableArrowCapWidth
GdipSetClipGraphics
GdipSetClipHrgn
GdipSetClipPath
GdipSetClipRect
GdipSetClipRectI
GdipSetClipRegion
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetCustomLineCapBaseCap
GdipSetCustomLineCapBaseInset
GdipSetCustomLineCapStrokeCaps
GdipSetCustomLineCapStrokeJoin

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/help.chm
.chm
LaunchManager_Dritek_7.0.4_W8x64/intel_rr.ini
LaunchManager_Dritek_7.0.4_W8x64/runxx.exe
.exe windows:4 windows x86 arch:x86

3c7317e5a1e0d6111c70ea72c51a4d2a

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17-10-2006 00:00

Not After

16-10-2009 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

71:b9:85:84:a4:1b:83:ee:ae:90:f6:32:98:53:0a:fd:15:87:65:4d
Signer

Actual PE Digest

71:b9:85:84:a4:1b:83:ee:ae:90:f6:32:98:53:0a:fd:15:87:65:4d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateProcessW
GetStartupInfoW
LocalFree
InitializeCriticalSection
LoadLibraryA
RaiseException
RtlUnwind
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

shell32

ShellExecuteExW
CommandLineToArgvW

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LaunchManager_Dritek_7.0.4_W8x64/x64Commander.exe
.exe windows:4 windows x64 arch:x64

eed21ee37dddea2f022ecd4b80da009f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17-10-2006 00:00

Not After

16-10-2009 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f3:15:ec:cb:7d:64:4f:af:ce:c2:f7:04:49:57:1b:1d:0a:4e:03:57
Signer

Actual PE Digest

f3:15:ec:cb:7d:64:4f:af:ce:c2:f7:04:49:57:1b:1d:0a:4e:03:57

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle
CreateProcessW
GetStartupInfoW
LocalFree
InitializeCriticalSection
LoadLibraryA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
GetLastError
RtlVirtualUnwind
GetModuleHandleA
GetProcAddress
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapReAlloc

shell32

ShellExecuteExW
CommandLineToArgvW

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d90ac94ff22c174e8c4ff0db5b137461

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9cCertificate

Extended Key Usages

Key Usages

61:0c:12:06:00:00:00:00:00:1bCertificate

Key Usages

d5:4a:1d:4f:25:3b:df:1a:4a:a2:e9:8e:67:8d:e0:9b:c4:63:25:08Signer

Headers

File Characteristics

Imports

winmm

kernel32

user32

Exports

Exports

Sections

.text Size: 95KB - Virtual size: 94KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

15d1a8ea27c634088e401db37908d9cc

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

61:0c:12:06:00:00:00:00:00:1bCertificate

Key Usages

db:56:77:6f:1a:bd:20:87:4b:a6:c9:5b:68:54:86:44:66:67:63:17Signer

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

kernel32

user32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 1024B - Virtual size: 944B

.reloc Size: 5KB - Virtual size: 4KB

0baa4ed612e60596e9afd575042c115d

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

d5:4a:1d:4f:25:3b:df:1a:4a:a2:e9:8e:67:8d:e0:9b:c4:63:25:08
Signer

.text
Size: 95KB - Virtual size: 94KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

db:56:77:6f:1a:bd:20:87:4b:a6:c9:5b:68:54:86:44:66:67:63:17
Signer

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 944B

.reloc
Size: 5KB - Virtual size: 4KB

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

25:0a:fd:f4:47:5a:4d:d3:4f:a7:92:e1:d4:ab:fe:56:85:85:2c:a2
Signer

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 2KB - Virtual size: 1KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

81:91:65:80:bf:8d:ff:f1:e1:88:f9:dc:e6:80:b6:22:19:a8:61:6f
Signer

.text
Size: 47KB - Virtual size: 46KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 3KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 952B

.reloc
Size: 4KB - Virtual size: 4KB

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate