blankgrabber | Launcher[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

Launcher.rar
Size

76.8MB
MD5

6866b7f520db04ad0803f08d6c995c54
SHA1

fb9a54dbe021176b19820008df678ea6857d501d
SHA256

bd5df8d5408f2d706ea3a73681985c10b44c531ba70c3313261ea13e0083e1fd
SHA512

563c7bf19136822790be76277bbbb926981c11fbc5a27cb4af86fa58b791fe3bf6b7656b8e959b7a64c17bbf77bb4f13b1e2d4e431590388782b29d3d1692698
SSDEEP

1572864:ivGU4XV6ScuNShawfIYnVWxQkIlUMl6QVQqAX5cyNLmqbU4/:i+Uk6SO0VGMMUQVQgqmW7

Score

10^/10

blankgrabber

Malware Config

Signatures

A stealer written in Python and packaged with Pyinstaller 1 IoCs

resource	yara_rule
static1/unpack002/p��$o.pyc	blankgrabber

Blankgrabber family
blankgrabber

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Launcher/Launcher.exe
unpack001/Launcher/support/logging/ru-ru/actionqueueetw.dll.mui

Files

Launcher.rar
.rar
Launcher/Launcher.exe
.exe windows:5 windows x64 arch:x64

1af6c885af093afc55142c2f1761dbe8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

CreateWindowExW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW

comctl32

ord380

kernel32

IsValidCodePage
GetStringTypeW
GetFileAttributesExW
HeapReAlloc
FlushFileBuffers
GetCurrentDirectoryW
GetACP
GetOEMCP
GetModuleHandleW
MulDiv
GetLastError
SetDllDirectoryW
GetModuleFileNameW
CreateSymbolicLinkW
GetProcAddress
GetCommandLineW
GetEnvironmentVariableW
GetCPInfo
ExpandEnvironmentStringsW
CreateDirectoryW
GetTempPathW
WaitForSingleObject
Sleep
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LoadLibraryExW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
CloseHandle
GetCurrentProcess
LocalFree
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
WriteConsoleW
SetEndOfFile
SetEnvironmentVariableW
RtlUnwindEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
RemoveDirectoryW
FindNextFileW
SetStdHandle
DeleteFileW
ReadFile
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW

advapi32

OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW

gdi32

SelectObject
DeleteObject
CreateFontIndirectW

Sections

.text
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
p��$o.pyc
Launcher/Redist/options.txt
Launcher/Redist/vc_redist.x644.exe
.exe windows:5 windows x86 arch:x86

8e2588a9cf43886de3449dfff03137b6

Code Sign

33:00:00:00:6f:65:2d:58:6d:07:11:46:28:00:00:00:00:00:6f
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20/03/2015, 17:32

Not After

20/06/2016, 17:32

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/06/2015, 17:42

Not After

04/09/2016, 17:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/10/2014, 18:11

Not After

01/01/2016, 18:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6b:c4:15:a1:23:fa:49:fb:dc:05:86:1f:21:48:b0:49:3b:d5:1d:dc:c6:72:35:17:aa:75:ea:bc:63:fa:76:f8
Signer

Actual PE Digest

6b:c4:15:a1:23:fa:49:fb:dc:05:86:1f:21:48:b0:49:3b:d5:1d:dc:c6:72:35:17:aa:75:ea:bc:63:fa:76:f8

Digest Algorithm

sha256

PE Digest Matches

true

57:19:7f:e6:ec:8b:ea:59:58:33:9f:f6:88:06:04:41:78:e0:04:94
Signer

Actual PE Digest

57:19:7f:e6:ec:8b:ea:59:58:33:9f:f6:88:06:04:41:78:e0:04:94

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

Imports

gdiplus

GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromResource
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipAlloc

advapi32

QueryServiceConfigW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
GetUserNameW
InitiateSystemShutdownExW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
DecryptFileW
ChangeServiceConfigW
ControlService
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegQueryInfoKeyW
RegSetValueExW
SetEntriesInAclA
SetSecurityDescriptorGroup
RegOpenKeyExW
GetTokenInformation
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
LookupAccountNameW
SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner

user32

GetMessageW
PeekMessageW
PostMessageW
IsWindow
PostQuitMessage
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
MsgWaitForMultipleObjects
WaitForInputIdle
LoadCursorW
BeginPaint
EndPaint
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
ReleaseDC
MessageBoxW
PostThreadMessageW
RegisterClassW
CreateWindowExW

oleaut32

VariantClear
VariantInit
SysAllocString
SysFreeString

gdi32

GetDeviceCaps
CreateDCW

shell32

ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
StringFromGUID2
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCurrentProcess
InitializeCriticalSection
TlsFree
DeleteCriticalSection
CloseHandle
TlsGetValue
Sleep
GetLastError
ReleaseMutex
TlsSetValue
TlsAlloc
GetCurrentThreadId
GetVersionExW
GetModuleHandleW
ReadFile
SetFilePointerEx
CreateFileW
GetCurrentProcessId
GetProcessId
WriteFile
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
CompareStringW
LocalFree
CreateNamedPipeW
WaitForSingleObject
OpenProcess
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
GetComputerNameW
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
HeapAlloc
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
InterlockedExchange
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
HeapSetInformation
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetEndOfFile
ResetEvent
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
DeleteFileW
GetThreadLocale
GetTimeZoneInformation
TerminateProcess
UnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GlobalAlloc
IsProcessorFeaturePresent
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
EncodePointer
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
GlobalFree
MoveFileExW
CopyFileW
GetFileSizeEx
GetModuleHandleA
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetLocalTime
UnmapViewOfFile
IsDebuggerPresent
DuplicateHandle
HeapFree
FormatMessageW
GetTempFileNameW
GetWindowsDirectoryW
CompareStringA
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
ExitProcess
SetUnhandledExceptionFilter
GetStartupInfoW
GetCommandLineW
GetFullPathNameW
CreateDirectoryW
GetProcessHeap

cabinet

ord22
ord20
ord23

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

msi

ord88
ord17
ord125
ord116
ord115
ord118
ord8
ord171
ord205
ord45
ord137
ord141
ord238
ord190
ord169
ord90
ord173
ord111
ord70

rpcrt4

UuidCreate

wininet

InternetCloseHandle
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
InternetSetOptionW
InternetOpenW
HttpQueryInfoW
InternetCrackUrlW
InternetConnectW

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launcher/Redist/vc_redist.x864.exe
.exe windows:5 windows x86 arch:x86

8e2588a9cf43886de3449dfff03137b6

Code Sign

33:00:00:00:71:b3:2e:8a:6b:82:aa:1f:4e:00:00:00:00:00:71
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20/03/2015, 17:32

Not After

20/06/2016, 17:32

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/06/2015, 17:42

Not After

04/09/2016, 17:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/10/2014, 18:11

Not After

01/01/2016, 18:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ab:06:cb:ec:52:d7:a1:69:63:80:49:01:2e:f8:86:a1:5e:87:65:11:a6:e9:90:cd:1f:7b:f7:ad:25:14:e8:b4
Signer

Actual PE Digest

ab:06:cb:ec:52:d7:a1:69:63:80:49:01:2e:f8:86:a1:5e:87:65:11:a6:e9:90:cd:1f:7b:f7:ad:25:14:e8:b4

Digest Algorithm

sha256

PE Digest Matches

true

df:f2:e7:17:7c:35:2e:2a:10:e7:c1:35:9e:a2:41:d0:98:70:74:d6
Signer

Actual PE Digest

df:f2:e7:17:7c:35:2e:2a:10:e7:c1:35:9e:a2:41:d0:98:70:74:d6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

Imports

gdiplus

GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromResource
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipAlloc

advapi32

QueryServiceConfigW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
GetUserNameW
InitiateSystemShutdownExW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
DecryptFileW
ChangeServiceConfigW
ControlService
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegQueryInfoKeyW
RegSetValueExW
SetEntriesInAclA
SetSecurityDescriptorGroup
RegOpenKeyExW
GetTokenInformation
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
LookupAccountNameW
SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner

user32

GetMessageW
PeekMessageW
PostMessageW
IsWindow
PostQuitMessage
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
MsgWaitForMultipleObjects
WaitForInputIdle
LoadCursorW
BeginPaint
EndPaint
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
ReleaseDC
MessageBoxW
PostThreadMessageW
RegisterClassW
CreateWindowExW

oleaut32

VariantClear
VariantInit
SysAllocString
SysFreeString

gdi32

GetDeviceCaps
CreateDCW

shell32

ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
StringFromGUID2
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCurrentProcess
InitializeCriticalSection
TlsFree
DeleteCriticalSection
CloseHandle
TlsGetValue
Sleep
GetLastError
ReleaseMutex
TlsSetValue
TlsAlloc
GetCurrentThreadId
GetVersionExW
GetModuleHandleW
ReadFile
SetFilePointerEx
CreateFileW
GetCurrentProcessId
GetProcessId
WriteFile
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
CompareStringW
LocalFree
CreateNamedPipeW
WaitForSingleObject
OpenProcess
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
GetComputerNameW
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
HeapAlloc
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
InterlockedExchange
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
HeapSetInformation
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetEndOfFile
ResetEvent
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
DeleteFileW
GetThreadLocale
GetTimeZoneInformation
TerminateProcess
UnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GlobalAlloc
IsProcessorFeaturePresent
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
EncodePointer
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
GlobalFree
MoveFileExW
CopyFileW
GetFileSizeEx
GetModuleHandleA
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetLocalTime
UnmapViewOfFile
IsDebuggerPresent
DuplicateHandle
HeapFree
FormatMessageW
GetTempFileNameW
GetWindowsDirectoryW
CompareStringA
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
ExitProcess
SetUnhandledExceptionFilter
GetStartupInfoW
GetCommandLineW
GetFullPathNameW
CreateDirectoryW
GetProcessHeap

cabinet

ord22
ord20
ord23

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

msi

ord88
ord17
ord125
ord116
ord115
ord118
ord8
ord171
ord205
ord45
ord137
ord141
ord238
ord190
ord169
ord90
ord173
ord111
ord70

rpcrt4

UuidCreate

wininet

InternetCloseHandle
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
InternetSetOptionW
InternetOpenW
HttpQueryInfoW
InternetCrackUrlW
InternetConnectW

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launcher/Redist/vcredist_x64.exe
.exe windows:5 windows x86 arch:x86

a1f6f100bff4507a3332f3f0cdfc24f5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7e:e6:b3:26:a0:5b:83:d2:4a:74:47:94:80:1b:e6:8c:ef:59:05:96
Signer

Actual PE Digest

7e:e6:b3:26:a0:5b:83:d2:4a:74:47:94:80:1b:e6:8c:ef:59:05:96

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Imports

msvcrt

__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf

advapi32

InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor

kernel32

CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime

user32

SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow

ntdll

NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.4MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launcher/Redist/vcredist_x642.exe
.exe windows:5 windows x86 arch:x86

dcbe94b8cc54b8e53867c61cc96811d6

Code Sign

33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/03/2013, 20:08

Not After

27/06/2014, 20:08

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/04/2014, 17:39

Not After

22/07/2015, 17:39

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/09/2013, 17:41

Not After

24/12/2014, 17:41

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7c:03:69:a4:40:7e:43:e2:00:c5:92:64:aa:e6:bc:8b:76:88:df:44:40:89:f4:ae:09:76:6c:f7:df:da:11:e1
Signer

Actual PE Digest

7c:03:69:a4:40:7e:43:e2:00:c5:92:64:aa:e6:bc:8b:76:88:df:44:40:89:f4:ae:09:76:6c:f7:df:da:11:e1

Digest Algorithm

sha256

PE Digest Matches

true

30:b3:61:3b:16:4e:9c:aa:e6:a5:4f:3b:72:a7:34:da:1d:ed:70:f9
Signer

Actual PE Digest

30:b3:61:3b:16:4e:9c:aa:e6:a5:4f:3b:72:a7:34:da:1d:ed:70:f9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
GetUserNameW
InitiateSystemShutdownExW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
DecryptFileW
ChangeServiceConfigW
ControlService
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
SetEntriesInAclA
SetSecurityDescriptorGroup
RegOpenKeyExW
GetTokenInformation
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
LookupAccountNameW
SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
QueryServiceConfigW

user32

GetMessageW
PeekMessageW
PostMessageW
PostThreadMessageW
PostQuitMessage
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
GetMonitorInfoW
IsDialogMessageW
MessageBoxW
GetWindowLongW
RegisterClassW
IsWindow
MsgWaitForMultipleObjects
WaitForInputIdle
LoadCursorW
LoadBitmapW
GetCursorPos
MonitorFromPoint
CreateWindowExW

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

gdi32

DeleteObject
GetObjectW
CreateCompatibleDC
SelectObject
DeleteDC
StretchBlt

shell32

ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW

ole32

CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
CoCreateInstance
CoInitialize
StringFromGUID2
CoInitializeEx
CoUninitialize

kernel32

ReadFile
SetFilePointerEx
CreateFileW
GetCurrentProcessId
GetProcessId
WriteFile
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
CompareStringW
LocalFree
CreateNamedPipeW
WaitForSingleObject
OpenProcess
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
GetComputerNameW
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
GetWindowsDirectoryW
GetSystemDefaultLangID
RtlUnwind
GetDateFormatW
GetSystemTime
InterlockedExchange
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetModuleHandleW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeProcess
DuplicateHandle
SetThreadExecutionState
CopyFileExW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetEndOfFile
ResetEvent
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
CompareStringA
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
DeleteFileW
GetThreadLocale
GetVersionExW
GetCurrentThreadId
TlsAlloc
TlsSetValue
ReleaseMutex
GetLastError
Sleep
TlsGetValue
CloseHandle
DeleteCriticalSection
GetTimeZoneInformation
GetACP
GetCPInfo
RaiseException
HeapAlloc
HeapFree
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GlobalAlloc
GlobalFree
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsFree
InitializeCriticalSection
GetCurrentProcess
HeapSetInformation
GetOEMCP
SetFileAttributesW
IsValidCodePage
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetLocalTime
FormatMessageW
GetTempFileNameW
GetFullPathNameW
CreateDirectoryW
GetProcessHeap
GetModuleHandleA
GetFileSizeEx
GetUserDefaultLangID
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
EncodePointer
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
MoveFileExW
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
GetCommandLineW
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
CopyFileW

cabinet

ord23
ord22
ord20

crypt32

CryptHashPublicKeyInfo
CertGetCertificateContextProperty

msi

ord116
ord17
ord125
ord171
ord8
ord115
ord118
ord205
ord45
ord137
ord141
ord238
ord190
ord88
ord90
ord173
ord111
ord70
ord169

rpcrt4

UuidCreate

wininet

InternetCrackUrlW
HttpQueryInfoW
InternetCloseHandle
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
InternetSetOptionW
InternetConnectW
InternetOpenW

wintrust

CryptCATAdminCalcHashFromFileHandle
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrust

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launcher/Redist/vcredist_x643.exe
.exe windows:5 windows x86 arch:x86

33c6db41ca15b47cfcec52de6c2ab2b7

Code Sign

33:00:00:00:34:24:31:40:c9:a0:c1:79:8d:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/03/2013, 20:08

Not After

27/06/2014, 20:08

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/01/2013, 22:33

Not After

24/04/2014, 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/09/2013, 17:41

Not After

24/12/2014, 17:41

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:c5:3f:c6:cf:61:80:fa:ca:50:0d:be:3d:8c:71:96:9a:5f:de:3a:97:a3:72:8e:48:0f:76:c1:95:c7:4a:17
Signer

Actual PE Digest

07:c5:3f:c6:cf:61:80:fa:ca:50:0d:be:3d:8c:71:96:9a:5f:de:3a:97:a3:72:8e:48:0f:76:c1:95:c7:4a:17

Digest Algorithm

sha256

PE Digest Matches

true

6c:6c:5f:05:6b:fb:f9:61:c3:3a:07:4c:73:49:9c:53:7b:5f:c2:59
Signer

Actual PE Digest

6c:6c:5f:05:6b:fb:f9:61:c3:3a:07:4c:73:49:9c:53:7b:5f:c2:59

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\delivery\Dev\wix36_dev11\build\ship\x86\x86\burn.pdb

Imports

kernel32

CopyFileExW
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
ResetEvent
SetEndOfFile
DeleteFileW
GetThreadLocale
UnmapViewOfFile
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
GetLocalTime
SetFilePointer
GetComputerNameW
CreateFileA
GetProcessHeap
GetModuleHandleA
CopyFileW
MoveFileExW
GlobalFree
GlobalAlloc
GetFileSizeEx
GetCurrentDirectoryW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FormatMessageW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringW
InitializeCriticalSection
CloseHandle
LocalFree
ReleaseMutex
GetVersionExW
GetProcessId
ReadFile
CreateNamedPipeW
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
WaitForSingleObject
OpenProcess
CreateFileW
SetFilePointerEx
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
VerifyVersionInfoW
VerSetConditionMask
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
GetWindowsDirectoryW
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
GetExitCodeProcess
SetThreadExecutionState
FlushFileBuffers

msi

ord171
ord45
ord137
ord125
ord17
ord8
ord141
ord238
ord190
ord88
ord90
ord173
ord111
ord70
ord169
ord118
ord115
ord116
ord205

shell32

SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW

rpcrt4

UuidCreate

wininet

HttpQueryInfoW
InternetCrackUrlW
InternetSetOptionW
InternetConnectW
InternetCloseHandle
InternetOpenW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

gdi32

DeleteDC
DeleteObject
GetObjectW
CreateCompatibleDC
SelectObject
StretchBlt

cabinet

ord23
ord22
ord20

advapi32

CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
SetNamedSecurityInfoW
AllocateAndInitializeSid
CheckTokenMembership
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
InitializeSecurityDescriptor
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegOpenKeyExW
GetTokenInformation
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
ChangeServiceConfigW
DecryptFileW
SetEntriesInAclW
InitializeAcl
CreateWellKnownSid
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
QueryServiceConfigW

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

ole32

CLSIDFromProgID
CoInitializeSecurity
CoTaskMemFree
CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize
StringFromGUID2

user32

LoadBitmapW
IsWindow
PostMessageW
PeekMessageW
GetMessageW
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
CreateWindowExW
RegisterClassW
MsgWaitForMultipleObjects
LoadCursorW
PostQuitMessage
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
PostThreadMessageW
MessageBoxW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launcher/Redist/vcredist_x86.exe
.exe windows:5 windows x86 arch:x86

a1f6f100bff4507a3332f3f0cdfc24f5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5f:c8:53:53:4b:f3:8d:17:29:22:b7:77:39:d5:7a:e2:70:d6:a5:b8
Signer

Actual PE Digest

5f:c8:53:53:4b:f3:8d:17:29:22:b7:77:39:d5:7a:e2:70:d6:a5:b8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Imports

msvcrt

__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf

advapi32

InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor

kernel32

CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime

user32

SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow

ntdll

NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.7MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launcher/Redist/vcredist_x862.exe
.exe windows:5 windows x86 arch:x86

dcbe94b8cc54b8e53867c61cc96811d6

Code Sign

33:00:00:00:4c:a1:e8:4d:cc:b4:74:7b:3b:00:00:00:00:00:4c
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/11/2013, 22:11

Not After

11/02/2015, 22:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/04/2014, 17:39

Not After

22/07/2015, 17:39

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/09/2013, 17:41

Not After

24/12/2014, 17:41

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

af:74:c3:79:56:e7:2b:5d:3a:c2:b9:84:ce:5e:5a:6e:87:d4:41:57:40:ea:74:ae:2c:8b:db:54:2a:69:14:3c
Signer

Actual PE Digest

af:74:c3:79:56:e7:2b:5d:3a:c2:b9:84:ce:5e:5a:6e:87:d4:41:57:40:ea:74:ae:2c:8b:db:54:2a:69:14:3c

Digest Algorithm

sha256

PE Digest Matches

true

c6:e9:00:f0:64:0e:2a:52:a2:da:4c:db:2e:25:f4:6b:1c:8c:4b:6b
Signer

Actual PE Digest

c6:e9:00:f0:64:0e:2a:52:a2:da:4c:db:2e:25:f4:6b:1c:8c:4b:6b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
GetUserNameW
InitiateSystemShutdownExW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
DecryptFileW
ChangeServiceConfigW
ControlService
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
SetEntriesInAclA
SetSecurityDescriptorGroup
RegOpenKeyExW
GetTokenInformation
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
LookupAccountNameW
SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
QueryServiceConfigW

user32

GetMessageW
PeekMessageW
PostMessageW
PostThreadMessageW
PostQuitMessage
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
GetMonitorInfoW
IsDialogMessageW
MessageBoxW
GetWindowLongW
RegisterClassW
IsWindow
MsgWaitForMultipleObjects
WaitForInputIdle
LoadCursorW
LoadBitmapW
GetCursorPos
MonitorFromPoint
CreateWindowExW

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

gdi32

DeleteObject
GetObjectW
CreateCompatibleDC
SelectObject
DeleteDC
StretchBlt

shell32

ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW

ole32

CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
CoCreateInstance
CoInitialize
StringFromGUID2
CoInitializeEx
CoUninitialize

kernel32

ReadFile
SetFilePointerEx
CreateFileW
GetCurrentProcessId
GetProcessId
WriteFile
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
CompareStringW
LocalFree
CreateNamedPipeW
WaitForSingleObject
OpenProcess
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
GetComputerNameW
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
GetWindowsDirectoryW
GetSystemDefaultLangID
RtlUnwind
GetDateFormatW
GetSystemTime
InterlockedExchange
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetModuleHandleW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeProcess
DuplicateHandle
SetThreadExecutionState
CopyFileExW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetEndOfFile
ResetEvent
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
CompareStringA
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
DeleteFileW
GetThreadLocale
GetVersionExW
GetCurrentThreadId
TlsAlloc
TlsSetValue
ReleaseMutex
GetLastError
Sleep
TlsGetValue
CloseHandle
DeleteCriticalSection
GetTimeZoneInformation
GetACP
GetCPInfo
RaiseException
HeapAlloc
HeapFree
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GlobalAlloc
GlobalFree
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsFree
InitializeCriticalSection
GetCurrentProcess
HeapSetInformation
GetOEMCP
SetFileAttributesW
IsValidCodePage
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetLocalTime
FormatMessageW
GetTempFileNameW
GetFullPathNameW
CreateDirectoryW
GetProcessHeap
GetModuleHandleA
GetFileSizeEx
GetUserDefaultLangID
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
EncodePointer
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
MoveFileExW
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
GetCommandLineW
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
CopyFileW

cabinet

ord23
ord22
ord20

crypt32

CryptHashPublicKeyInfo
CertGetCertificateContextProperty

msi

ord116
ord17
ord125
ord171
ord8
ord115
ord118
ord205
ord45
ord137
ord141
ord238
ord190
ord88
ord90
ord173
ord111
ord70
ord169

rpcrt4

UuidCreate

wininet

InternetCrackUrlW
HttpQueryInfoW
InternetCloseHandle
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
InternetSetOptionW
InternetConnectW
InternetOpenW

wintrust

CryptCATAdminCalcHashFromFileHandle
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrust

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launcher/Redist/vcredist_x863.exe
.exe windows:5 windows x86 arch:x86

33c6db41ca15b47cfcec52de6c2ab2b7

Code Sign

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/09/2012, 21:12

Not After

04/12/2013, 21:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/01/2013, 22:33

Not After

24/04/2014, 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/09/2013, 17:41

Not After

24/12/2014, 17:41

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:e7:0c:89:55:fe:17:47:bf:fc:11:1e:47:bb:a8:d9:82:a5:1f:58:f1:9c:0e:1f:00:6a:71:79:e7:ff:75:22
Signer

Actual PE Digest

d4:e7:0c:89:55:fe:17:47:bf:fc:11:1e:47:bb:a8:d9:82:a5:1f:58:f1:9c:0e:1f:00:6a:71:79:e7:ff:75:22

Digest Algorithm

sha256

PE Digest Matches

true

36:8d:a7:ef:b6:4b:ef:51:51:7c:7b:1c:58:f3:56:1f:6d:97:57:92
Signer

Actual PE Digest

36:8d:a7:ef:b6:4b:ef:51:51:7c:7b:1c:58:f3:56:1f:6d:97:57:92

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\delivery\Dev\wix36_dev11\build\ship\x86\x86\burn.pdb

Imports

kernel32

CopyFileExW
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
ResetEvent
SetEndOfFile
DeleteFileW
GetThreadLocale
UnmapViewOfFile
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
GetLocalTime
SetFilePointer
GetComputerNameW
CreateFileA
GetProcessHeap
GetModuleHandleA
CopyFileW
MoveFileExW
GlobalFree
GlobalAlloc
GetFileSizeEx
GetCurrentDirectoryW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FormatMessageW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringW
InitializeCriticalSection
CloseHandle
LocalFree
ReleaseMutex
GetVersionExW
GetProcessId
ReadFile
CreateNamedPipeW
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
WaitForSingleObject
OpenProcess
CreateFileW
SetFilePointerEx
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
VerifyVersionInfoW
VerSetConditionMask
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
GetWindowsDirectoryW
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
GetExitCodeProcess
SetThreadExecutionState
FlushFileBuffers

msi

ord171
ord45
ord137
ord125
ord17
ord8
ord141
ord238
ord190
ord88
ord90
ord173
ord111
ord70
ord169
ord118
ord115
ord116
ord205

shell32

SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW

rpcrt4

UuidCreate

wininet

HttpQueryInfoW
InternetCrackUrlW
InternetSetOptionW
InternetConnectW
InternetCloseHandle
InternetOpenW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

gdi32

DeleteDC
DeleteObject
GetObjectW
CreateCompatibleDC
SelectObject
StretchBlt

cabinet

ord23
ord22
ord20

advapi32

CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
SetNamedSecurityInfoW
AllocateAndInitializeSid
CheckTokenMembership
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
InitializeSecurityDescriptor
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegOpenKeyExW
GetTokenInformation
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
ChangeServiceConfigW
DecryptFileW
SetEntriesInAclW
InitializeAcl
CreateWellKnownSid
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
QueryServiceConfigW

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

ole32

CLSIDFromProgID
CoInitializeSecurity
CoTaskMemFree
CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize
StringFromGUID2

user32

LoadBitmapW
IsWindow
PostMessageW
PeekMessageW
GetMessageW
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
CreateWindowExW
RegisterClassW
MsgWaitForMultipleObjects
LoadCursorW
PostQuitMessage
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
PostThreadMessageW
MessageBoxW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launcher/indexes/1.17.json
Launcher/indexes/1.18.json
Launcher/indexes/chs_boot.ttf
Launcher/indexes/cht_boot.ttf
Launcher/indexes/jpn_boot.ttf
Launcher/indexes/kor_boot.ttf
Launcher/indexes/malgun_boot.ttf
Launcher/indexes/malgun_console.ttf
Launcher/indexes/malgunn_boot.ttf
Launcher/indexes/meiryo_boot.ttf
Launcher/indexes/meiryo_console.ttf
Launcher/indexes/meiryon_boot.ttf
Launcher/indexes/msjh_boot.ttf
Launcher/indexes/msjh_console.ttf
Launcher/indexes/msjhn_boot.ttf
Launcher/indexes/msyh_boot.ttf
Launcher/indexes/msyh_console.ttf
Launcher/indexes/msyhn_boot.ttf
Launcher/indexes/options.txt
Launcher/indexes/segmono_boot.ttf
Launcher/indexes/segoe_slboot.ttf
Launcher/indexes/segoen_slboot.ttf
Launcher/indexes/wgl4_boot.ttf
Launcher/libgnutls-30.dll
.dll windows:4 windows x64 arch:x64

c173990c10ad4740c4b8b49e48c33ed9

Code Sign

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

18/02/2022, 00:00

Not After

17/02/2025, 23:59

Subject

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

5f:1a:12:9d:a6:0d:1c:b8:f0:22:5c:18:3d:e2:71:db:b4:a2:22:98:f5:58:4d:d3:e7:07:89:9c:95:69:a4:3a
Signer

Actual PE Digest

5f:1a:12:9d:a6:0d:1c:b8:f0:22:5c:18:3d:e2:71:db:b4:a2:22:98:f5:58:4d:d3:e7:07:89:9c:95:69:a4:3a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libgmp-10

__gmp_get_memory_functions
__gmp_set_memory_functions
__gmpn_cnd_add_n
__gmpn_copyi
__gmpn_rshift
__gmpn_sub_n
__gmpn_zero
__gmpz_add
__gmpz_add_ui
__gmpz_cdiv_q
__gmpz_clear
__gmpz_cmp
__gmpz_cmp_ui
__gmpz_export
__gmpz_fdiv_q
__gmpz_fdiv_q_2exp
__gmpz_fdiv_r
__gmpz_fdiv_r_2exp
__gmpz_gcd
__gmpz_import
__gmpz_init
__gmpz_init_set_str
__gmpz_invert
__gmpz_lcm
__gmpz_limbs_finish
__gmpz_limbs_read
__gmpz_limbs_write
__gmpz_mod
__gmpz_mul
__gmpz_mul_2exp
__gmpz_mul_ui
__gmpz_powm
__gmpz_probab_prime_p
__gmpz_set
__gmpz_set_ui
__gmpz_sizeinbase
__gmpz_sqrt
__gmpz_sub
__gmpz_sub_ui
__gmpz_tdiv_q_2exp
__gmpz_tdiv_r_2exp
__gmpz_tstbit

libhogweed-6

nettle_curve25519_mul
nettle_curve25519_mul_g
nettle_curve448_mul
nettle_curve448_mul_g
nettle_dsa_generate_params
nettle_dsa_params_clear
nettle_dsa_params_init
nettle_dsa_sign
nettle_dsa_signature_clear
nettle_dsa_signature_init
nettle_dsa_verify
nettle_ecc_bit_size
nettle_ecc_point_clear
nettle_ecc_point_get
nettle_ecc_point_init
nettle_ecc_point_mul
nettle_ecc_point_mul_g
nettle_ecc_point_set
nettle_ecc_scalar_clear
nettle_ecc_scalar_get
nettle_ecc_scalar_init
nettle_ecc_scalar_set
nettle_ecc_size
nettle_ecc_size_a
nettle_ecdsa_generate_keypair
nettle_ecdsa_sign
nettle_ecdsa_verify
nettle_ed25519_sha512_public_key
nettle_ed25519_sha512_sign
nettle_ed25519_sha512_verify
nettle_ed448_shake256_public_key
nettle_ed448_shake256_sign
nettle_ed448_shake256_verify
nettle_get_gost_gc256b
nettle_get_gost_gc512a
nettle_get_secp_192r1
nettle_get_secp_224r1
nettle_get_secp_256r1
nettle_get_secp_384r1
nettle_get_secp_521r1
nettle_gostdsa_sign
nettle_gostdsa_verify
nettle_gostdsa_vko
nettle_mpz_get_str_256
nettle_mpz_random
nettle_mpz_random_size
nettle_mpz_set_str_256_s
nettle_mpz_set_str_256_u
nettle_mpz_sizeinbase_256_s
nettle_mpz_sizeinbase_256_u
nettle_pkcs1_rsa_digest_encode
nettle_pss_encode_mgf1
nettle_rsa_decrypt_tr
nettle_rsa_encrypt
nettle_rsa_generate_keypair
nettle_rsa_pkcs1_sign_tr
nettle_rsa_pkcs1_verify
nettle_rsa_private_key_clear
nettle_rsa_private_key_init
nettle_rsa_private_key_prepare
nettle_rsa_pss_sha256_sign_digest_tr
nettle_rsa_pss_sha256_verify_digest
nettle_rsa_pss_sha384_sign_digest_tr
nettle_rsa_pss_sha384_verify_digest
nettle_rsa_pss_sha512_sign_digest_tr
nettle_rsa_pss_sha512_verify_digest
nettle_rsa_public_key_clear
nettle_rsa_public_key_init
nettle_rsa_public_key_prepare
nettle_rsa_sec_decrypt

libnettle-8

nettle_aes128_decrypt
nettle_aes128_encrypt
nettle_aes128_set_decrypt_key
nettle_aes128_set_encrypt_key
nettle_aes192_decrypt
nettle_aes192_encrypt
nettle_aes192_set_decrypt_key
nettle_aes192_set_encrypt_key
nettle_aes256_decrypt
nettle_aes256_encrypt
nettle_aes256_set_decrypt_key
nettle_aes256_set_encrypt_key
nettle_arcfour128_set_key
nettle_arcfour_crypt
nettle_arcfour_set_key
nettle_arctwo40_set_key
nettle_arctwo_decrypt
nettle_arctwo_encrypt
nettle_base64_decode_final
nettle_base64_decode_init
nettle_base64_decode_update
nettle_base64_encode_raw
nettle_camellia128_crypt
nettle_camellia128_set_encrypt_key
nettle_camellia192_set_decrypt_key
nettle_camellia192_set_encrypt_key
nettle_camellia256_crypt
nettle_camellia256_set_decrypt_key
nettle_camellia256_set_encrypt_key
nettle_camellia_set_decrypt_key
nettle_cbc_decrypt
nettle_cbc_encrypt
nettle_ccm_decrypt_message
nettle_ccm_encrypt_message
nettle_cfb8_decrypt
nettle_cfb8_encrypt
nettle_cfb_decrypt
nettle_cfb_encrypt
nettle_chacha_crypt
nettle_chacha_crypt32
nettle_chacha_poly1305_decrypt
nettle_chacha_poly1305_digest
nettle_chacha_poly1305_encrypt
nettle_chacha_poly1305_set_key
nettle_chacha_poly1305_set_nonce
nettle_chacha_poly1305_update
nettle_chacha_set_counter
nettle_chacha_set_counter32
nettle_chacha_set_key
nettle_chacha_set_nonce
nettle_chacha_set_nonce96
nettle_cmac128_digest
nettle_cmac128_init
nettle_cmac128_set_key
nettle_cmac128_update
nettle_cmac64_digest
nettle_cmac64_init
nettle_cmac64_set_key
nettle_cmac64_update
nettle_cmac_aes128_digest
nettle_cmac_aes128_set_key
nettle_cmac_aes128_update
nettle_cmac_aes256_digest
nettle_cmac_aes256_set_key
nettle_cmac_aes256_update
nettle_ctr_crypt
nettle_des3_decrypt
nettle_des3_encrypt
nettle_des3_set_key
nettle_des_decrypt
nettle_des_encrypt
nettle_des_set_key
nettle_gcm_aes128_digest
nettle_gcm_aes128_set_iv
nettle_gcm_aes128_set_key
nettle_gcm_aes128_update
nettle_gcm_aes192_digest
nettle_gcm_aes192_set_iv
nettle_gcm_aes192_set_key
nettle_gcm_aes192_update
nettle_gcm_aes256_digest
nettle_gcm_aes256_set_iv
nettle_gcm_aes256_set_key
nettle_gcm_aes256_update
nettle_gcm_camellia128_digest
nettle_gcm_camellia128_set_iv
nettle_gcm_camellia128_set_key
nettle_gcm_camellia128_update
nettle_gcm_camellia256_digest
nettle_gcm_camellia256_set_iv
nettle_gcm_camellia256_set_key
nettle_gcm_camellia256_update
nettle_gcm_decrypt
nettle_gcm_digest
nettle_gcm_encrypt
nettle_gcm_set_iv
nettle_gcm_set_key
nettle_gcm_update
nettle_gosthash94_init
nettle_gosthash94cp_digest
nettle_gosthash94cp_update
nettle_hkdf_expand
nettle_hkdf_extract
nettle_hmac_digest
nettle_hmac_gosthash94cp_digest
nettle_hmac_gosthash94cp_set_key
nettle_hmac_gosthash94cp_update
nettle_hmac_md5_digest
nettle_hmac_md5_set_key
nettle_hmac_md5_update
nettle_hmac_set_key
nettle_hmac_sha1_digest
nettle_hmac_sha1_set_key
nettle_hmac_sha1_update
nettle_hmac_sha224_digest
nettle_hmac_sha224_set_key
nettle_hmac_sha256_digest
nettle_hmac_sha256_set_key
nettle_hmac_sha256_update
nettle_hmac_sha384_digest
nettle_hmac_sha384_set_key
nettle_hmac_sha512_digest
nettle_hmac_sha512_set_key
nettle_hmac_sha512_update
nettle_hmac_streebog256_digest
nettle_hmac_streebog256_set_key
nettle_hmac_streebog512_digest
nettle_hmac_streebog512_set_key
nettle_hmac_streebog512_update
nettle_md2_digest
nettle_md2_init
nettle_md2_update
nettle_md5_digest
nettle_md5_init
nettle_md5_update
nettle_memeql_sec
nettle_memxor
nettle_memxor3
nettle_pbkdf2
nettle_salsa20_256_set_key
nettle_salsa20_crypt
nettle_salsa20r12_crypt
nettle_sha1_digest
nettle_sha1_init
nettle_sha1_update
nettle_sha224_digest
nettle_sha224_init
nettle_sha256
nettle_sha256_digest
nettle_sha256_init
nettle_sha256_update
nettle_sha384
nettle_sha384_digest
nettle_sha384_init
nettle_sha3_224_digest
nettle_sha3_224_init
nettle_sha3_224_update
nettle_sha3_256_digest
nettle_sha3_256_init
nettle_sha3_256_update
nettle_sha3_384_digest
nettle_sha3_384_init
nettle_sha3_384_update
nettle_sha3_512_digest
nettle_sha3_512_init
nettle_sha3_512_update
nettle_sha512
nettle_sha512_digest
nettle_sha512_init
nettle_sha512_update
nettle_siv_cmac_aes128_decrypt_message
nettle_siv_cmac_aes128_encrypt_message
nettle_siv_cmac_aes128_set_key
nettle_siv_cmac_aes256_decrypt_message
nettle_siv_cmac_aes256_encrypt_message
nettle_siv_cmac_aes256_set_key
nettle_streebog256_digest
nettle_streebog256_init
nettle_streebog512_digest
nettle_streebog512_init
nettle_streebog512_update
nettle_umac128_digest
nettle_umac128_set_key
nettle_umac128_set_nonce
nettle_umac128_update
nettle_umac96_digest
nettle_umac96_set_key
nettle_umac96_set_nonce
nettle_umac96_update
nettle_xts_aes128_decrypt_message
nettle_xts_aes128_encrypt_message
nettle_xts_aes128_set_decrypt_key
nettle_xts_aes128_set_encrypt_key
nettle_xts_aes256_decrypt_message
nettle_xts_aes256_encrypt_message
nettle_xts_aes256_set_decrypt_key
nettle_xts_aes256_set_encrypt_key

zlib1

compress
compressBound
uncompress

advapi32

CryptAcquireContextW
CryptCreateHash
CryptDecrypt
CryptDestroyHash
CryptGetHashParam
CryptGetProvParam
CryptReleaseContext
CryptSetHashParam
CryptSetProvParam
CryptSignHashA

crypt32

CertCloseStore
CertDeleteCertificateFromStore
CertEnumCRLsInStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore
PFXImportCertStore

kernel32

CloseHandle
CreateEventA
CreateFileA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FindClose
FindFirstFileA
FreeLibrary
GetCurrentProcess
GetCurrentThreadId
GetFileAttributesW
GetFileInformationByHandle
GetFileType
GetFinalPathNameByHandleA
GetHandleInformation
GetLastError
GetProcAddress
GetSystemTimeAsFileTime
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
PeekNamedPipe
RtlVirtualUnwind
SetEvent
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_close
_dup2
_errno
_fdopen
_fileno
_findclose
_get_osfhandle
_getcwd
_getmaxstdio
_gmtime64
_initterm
_localtime64
_lock
_lseeki64
_mkdir
_open
_open_osfhandle
_read
_setmaxstdio
_setmode
_stricmp
_time64
_unlock
_wassert
_wfindfirst64
_wfindnext64
_wfullpath
abort
atoi
atol
calloc
exit
fclose
ferror
fflush
fgetpos
fgets
fopen
fputc
fread
free
fseek
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
qsort
realloc
setvbuf
strcat
strchr
strcmp
strcpy
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strstr
strtol
strtoul
vfprintf
wcscat
wcscpy
wcslen

ncrypt

BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider
NCryptDecrypt
NCryptDeleteKey
NCryptFreeObject
NCryptGetProperty
NCryptOpenKey
NCryptOpenStorageProvider
NCryptSignHash

libwinpthread-1

pthread_getspecific
pthread_key_create
pthread_key_delete
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_init
pthread_mutexattr_settype
pthread_once
pthread_rwlock_rdlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_setspecific

ws2_32

WSAGetLastError
WSASend
WSASetLastError
connect
inet_ntop
inet_pton
recv
select
send
setsockopt

libgcc_s_seh-1

__emutls_get_address

Exports

Exports

_dsa_generate_dss_g
_dsa_generate_dss_pq
_dsa_validate_dss_g
_dsa_validate_dss_pq
_gnutls13_psk_ext_iter_next_binder
_gnutls13_psk_ext_iter_next_identity
_gnutls13_psk_ext_parser_init
_gnutls_anti_replay_check
_gnutls_bin2hex
_gnutls_buffer_append_str
_gnutls_buffer_clear
_gnutls_buffer_init
_gnutls_buffer_pop_datum
_gnutls_buffer_to_datum
_gnutls_buffer_unescape
_gnutls_cidr_to_string
_gnutls_cipher_get_iv
_gnutls_cipher_to_entry
_gnutls_crypto_register_cipher
_gnutls_decode_ber_rs_raw
_gnutls_default_priority_string
_gnutls_digest_exists
_gnutls_ecc_curve_is_supported
_gnutls_encode_ber_rs_raw
_gnutls_global_set_gettime_function
_gnutls_global_version
_gnutls_hello_set_default_version
_gnutls_iov_iter_init
_gnutls_iov_iter_next
_gnutls_iov_iter_sync
_gnutls_ip_to_string
_gnutls_lib_force_operational
_gnutls_lib_simulate_error
_gnutls_log
_gnutls_log_level
_gnutls_mac_to_entry
_gnutls_mpi_log
_gnutls_mpi_ops
_gnutls_pathbuf_append
_gnutls_pathbuf_deinit
_gnutls_pathbuf_init
_gnutls_pathbuf_truncate
_gnutls_pkcs12_string_to_key
_gnutls_prf_raw
_gnutls_record_overhead
_gnutls_record_set_default_version
_gnutls_resolve_priorities
_gnutls_rsa_pms_set_version
_gnutls_server_name_set_raw
_gnutls_session_ticket_disable_server
_gnutls_set_session_ticket_key_rotation_callback
_gnutls_supplemental_deinit
_gnutls_ucs2_to_utf8
_gnutls_utcTime2gtime
_gnutls_utf8_to_ucs2
_gnutls_version_to_entry
_gnutls_x509_generalTime2gtime
_gnutls_x509_name_constraints_merge
_rsa_generate_fips186_4_keypair
dsa_generate_dss_keypair
gnutls_aead_cipher_decrypt
gnutls_aead_cipher_decryptv2
gnutls_aead_cipher_deinit
gnutls_aead_cipher_encrypt
gnutls_aead_cipher_encryptv
gnutls_aead_cipher_encryptv2
gnutls_aead_cipher_init
gnutls_aead_cipher_set_key
gnutls_alert_get
gnutls_alert_get_name
gnutls_alert_get_strname
gnutls_alert_send
gnutls_alert_send_appropriate
gnutls_alert_set_read_function
gnutls_alpn_get_selected_protocol
gnutls_alpn_set_protocols
gnutls_anti_replay_deinit
gnutls_anti_replay_enable
gnutls_anti_replay_init
gnutls_anti_replay_set_add_function
gnutls_anti_replay_set_ptr
gnutls_anti_replay_set_window
gnutls_auth_client_get_type
gnutls_auth_get_type
gnutls_auth_server_get_type
gnutls_base64_decode2
gnutls_base64_encode2
gnutls_buffer_append_data
gnutls_bye
gnutls_calloc
gnutls_certificate_activation_time_peers
gnutls_certificate_allocate_credentials
gnutls_certificate_client_get_request_status
gnutls_certificate_expiration_time_peers
gnutls_certificate_free_ca_names
gnutls_certificate_free_cas
gnutls_certificate_free_credentials
gnutls_certificate_free_crls
gnutls_certificate_free_keys
gnutls_certificate_get_crt_raw
gnutls_certificate_get_issuer
gnutls_certificate_get_ocsp_expiration
gnutls_certificate_get_openpgp_crt
gnutls_certificate_get_openpgp_key
gnutls_certificate_get_ours
gnutls_certificate_get_peers
gnutls_certificate_get_peers_subkey_id
gnutls_certificate_get_trust_list
gnutls_certificate_get_verify_flags
gnutls_certificate_get_x509_crt
gnutls_certificate_get_x509_key
gnutls_certificate_send_x509_rdn_sequence
gnutls_certificate_server_set_request
gnutls_certificate_set_dh_params
gnutls_certificate_set_flags
gnutls_certificate_set_key
gnutls_certificate_set_known_dh_params
gnutls_certificate_set_ocsp_status_request_file
gnutls_certificate_set_ocsp_status_request_file2
gnutls_certificate_set_ocsp_status_request_function
gnutls_certificate_set_ocsp_status_request_function2
gnutls_certificate_set_ocsp_status_request_mem
gnutls_certificate_set_openpgp_key
gnutls_certificate_set_openpgp_key_file
gnutls_certificate_set_openpgp_key_file2
gnutls_certificate_set_openpgp_key_mem
gnutls_certificate_set_openpgp_key_mem2
gnutls_certificate_set_openpgp_keyring_file
gnutls_certificate_set_openpgp_keyring_mem
gnutls_certificate_set_params_function
gnutls_certificate_set_pin_function
gnutls_certificate_set_rawpk_key_file
gnutls_certificate_set_rawpk_key_mem
gnutls_certificate_set_retrieve_function
gnutls_certificate_set_retrieve_function2
gnutls_certificate_set_retrieve_function3
gnutls_certificate_set_trust_list
gnutls_certificate_set_verify_flags
gnutls_certificate_set_verify_function
gnutls_certificate_set_verify_limits
gnutls_certificate_set_x509_crl
gnutls_certificate_set_x509_crl_file
gnutls_certificate_set_x509_crl_mem
gnutls_certificate_set_x509_key
gnutls_certificate_set_x509_key_file
gnutls_certificate_set_x509_key_file2
gnutls_certificate_set_x509_key_mem
gnutls_certificate_set_x509_key_mem2
gnutls_certificate_set_x509_simple_pkcs12_file
gnutls_certificate_set_x509_simple_pkcs12_mem
gnutls_certificate_set_x509_system_trust
gnutls_certificate_set_x509_trust
gnutls_certificate_set_x509_trust_dir
gnutls_certificate_set_x509_trust_file
gnutls_certificate_set_x509_trust_mem
gnutls_certificate_type_get
gnutls_certificate_type_get2
gnutls_certificate_type_get_id
gnutls_certificate_type_get_name
gnutls_certificate_type_list
gnutls_certificate_verification_profile_get_id
gnutls_certificate_verification_profile_get_name
gnutls_certificate_verification_status_print
gnutls_certificate_verify_peers
gnutls_certificate_verify_peers2
gnutls_certificate_verify_peers3
gnutls_check_version
gnutls_cipher_add_auth
gnutls_cipher_decrypt
gnutls_cipher_decrypt2
gnutls_cipher_decrypt3
gnutls_cipher_deinit
gnutls_cipher_encrypt
gnutls_cipher_encrypt2
gnutls_cipher_encrypt3
gnutls_cipher_get
gnutls_cipher_get_block_size
gnutls_cipher_get_id
gnutls_cipher_get_iv_size
gnutls_cipher_get_key_size
gnutls_cipher_get_name
gnutls_cipher_get_tag_size
gnutls_cipher_init
gnutls_cipher_list
gnutls_cipher_self_test
gnutls_cipher_set_iv
gnutls_cipher_suite_get_name
gnutls_cipher_suite_info
gnutls_cipher_tag
gnutls_ciphersuite_get
gnutls_compress_certificate_get_selected_method
gnutls_compress_certificate_set_methods
gnutls_compression_get
gnutls_compression_get_id
gnutls_compression_get_name
gnutls_compression_list
gnutls_credentials_clear
gnutls_credentials_get
gnutls_credentials_set
gnutls_crypto_register_aead_cipher
gnutls_crypto_register_cipher
gnutls_crypto_register_digest
gnutls_crypto_register_mac
gnutls_db_check_entry
gnutls_db_check_entry_expire_time
gnutls_db_check_entry_time
gnutls_db_get_default_cache_expiration
gnutls_db_get_ptr
gnutls_db_remove_session
gnutls_db_set_cache_expiration
gnutls_db_set_ptr
gnutls_db_set_remove_function
gnutls_db_set_retrieve_function
gnutls_db_set_store_function
gnutls_decode_ber_digest_info
gnutls_decode_gost_rs_value
gnutls_decode_rs_value
gnutls_deinit
gnutls_dh_get_group
gnutls_dh_get_peers_public_bits
gnutls_dh_get_prime_bits
gnutls_dh_get_pubkey
gnutls_dh_get_secret_bits
gnutls_dh_params_cpy
gnutls_dh_params_deinit
gnutls_dh_params_export2_pkcs3
gnutls_dh_params_export_pkcs3
gnutls_dh_params_export_raw
gnutls_dh_params_generate2
gnutls_dh_params_import_dsa
gnutls_dh_params_import_pkcs3
gnutls_dh_params_import_raw
gnutls_dh_params_import_raw2
gnutls_dh_params_import_raw3
gnutls_dh_params_init
gnutls_dh_set_prime_bits
gnutls_digest_get_id
gnutls_digest_get_name
gnutls_digest_get_oid
gnutls_digest_list
gnutls_digest_self_test
gnutls_digest_set_secure
gnutls_dtls_cookie_send
gnutls_dtls_cookie_verify
gnutls_dtls_get_data_mtu
gnutls_dtls_get_mtu
gnutls_dtls_get_timeout
gnutls_dtls_prestate_set
gnutls_dtls_set_data_mtu
gnutls_dtls_set_mtu
gnutls_dtls_set_timeouts
gnutls_early_cipher_get
gnutls_early_prf_hash_get
gnutls_ecc_curve_get
gnutls_ecc_curve_get_id
gnutls_ecc_curve_get_name
gnutls_ecc_curve_get_oid
gnutls_ecc_curve_get_pk
gnutls_ecc_curve_get_size
gnutls_ecc_curve_list
gnutls_ecc_curve_set_enabled
gnutls_encode_ber_digest_info
gnutls_encode_gost_rs_value
gnutls_encode_rs_value
gnutls_error_is_fatal
gnutls_error_to_alert
gnutls_est_record_overhead_size
gnutls_ext_get_current_msg
gnutls_ext_get_data
gnutls_ext_get_name
gnutls_ext_get_name2
gnutls_ext_raw_parse
gnutls_ext_register
gnutls_ext_set_data
gnutls_ffdhe_2048_group_generator
gnutls_ffdhe_2048_group_prime
gnutls_ffdhe_2048_group_q
gnutls_ffdhe_2048_key_bits
gnutls_ffdhe_3072_group_generator
gnutls_ffdhe_3072_group_prime
gnutls_ffdhe_3072_group_q
gnutls_ffdhe_3072_key_bits
gnutls_ffdhe_4096_group_generator
gnutls_ffdhe_4096_group_prime
gnutls_ffdhe_4096_group_q
gnutls_ffdhe_4096_key_bits
gnutls_ffdhe_6144_group_generator
gnutls_ffdhe_6144_group_prime
gnutls_ffdhe_6144_group_q
gnutls_ffdhe_6144_key_bits
gnutls_ffdhe_8192_group_generator
gnutls_ffdhe_8192_group_prime
gnutls_ffdhe_8192_group_q
gnutls_ffdhe_8192_key_bits
gnutls_fingerprint
gnutls_fips140_context_deinit
gnutls_fips140_context_init
gnutls_fips140_get_operation_state
gnutls_fips140_mode_enabled
gnutls_fips140_pop_context
gnutls_fips140_push_context
gnutls_fips140_run_self_tests
gnutls_fips140_set_mode
gnutls_free
gnutls_get_library_config
gnutls_get_system_config_file
gnutls_global_deinit
gnutls_global_init
gnutls_global_set_audit_log_function
gnutls_global_set_log_function
gnutls_global_set_log_level
gnutls_global_set_mem_functions
gnutls_global_set_mutex
gnutls_global_set_time_function
gnutls_gost_paramset_get_name
gnutls_gost_paramset_get_oid
gnutls_group_get
gnutls_group_get_id
gnutls_group_get_name
gnutls_group_list
gnutls_handshake
gnutls_handshake_description_get_name
gnutls_handshake_get_last_in
gnutls_handshake_get_last_out
gnutls_handshake_set_hook_function
gnutls_handshake_set_max_packet_length
gnutls_handshake_set_post_client_hello_function
gnutls_handshake_set_private_extensions
gnutls_handshake_set_random
gnutls_handshake_set_read_function
gnutls_handshake_set_secret_function
gnutls_handshake_set_timeout
gnutls_handshake_write
gnutls_hash
gnutls_hash_copy
gnutls_hash_deinit
gnutls_hash_fast
gnutls_hash_get_len
gnutls_hash_init
gnutls_hash_output
gnutls_heartbeat_allowed
gnutls_heartbeat_enable
gnutls_heartbeat_get_timeout
gnutls_heartbeat_ping
gnutls_heartbeat_pong
gnutls_heartbeat_set_timeouts
gnutls_hex2bin
gnutls_hex_decode
gnutls_hex_decode2
gnutls_hex_encode
gnutls_hex_encode2
gnutls_hkdf_expand
gnutls_hkdf_extract
gnutls_hkdf_self_test
gnutls_hmac
gnutls_hmac_copy
gnutls_hmac_deinit
gnutls_hmac_fast
gnutls_hmac_get_key_size
gnutls_hmac_get_len
gnutls_hmac_init
gnutls_hmac_output
gnutls_hmac_set_nonce
gnutls_idna_map
gnutls_idna_reverse_map
gnutls_init
gnutls_key_generate
gnutls_kx_get
gnutls_kx_get_id
gnutls_kx_get_name
gnutls_kx_list
gnutls_load_file
gnutls_mac_get
gnutls_mac_get_id
gnutls_mac_get_key_size
gnutls_mac_get_name
gnutls_mac_get_nonce_size
gnutls_mac_list
gnutls_mac_self_test
gnutls_malloc
gnutls_memcmp
gnutls_memset
gnutls_ocsp_req_add_cert
gnutls_ocsp_req_add_cert_id
gnutls_ocsp_req_deinit
gnutls_ocsp_req_export
gnutls_ocsp_req_get_cert_id
gnutls_ocsp_req_get_extension
gnutls_ocsp_req_get_nonce
gnutls_ocsp_req_get_version
gnutls_ocsp_req_import
gnutls_ocsp_req_init
gnutls_ocsp_req_print
gnutls_ocsp_req_randomize_nonce
gnutls_ocsp_req_set_extension
gnutls_ocsp_req_set_nonce
gnutls_ocsp_resp_check_crt
gnutls_ocsp_resp_deinit
gnutls_ocsp_resp_export
gnutls_ocsp_resp_export2
gnutls_ocsp_resp_get_certs
gnutls_ocsp_resp_get_extension
gnutls_ocsp_resp_get_nonce
gnutls_ocsp_resp_get_produced
gnutls_ocsp_resp_get_responder
gnutls_ocsp_resp_get_responder2
gnutls_ocsp_resp_get_responder_raw_id
gnutls_ocsp_resp_get_response
gnutls_ocsp_resp_get_signature
gnutls_ocsp_resp_get_signature_algorithm
gnutls_ocsp_resp_get_single
gnutls_ocsp_resp_get_status
gnutls_ocsp_resp_get_version
gnutls_ocsp_resp_import
gnutls_ocsp_resp_import2
gnutls_ocsp_resp_init
gnutls_ocsp_resp_list_import2
gnutls_ocsp_resp_print
gnutls_ocsp_resp_verify
gnutls_ocsp_resp_verify_direct
gnutls_ocsp_status_request_enable_client
gnutls_ocsp_status_request_get
gnutls_ocsp_status_request_get2
gnutls_ocsp_status_request_is_checked
gnutls_oid_to_digest
gnutls_oid_to_ecc_curve
gnutls_oid_to_gost_paramset
gnutls_oid_to_mac
gnutls_oid_to_pk
gnutls_oid_to_sign
gnutls_openpgp_crt_check_email
gnutls_openpgp_crt_check_hostname
gnutls_openpgp_crt_check_hostname2
gnutls_openpgp_crt_deinit
gnutls_openpgp_crt_export
gnutls_openpgp_crt_export2
gnutls_openpgp_crt_get_auth_subkey
gnutls_openpgp_crt_get_creation_time
gnutls_openpgp_crt_get_expiration_time
gnutls_openpgp_crt_get_fingerprint
gnutls_openpgp_crt_get_key_id
gnutls_openpgp_crt_get_key_usage
gnutls_openpgp_crt_get_name
gnutls_openpgp_crt_get_pk_algorithm
gnutls_openpgp_crt_get_pk_dsa_raw
gnutls_openpgp_crt_get_pk_rsa_raw
gnutls_openpgp_crt_get_preferred_key_id
gnutls_openpgp_crt_get_revoked_status
gnutls_openpgp_crt_get_subkey_count
gnutls_openpgp_crt_get_subkey_creation_time
gnutls_openpgp_crt_get_subkey_expiration_time
gnutls_openpgp_crt_get_subkey_fingerprint
gnutls_openpgp_crt_get_subkey_id
gnutls_openpgp_crt_get_subkey_idx
gnutls_openpgp_crt_get_subkey_pk_algorithm
gnutls_openpgp_crt_get_subkey_pk_dsa_raw
gnutls_openpgp_crt_get_subkey_pk_rsa_raw
gnutls_openpgp_crt_get_subkey_revoked_status
gnutls_openpgp_crt_get_subkey_usage
gnutls_openpgp_crt_get_version
gnutls_openpgp_crt_import
gnutls_openpgp_crt_init
gnutls_openpgp_crt_print
gnutls_openpgp_crt_set_preferred_key_id
gnutls_openpgp_crt_verify_ring
gnutls_openpgp_crt_verify_self
gnutls_openpgp_keyring_check_id
gnutls_openpgp_keyring_deinit
gnutls_openpgp_keyring_get_crt
gnutls_openpgp_keyring_get_crt_count
gnutls_openpgp_keyring_import
gnutls_openpgp_keyring_init
gnutls_openpgp_privkey_deinit
gnutls_openpgp_privkey_export
gnutls_openpgp_privkey_export2
gnutls_openpgp_privkey_export_dsa_raw
gnutls_openpgp_privkey_export_rsa_raw
gnutls_openpgp_privkey_export_subkey_dsa_raw
gnutls_openpgp_privkey_export_subkey_rsa_raw
gnutls_openpgp_privkey_get_fingerprint
gnutls_openpgp_privkey_get_key_id
gnutls_openpgp_privkey_get_pk_algorithm
gnutls_openpgp_privkey_get_preferred_key_id
gnutls_openpgp_privkey_get_revoked_status
gnutls_openpgp_privkey_get_subkey_count
gnutls_openpgp_privkey_get_subkey_creation_time
gnutls_openpgp_privkey_get_subkey_expiration_time
gnutls_openpgp_privkey_get_subkey_fingerprint
gnutls_openpgp_privkey_get_subkey_id
gnutls_openpgp_privkey_get_subkey_idx
gnutls_openpgp_privkey_get_subkey_pk_algorithm
gnutls_openpgp_privkey_get_subkey_revoked_status
gnutls_openpgp_privkey_import
gnutls_openpgp_privkey_init
gnutls_openpgp_privkey_sec_param
gnutls_openpgp_privkey_set_preferred_key_id
gnutls_openpgp_privkey_sign_hash
gnutls_openpgp_send_cert
gnutls_openpgp_set_recv_key_function
gnutls_packet_deinit

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 709KB - Virtual size: 709KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launcher/libhogweed-6.dll
.dll windows:4 windows x64 arch:x64

6b115283af9c5c9c2e8acb0fe83a235b

Code Sign

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

18/02/2022, 00:00

Not After

17/02/2025, 23:59

Subject

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:2a:16:34:0c:1c:ce:e1:e5:d4:be:d3:19:7f:89:04:77:32:71:88:f6:f8:5b:05:cc:5a:75:39:9b:87:f4:19
Signer

Actual PE Digest

0f:2a:16:34:0c:1c:ce:e1:e5:d4:be:d3:19:7f:89:04:77:32:71:88:f6:f8:5b:05:cc:5a:75:39:9b:87:f4:19

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libgmp-10

__gmp_get_memory_functions
__gmpn_add_n
__gmpn_addmul_1
__gmpn_cnd_add_n
__gmpn_cnd_sub_n
__gmpn_cnd_swap
__gmpn_copyd
__gmpn_copyi
__gmpn_mul_1
__gmpn_mul_n
__gmpn_perfect_square_p
__gmpn_rshift
__gmpn_sec_add_1
__gmpn_sec_add_1_itch
__gmpn_sec_div_r
__gmpn_sec_div_r_itch
__gmpn_sec_invert
__gmpn_sec_invert_itch
__gmpn_sec_mul
__gmpn_sec_mul_itch
__gmpn_sec_powm
__gmpn_sec_powm_itch
__gmpn_sqr
__gmpn_sub_n
__gmpn_submul_1
__gmpn_zero
__gmpz_add
__gmpz_add_ui
__gmpz_clear
__gmpz_cmp
__gmpz_cmp_ui
__gmpz_com
__gmpz_congruent_p
__gmpz_fdiv_q
__gmpz_fdiv_q_2exp
__gmpz_fdiv_r
__gmpz_fdiv_r_2exp
__gmpz_gcd
__gmpz_import
__gmpz_init
__gmpz_init_set
__gmpz_init_set_ui
__gmpz_invert
__gmpz_limbs_finish
__gmpz_limbs_read
__gmpz_limbs_write
__gmpz_mul
__gmpz_mul_2exp
__gmpz_mul_ui
__gmpz_powm
__gmpz_powm_sec
__gmpz_powm_ui
__gmpz_probab_prime_p
__gmpz_roinit_n
__gmpz_scan1
__gmpz_set_ui
__gmpz_setbit
__gmpz_sizeinbase
__gmpz_sub
__gmpz_sub_ui
__gmpz_submul
__gmpz_submul_ui
__gmpz_tdiv_q_2exp
__gmpz_tdiv_qr
__gmpz_tstbit

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_assert
_initterm
_lock
_time64
_unlock
abort
calloc
free
fwrite
memcmp
memcpy
memmove
memset
realloc
strcspn
strlen
strncmp
vfprintf

libnettle-8

nettle_base64_decode_final
nettle_base64_decode_init
nettle_base64_decode_update
nettle_base64_encode_final
nettle_base64_encode_group
nettle_base64_encode_init
nettle_base64_encode_raw
nettle_base64_encode_update
nettle_buffer_grow
nettle_buffer_space
nettle_buffer_write
nettle_cnd_memcpy
nettle_md5_digest
nettle_memxor
nettle_sha1_digest
nettle_sha1_init
nettle_sha1_update
nettle_sha256
nettle_sha256_digest
nettle_sha384
nettle_sha3_256_init
nettle_sha3_256_shake
nettle_sha3_256_update
nettle_sha512
nettle_sha512_digest
nettle_sha512_init
nettle_sha512_update

Exports

Exports

_nettle_cnd_copy
_nettle_curve25519
_nettle_curve25519_eh_to_x
_nettle_curve448
_nettle_curve448_eh_to_x
_nettle_dsa_hash
_nettle_ecc_a_to_j
_nettle_ecc_add_eh
_nettle_ecc_add_ehh
_nettle_ecc_add_jja
_nettle_ecc_add_jjj
_nettle_ecc_add_th
_nettle_ecc_add_thh
_nettle_ecc_curve25519_modp
_nettle_ecc_curve448_modp
_nettle_ecc_dup_eh
_nettle_ecc_dup_jj
_nettle_ecc_dup_th
_nettle_ecc_eh_to_a
_nettle_ecc_hash
_nettle_ecc_j_to_a
_nettle_ecc_mod
_nettle_ecc_mod_add
_nettle_ecc_mod_addmul_1
_nettle_ecc_mod_equal_p
_nettle_ecc_mod_inv
_nettle_ecc_mod_mul
_nettle_ecc_mod_mul_1
_nettle_ecc_mod_mul_canonical
_nettle_ecc_mod_pow_2k
_nettle_ecc_mod_pow_2k_mul
_nettle_ecc_mod_random
_nettle_ecc_mod_sqr
_nettle_ecc_mod_sqr_canonical
_nettle_ecc_mod_sub
_nettle_ecc_mod_submul_1
_nettle_ecc_mod_zero_p
_nettle_ecc_mul_a
_nettle_ecc_mul_a_eh
_nettle_ecc_mul_g
_nettle_ecc_mul_g_eh
_nettle_ecc_mul_m
_nettle_ecc_pm1_redc
_nettle_ecc_pp1_redc
_nettle_ecc_secp192r1_modp
_nettle_ecc_secp224r1_modp
_nettle_ecc_secp256r1_redc
_nettle_ecc_secp384r1_modp
_nettle_ecc_secp521r1_modp
_nettle_ed25519_sha512
_nettle_ed448_shake256
_nettle_eddsa_compress
_nettle_eddsa_compress_itch
_nettle_eddsa_decompress
_nettle_eddsa_decompress_itch
_nettle_eddsa_expand_key
_nettle_eddsa_hash
_nettle_eddsa_public_key
_nettle_eddsa_public_key_itch
_nettle_eddsa_sign
_nettle_eddsa_sign_itch
_nettle_eddsa_verify
_nettle_eddsa_verify_itch
_nettle_generate_pocklington_prime
_nettle_gmp_alloc
_nettle_gmp_alloc_limbs
_nettle_gmp_free
_nettle_gmp_free_limbs
_nettle_gost_gc256b
_nettle_gost_gc512a
_nettle_gost_hash
_nettle_mpn_get_base256
_nettle_mpn_get_base256_le
_nettle_mpn_set_base256
_nettle_mpn_set_base256_le
_nettle_mpz_limbs_copy
_nettle_mpz_set_n
_nettle_pkcs1_sec_decrypt
_nettle_pkcs1_sec_decrypt_variable
_nettle_pkcs1_signature_prefix
_nettle_rsa_blind
_nettle_rsa_check_size
_nettle_rsa_sec_compute_root
_nettle_rsa_sec_compute_root_itch
_nettle_rsa_sec_compute_root_tr
_nettle_rsa_unblind
_nettle_rsa_verify
_nettle_rsa_verify_recover
_nettle_sec_add_1
_nettle_sec_sub_1
_nettle_sec_tabselect
_nettle_sec_zero_p
_nettle_secp_192r1
_nettle_secp_224r1
_nettle_secp_256r1
_nettle_secp_384r1
_nettle_secp_521r1
nettle_asn1_der_decode_bitstring
nettle_asn1_der_decode_bitstring_last
nettle_asn1_der_decode_constructed
nettle_asn1_der_decode_constructed_last
nettle_asn1_der_get_bignum
nettle_asn1_der_get_uint32
nettle_asn1_der_iterator_first
nettle_asn1_der_iterator_next
nettle_curve25519_mul
nettle_curve25519_mul_g
nettle_curve448_mul
nettle_curve448_mul_g
nettle_dsa_compat_generate_keypair
nettle_dsa_generate_keypair
nettle_dsa_generate_params
nettle_dsa_keypair_from_sexp_alist
nettle_dsa_keypair_to_sexp
nettle_dsa_openssl_private_key_from_der_iterator
nettle_dsa_params_clear
nettle_dsa_params_from_der_iterator
nettle_dsa_params_init
nettle_dsa_private_key_clear
nettle_dsa_private_key_init
nettle_dsa_public_key_clear
nettle_dsa_public_key_from_der_iterator
nettle_dsa_public_key_init
nettle_dsa_sha1_keypair_from_sexp
nettle_dsa_sha1_sign
nettle_dsa_sha1_sign_digest
nettle_dsa_sha1_verify
nettle_dsa_sha1_verify_digest
nettle_dsa_sha256_keypair_from_sexp
nettle_dsa_sha256_sign
nettle_dsa_sha256_sign_digest
nettle_dsa_sha256_verify
nettle_dsa_sha256_verify_digest
nettle_dsa_sign
nettle_dsa_signature_clear
nettle_dsa_signature_from_sexp
nettle_dsa_signature_init
nettle_dsa_verify
nettle_ecc_bit_size
nettle_ecc_ecdsa_sign
nettle_ecc_ecdsa_sign_itch
nettle_ecc_ecdsa_verify
nettle_ecc_ecdsa_verify_itch
nettle_ecc_gostdsa_sign
nettle_ecc_gostdsa_sign_itch
nettle_ecc_gostdsa_verify
nettle_ecc_gostdsa_verify_itch
nettle_ecc_point_clear
nettle_ecc_point_get
nettle_ecc_point_init
nettle_ecc_point_mul
nettle_ecc_point_mul_g
nettle_ecc_point_set
nettle_ecc_scalar_clear
nettle_ecc_scalar_get
nettle_ecc_scalar_init
nettle_ecc_scalar_random
nettle_ecc_scalar_set
nettle_ecc_size
nettle_ecc_size_a
nettle_ecc_size_j
nettle_ecdsa_generate_keypair
nettle_ecdsa_sign
nettle_ecdsa_verify
nettle_ed25519_sha512_public_key
nettle_ed25519_sha512_sign
nettle_ed25519_sha512_verify
nettle_ed448_shake256_public_key
nettle_ed448_shake256_sign
nettle_ed448_shake256_verify
nettle_get_gost_gc256b
nettle_get_gost_gc512a
nettle_get_secp_192r1
nettle_get_secp_224r1
nettle_get_secp_256r1
nettle_get_secp_384r1
nettle_get_secp_521r1
nettle_gostdsa_sign
nettle_gostdsa_verify
nettle_gostdsa_vko
nettle_mpz_get_str_256
nettle_mpz_init_set_str_256_s
nettle_mpz_init_set_str_256_u
nettle_mpz_random
nettle_mpz_random_size
nettle_mpz_set_sexp
nettle_mpz_set_str_256_s
nettle_mpz_set_str_256_u
nettle_mpz_sizeinbase_256_s
nettle_mpz_sizeinbase_256_u
nettle_openssl_provate_key_from_der
nettle_pgp_armor
nettle_pgp_crc24
nettle_pgp_put_header
nettle_pgp_put_header_length
nettle_pgp_put_length
nettle_pgp_put_mpi
nettle_pgp_put_public_rsa_key
nettle_pgp_put_rsa_sha1_signature
nettle_pgp_put_string
nettle_pgp_put_sub_packet
nettle_pgp_put_uint16
nettle_pgp_put_uint32
nettle_pgp_put_userid
nettle_pgp_sub_packet_end
nettle_pgp_sub_packet_start
nettle_pkcs1_decrypt
nettle_pkcs1_encrypt
nettle_pkcs1_rsa_digest_encode
nettle_pkcs1_rsa_md5_encode
nettle_pkcs1_rsa_md5_encode_digest
nettle_pkcs1_rsa_sha1_encode
nettle_pkcs1_rsa_sha1_encode_digest
nettle_pkcs1_rsa_sha256_encode
nettle_pkcs1_rsa_sha256_encode_digest
nettle_pkcs1_rsa_sha512_encode
nettle_pkcs1_rsa_sha512_encode_digest
nettle_pss_encode_mgf1
nettle_pss_mgf1
nettle_pss_verify_mgf1
nettle_random_prime
nettle_rsa_compute_root
nettle_rsa_compute_root_tr
nettle_rsa_decrypt
nettle_rsa_decrypt_tr
nettle_rsa_encrypt
nettle_rsa_generate_keypair
nettle_rsa_keypair_from_der
nettle_rsa_keypair_from_sexp
nettle_rsa_keypair_from_sexp_alist
nettle_rsa_keypair_to_openpgp
nettle_rsa_keypair_to_sexp
nettle_rsa_md5_sign
nettle_rsa_md5_sign_digest
nettle_rsa_md5_sign_digest_tr
nettle_rsa_md5_sign_tr
nettle_rsa_md5_verify
nettle_rsa_md5_verify_digest
nettle_rsa_pkcs1_sign
nettle_rsa_pkcs1_sign_tr
nettle_rsa_pkcs1_verify
nettle_rsa_private_key_clear
nettle_rsa_private_key_from_der_iterator
nettle_rsa_private_key_init
nettle_rsa_private_key_prepare
nettle_rsa_pss_sha256_sign_digest_tr
nettle_rsa_pss_sha256_verify_digest
nettle_rsa_pss_sha384_sign_digest_tr
nettle_rsa_pss_sha384_verify_digest
nettle_rsa_pss_sha512_sign_digest_tr
nettle_rsa_pss_sha512_verify_digest
nettle_rsa_public_key_clear
nettle_rsa_public_key_from_der_iterator
nettle_rsa_public_key_init
nettle_rsa_public_key_prepare
nettle_rsa_sec_decrypt
nettle_rsa_sha1_sign
nettle_rsa_sha1_sign_digest
nettle_rsa_sha1_sign_digest_tr
nettle_rsa_sha1_sign_tr
nettle_rsa_sha1_verify
nettle_rsa_sha1_verify_digest
nettle_rsa_sha256_sign
nettle_rsa_sha256_sign_digest
nettle_rsa_sha256_sign_digest_tr
nettle_rsa_sha256_sign_tr
nettle_rsa_sha256_verify
nettle_rsa_sha256_verify_digest
nettle_rsa_sha512_sign
nettle_rsa_sha512_sign_digest
nettle_rsa_sha512_sign_digest_tr
nettle_rsa_sha512_sign_tr
nettle_rsa_sha512_verify
nettle_rsa_sha512_verify_digest
nettle_sexp_format
nettle_sexp_iterator_assoc
nettle_sexp_iterator_check_type
nettle_sexp_iterator_check_types
nettle_sexp_iterator_enter_list
nettle_sexp_iterator_exit_list
nettle_sexp_iterator_first
nettle_sexp_iterator_get_uint32
nettle_sexp_iterator_next
nettle_sexp_iterator_subexpr
nettle_sexp_transport_format
nettle_sexp_transport_iterator_first
nettle_sexp_transport_vformat
nettle_sexp_vformat

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 224B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launcher/libnettle-8.dll
.dll windows:4 windows x64 arch:x64

570b3139773c95c4b9d229f3ab71079a

Code Sign

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

18/02/2022, 00:00

Not After

17/02/2025, 23:59

Subject

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e3:22:4e:b6:2b:ee:0e:8f:94:e2:d7:5b:c8:6a:29:b2:ff:4f:cf:43:4c:26:5d:36:8e:77:46:8f:d8:8d:54:79
Signer

Actual PE Digest

e3:22:4e:b6:2b:ee:0e:8f:94:e2:d7:5b:c8:6a:29:b2:ff:4f:cf:43:4c:26:5d:36:8e:77:46:8f:d8:8d:54:79

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_assert
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
free
fwrite
getenv
localeconv
malloc
memcmp
memcpy
memmove
memset
realloc
strcmp
strerror
strlen
strncmp
vfprintf
wcslen

Exports

Exports

_nettle_aeads
_nettle_aes128_decrypt_aesni
_nettle_aes128_decrypt_c
_nettle_aes128_encrypt_aesni
_nettle_aes128_encrypt_c
_nettle_aes192_decrypt_aesni
_nettle_aes192_decrypt_c
_nettle_aes192_encrypt_aesni
_nettle_aes192_encrypt_c
_nettle_aes256_decrypt_aesni
_nettle_aes256_decrypt_c
_nettle_aes256_encrypt_aesni
_nettle_aes256_encrypt_c
_nettle_aes_decrypt
_nettle_aes_decrypt_table
_nettle_aes_encrypt
_nettle_aes_encrypt_table
_nettle_aes_invert
_nettle_aes_set_key
_nettle_armors
_nettle_blowfish_encround
_nettle_blowfish_initial_ctx
_nettle_camellia_absorb
_nettle_camellia_crypt
_nettle_camellia_invert_key
_nettle_camellia_table
_nettle_cbc_aes128_encrypt_aesni
_nettle_cbc_aes128_encrypt_c
_nettle_cbc_aes192_encrypt_aesni
_nettle_cbc_aes192_encrypt_c
_nettle_cbc_aes256_encrypt_aesni
_nettle_cbc_aes256_encrypt_c
_nettle_chacha_core
_nettle_ciphers
_nettle_cpuid
_nettle_ctr_crypt16
_nettle_ghash_set_key
_nettle_ghash_set_key_c
_nettle_ghash_set_key_pclmul
_nettle_ghash_update
_nettle_ghash_update_pclmul
_nettle_ghash_update_table
_nettle_gost28147_encrypt_block
_nettle_gost28147_param_CryptoPro_3411
_nettle_gost28147_param_test_3411
_nettle_hashes
_nettle_macs
_nettle_memxor_sse2
_nettle_memxor_x86_64
_nettle_poly1305_block
_nettle_poly1305_digest
_nettle_poly1305_set_key
_nettle_ripemd160_compress
_nettle_salsa20_2core
_nettle_salsa20_core
_nettle_salsa20_crypt
_nettle_sha1_compress_sha_ni
_nettle_sha1_compress_x86_64
_nettle_sha256_compress
_nettle_sha256_compress_sha_ni
_nettle_sha256_compress_x86_64
_nettle_sha3_pad
_nettle_sha3_update
_nettle_sha512_compress
_nettle_umac_l2
_nettle_umac_l2_final
_nettle_umac_l2_init
_nettle_umac_l3
_nettle_umac_l3_init
_nettle_umac_nh
_nettle_umac_nh_n
_nettle_umac_poly128
_nettle_umac_poly64
_nettle_umac_set_key
_nettle_write_be32
_nettle_write_le32
_nettle_write_le64
nettle_MD5Final
nettle_MD5Init
nettle_MD5Update
nettle_aes128
nettle_aes128_decrypt
nettle_aes128_encrypt
nettle_aes128_invert_key
nettle_aes128_keyunwrap
nettle_aes128_keywrap
nettle_aes128_set_decrypt_key
nettle_aes128_set_encrypt_key
nettle_aes192
nettle_aes192_decrypt
nettle_aes192_encrypt
nettle_aes192_invert_key
nettle_aes192_keyunwrap
nettle_aes192_keywrap
nettle_aes192_set_decrypt_key
nettle_aes192_set_encrypt_key
nettle_aes256
nettle_aes256_decrypt
nettle_aes256_encrypt
nettle_aes256_invert_key
nettle_aes256_keyunwrap
nettle_aes256_keywrap
nettle_aes256_set_decrypt_key
nettle_aes256_set_encrypt_key
nettle_aes_decrypt
nettle_aes_encrypt
nettle_aes_invert_key
nettle_aes_set_decrypt_key
nettle_aes_set_encrypt_key
nettle_arcfour128_set_key
nettle_arcfour_crypt
nettle_arcfour_set_key
nettle_arctwo128
nettle_arctwo128_set_key
nettle_arctwo128_set_key_gutmann
nettle_arctwo40
nettle_arctwo40_set_key
nettle_arctwo64
nettle_arctwo64_set_key
nettle_arctwo_decrypt
nettle_arctwo_encrypt
nettle_arctwo_gutmann128
nettle_arctwo_set_key
nettle_arctwo_set_key_ekb
nettle_arctwo_set_key_gutmann
nettle_base16
nettle_base16_decode_final
nettle_base16_decode_init
nettle_base16_decode_single
nettle_base16_decode_update
nettle_base16_encode_single
nettle_base16_encode_update
nettle_base64
nettle_base64_decode_final
nettle_base64_decode_init
nettle_base64_decode_single
nettle_base64_decode_update
nettle_base64_encode_final
nettle_base64_encode_group
nettle_base64_encode_init
nettle_base64_encode_raw
nettle_base64_encode_single
nettle_base64_encode_update
nettle_base64url
nettle_base64url_decode_init
nettle_base64url_encode_init
nettle_blowfish128_set_key
nettle_blowfish_bcrypt_hash
nettle_blowfish_bcrypt_verify
nettle_blowfish_decrypt
nettle_blowfish_encrypt
nettle_blowfish_set_key
nettle_buffer_clear
nettle_buffer_copy
nettle_buffer_grow
nettle_buffer_init
nettle_buffer_init_realloc
nettle_buffer_init_size
nettle_buffer_reset
nettle_buffer_space
nettle_buffer_write
nettle_camellia128
nettle_camellia128_crypt
nettle_camellia128_invert_key
nettle_camellia128_set_encrypt_key
nettle_camellia192
nettle_camellia192_set_decrypt_key
nettle_camellia192_set_encrypt_key
nettle_camellia256
nettle_camellia256_crypt
nettle_camellia256_invert_key
nettle_camellia256_set_decrypt_key
nettle_camellia256_set_encrypt_key
nettle_camellia_set_decrypt_key
nettle_cast128
nettle_cast128_decrypt
nettle_cast128_encrypt
nettle_cast128_set_key
nettle_cast5_set_key
nettle_cbc_aes128_encrypt
nettle_cbc_aes192_encrypt
nettle_cbc_aes256_encrypt
nettle_cbc_decrypt
nettle_cbc_encrypt
nettle_ccm_aes128_decrypt
nettle_ccm_aes128_decrypt_message
nettle_ccm_aes128_digest
nettle_ccm_aes128_encrypt
nettle_ccm_aes128_encrypt_message
nettle_ccm_aes128_set_key
nettle_ccm_aes128_set_nonce
nettle_ccm_aes128_update
nettle_ccm_aes192_decrypt
nettle_ccm_aes192_decrypt_message
nettle_ccm_aes192_digest
nettle_ccm_aes192_encrypt
nettle_ccm_aes192_encrypt_message
nettle_ccm_aes192_set_key
nettle_ccm_aes192_set_nonce
nettle_ccm_aes192_update
nettle_ccm_aes256_decrypt
nettle_ccm_aes256_decrypt_message
nettle_ccm_aes256_digest
nettle_ccm_aes256_encrypt
nettle_ccm_aes256_encrypt_message
nettle_ccm_aes256_set_key
nettle_ccm_aes256_set_nonce
nettle_ccm_aes256_update
nettle_ccm_decrypt
nettle_ccm_decrypt_message
nettle_ccm_digest
nettle_ccm_encrypt
nettle_ccm_encrypt_message
nettle_ccm_set_nonce
nettle_ccm_update
nettle_cfb8_decrypt
nettle_cfb8_encrypt
nettle_cfb_decrypt
nettle_cfb_encrypt
nettle_chacha_crypt
nettle_chacha_crypt32
nettle_chacha_poly1305
nettle_chacha_poly1305_decrypt
nettle_chacha_poly1305_digest
nettle_chacha_poly1305_encrypt
nettle_chacha_poly1305_set_key
nettle_chacha_poly1305_set_nonce
nettle_chacha_poly1305_update
nettle_chacha_set_counter
nettle_chacha_set_counter32
nettle_chacha_set_key
nettle_chacha_set_nonce
nettle_chacha_set_nonce96
nettle_cmac128_digest
nettle_cmac128_init
nettle_cmac128_set_key
nettle_cmac128_update
nettle_cmac64_digest
nettle_cmac64_init
nettle_cmac64_set_key
nettle_cmac64_update
nettle_cmac_aes128
nettle_cmac_aes128_digest
nettle_cmac_aes128_set_key
nettle_cmac_aes128_update
nettle_cmac_aes256
nettle_cmac_aes256_digest
nettle_cmac_aes256_set_key
nettle_cmac_aes256_update
nettle_cmac_des3
nettle_cmac_des3_digest
nettle_cmac_des3_set_key
nettle_cmac_des3_update
nettle_cnd_memcpy
nettle_ctr_crypt
nettle_des3_decrypt
nettle_des3_encrypt
nettle_des3_set_key
nettle_des_check_parity
nettle_des_decrypt
nettle_des_encrypt
nettle_des_fix_parity
nettle_des_set_key
nettle_eax_aes128
nettle_eax_aes128_decrypt
nettle_eax_aes128_digest
nettle_eax_aes128_encrypt
nettle_eax_aes128_set_key
nettle_eax_aes128_set_nonce
nettle_eax_aes128_update
nettle_eax_decrypt
nettle_eax_digest
nettle_eax_encrypt
nettle_eax_set_key
nettle_eax_set_nonce
nettle_eax_update
nettle_gcm_aes128
nettle_gcm_aes128_decrypt
nettle_gcm_aes128_digest
nettle_gcm_aes128_encrypt
nettle_gcm_aes128_set_iv
nettle_gcm_aes128_set_key
nettle_gcm_aes128_update
nettle_gcm_aes192
nettle_gcm_aes192_decrypt
nettle_gcm_aes192_digest
nettle_gcm_aes192_encrypt
nettle_gcm_aes192_set_iv
nettle_gcm_aes192_set_key
nettle_gcm_aes192_update
nettle_gcm_aes256
nettle_gcm_aes256_decrypt
nettle_gcm_aes256_digest
nettle_gcm_aes256_encrypt
nettle_gcm_aes256_set_iv
nettle_gcm_aes256_set_key
nettle_gcm_aes256_update
nettle_gcm_aes_decrypt
nettle_gcm_aes_digest
nettle_gcm_aes_encrypt
nettle_gcm_aes_set_iv
nettle_gcm_aes_set_key
nettle_gcm_aes_update
nettle_gcm_camellia128
nettle_gcm_camellia128_decrypt
nettle_gcm_camellia128_digest
nettle_gcm_camellia128_encrypt
nettle_gcm_camellia128_set_iv
nettle_gcm_camellia128_set_key
nettle_gcm_camellia128_update
nettle_gcm_camellia256
nettle_gcm_camellia256_decrypt
nettle_gcm_camellia256_digest
nettle_gcm_camellia256_encrypt
nettle_gcm_camellia256_set_iv
nettle_gcm_camellia256_set_key
nettle_gcm_camellia256_update
nettle_gcm_decrypt
nettle_gcm_digest
nettle_gcm_encrypt
nettle_gcm_set_iv
nettle_gcm_set_key
nettle_gcm_update
nettle_get_aeads
nettle_get_armors
nettle_get_ciphers
nettle_get_hashes
nettle_get_macs
nettle_gosthash94
nettle_gosthash94_digest
nettle_gosthash94_init
nettle_gosthash94_update
nettle_gosthash94cp
nettle_gosthash94cp_digest
nettle_gosthash94cp_update
nettle_hkdf_expand
nettle_hkdf_extract
nettle_hmac_digest
nettle_hmac_gosthash94_digest
nettle_hmac_gosthash94_set_key
nettle_hmac_gosthash94_update
nettle_hmac_gosthash94cp_digest
nettle_hmac_gosthash94cp_set_key
nettle_hmac_gosthash94cp_update
nettle_hmac_md5
nettle_hmac_md5_digest
nettle_hmac_md5_set_key
nettle_hmac_md5_update
nettle_hmac_ripemd160
nettle_hmac_ripemd160_digest
nettle_hmac_ripemd160_set_key
nettle_hmac_ripemd160_update
nettle_hmac_set_key
nettle_hmac_sha1
nettle_hmac_sha1_digest
nettle_hmac_sha1_set_key
nettle_hmac_sha1_update
nettle_hmac_sha224
nettle_hmac_sha224_digest
nettle_hmac_sha224_set_key
nettle_hmac_sha256
nettle_hmac_sha256_digest
nettle_hmac_sha256_set_key
nettle_hmac_sha256_update
nettle_hmac_sha384
nettle_hmac_sha384_digest
nettle_hmac_sha384_set_key
nettle_hmac_sha512
nettle_hmac_sha512_digest
nettle_hmac_sha512_set_key
nettle_hmac_sha512_update
nettle_hmac_sm3
nettle_hmac_sm3_digest
nettle_hmac_sm3_set_key
nettle_hmac_sm3_update
nettle_hmac_streebog256
nettle_hmac_streebog256_digest
nettle_hmac_streebog256_set_key
nettle_hmac_streebog512
nettle_hmac_streebog512_digest
nettle_hmac_streebog512_set_key
nettle_hmac_streebog512_update
nettle_hmac_update
nettle_knuth_lfib_get
nettle_knuth_lfib_get_array
nettle_knuth_lfib_init
nettle_knuth_lfib_random
nettle_lookup_hash
nettle_md2
nettle_md2_digest
nettle_md2_init
nettle_md2_update
nettle_md4
nettle_md4_digest
nettle_md4_init
nettle_md4_update
nettle_md5
nettle_md5_compress
nettle_md5_digest
nettle_md5_init
nettle_md5_update
nettle_memeql_sec
nettle_memxor
nettle_memxor3
nettle_nist_keyunwrap16
nettle_nist_keywrap16
nettle_pbkdf2
nettle_pbkdf2_hmac_gosthash94cp
nettle_pbkdf2_hmac_sha1
nettle_pbkdf2_hmac_sha256
nettle_pbkdf2_hmac_sha384
nettle_pbkdf2_hmac_sha512
nettle_poly1305_aes_digest
nettle_poly1305_aes_set_key
nettle_poly1305_aes_set_nonce
nettle_poly1305_aes_update
nettle_realloc
nettle_ripemd160
nettle_ripemd160_digest
nettle_ripemd160_init
nettle_ripemd160_update
nettle_salsa20_128_set_key
nettle_salsa20_256_set_key
nettle_salsa20_crypt
nettle_salsa20_set_key
nettle_salsa20_set_nonce
nettle_salsa20r12_crypt
nettle_serpent128
nettle_serpent128_set_key
nettle_serpent192
nettle_serpent192_set_key
nettle_serpent256
nettle_serpent256_set_key
nettle_serpent_decrypt
nettle_serpent_encrypt
nettle_serpent_set_key
nettle_sha1
nettle_sha1_compress
nettle_sha1_digest
nettle_sha1_init
nettle_sha1_update
nettle_sha224
nettle_sha224_digest
nettle_sha224_init
nettle_sha256
nettle_sha256_digest
nettle_sha256_init
nettle_sha256_update
nettle_sha384
nettle_sha384_digest
nettle_sha384_init
nettle_sha3_224
nettle_sha3_224_digest
nettle_sha3_224_init
nettle_sha3_224_update
nettle_sha3_256
nettle_sha3_256_digest
nettle_sha3_256_init
nettle_sha3_256_shake
nettle_sha3_256_update
nettle_sha3_384
nettle_sha3_384_digest
nettle_sha3_384_init
nettle_sha3_384_update
nettle_sha3_512
nettle_sha3_512_digest
nettle_sha3_512_init
nettle_sha3_512_update
nettle_sha3_permute
nettle_sha512
nettle_sha512_224
nettle_sha512_224_digest
nettle_sha512_224_init
nettle_sha512_256
nettle_sha512_256_digest
nettle_sha512_256_init
nettle_sha512_digest
nettle_sha512_init
nettle_sha512_update
nettle_siv_cmac_aes128_decrypt_message
nettle_siv_cmac_aes128_encrypt_message
nettle_siv_cmac_aes128_set_key
nettle_siv_cmac_aes256_decrypt_message
nettle_siv_cmac_aes256_encrypt_message
nettle_siv_cmac_aes256_set_key
nettle_siv_cmac_decrypt_message
nettle_siv_cmac_encrypt_message
nettle_siv_cmac_set_key
nettle_sm3
nettle_sm3_digest
nettle_sm3_init
nettle_sm3_update
nettle_streebog256
nettle_streebog256_digest
nettle_streebog256_init
nettle_streebog512
nettle_streebog512_digest
nettle_streebog512_init
nettle_streebog512_update
nettle_twofish128

Sections

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launcher/libpng16-16.dll
.dll windows:4 windows x64 arch:x64

dd1d0a44672e02644fe93d783f634e1e

Code Sign

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

18/02/2022, 00:00

Not After

17/02/2025, 23:59

Subject

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

36:6d:e5:0a:83:93:58:15:b9:16:3f:15:35:e1:3c:0b:d6:aa:1e:2c:07:01:ce:22:96:2b:d3:63:6e:04:c1:97
Signer

Actual PE Digest

36:6d:e5:0a:83:93:58:15:b9:16:3f:15:35:e1:3c:0b:d6:aa:1e:2c:07:01:ce:22:96:2b:d3:63:6e:04:c1:97

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

zlib1

adler32
crc32
deflate
deflateEnd
deflateInit2_
deflateReset
inflate
inflateEnd
inflateInit2_
inflateReset
inflateReset2
inflateValidate

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_amsg_exit
_errno
_gmtime64
_initterm
_lock
_setjmp
_unlock
abort
atof
calloc
fclose
ferror
fflush
fopen
fputc
fread
free
frexp
fwrite
localeconv
malloc
memcmp
memcpy
memset
realloc
remove
strerror
strlen
strncmp
vfprintf
wcslen
longjmp

Exports

Exports

png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_convert_to_rfc1123_buffer
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_XYZ
png_get_cHRM_XYZ_fixed
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_current_pass_number
png_get_current_row_number
png_get_eXIf
png_get_eXIf_1
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_type
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_palette_max
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_progressive_ptr
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_image_begin_read_from_file
png_image_begin_read_from_memory
png_image_begin_read_from_stdio
png_image_finish_read
png_image_free
png_image_write_to_file
png_image_write_to_memory
png_image_write_to_stdio
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_process_data
png_process_data_pause
png_process_data_skip
png_progressive_combine_row
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_alpha_mode
png_set_alpha_mode_fixed
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_XYZ
png_set_cHRM_XYZ_fixed
png_set_cHRM_fixed
png_set_check_for_invalid_index
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_eXIf
png_set_eXIf_1
png_set_error_fn
png_set_expand
png_set_expand_16
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_filter_heuristics_fixed
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mem_fn
png_set_oFFs
png_set_option
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_progressive_read_fn
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_scale_16
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_text_compression_level
png_set_text_compression_mem_level
png_set_text_compression_method
png_set_text_compression_strategy
png_set_text_compression_window_bits
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig

Sections

.text
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launcher/libraryfolder.vdf
Launcher/log_configs/client-1.12.xml
.xml
Launcher/log_configs/options.txt
Launcher/logs/2022-11-04-1.log.gz
.gz
2022-11-04-1.log
Launcher/logs/2022-11-04-2.log.gz
.gz
2022-11-04-2.log
Launcher/logs/2022-11-04-3.log.gz
.gz
2022-11-04-3.log
Launcher/logs/2022-11-05-1.log.gz
.gz
2022-11-05-1.log
Launcher/logs/2022-11-05-2.log.gz
.gz
2022-11-05-2.log
Launcher/logs/2022-11-09-1.log.gz
.gz
2022-11-09-1.log
Launcher/logs/2022-11-10-1.log.gz
.gz
2022-11-10-1.log
Launcher/logs/2022-11-10-2.log.gz
.gz
Launcher/logs/2022-11-10-3.log.gz
.gz
Launcher/logs/2022-11-11-1.log.gz
.gz
Launcher/logs/2022-11-12-1.log.gz
.gz
Launcher/logs/2022-11-12-2.log.gz
.gz
Launcher/logs/2022-11-13-1.log.gz
.gz
Launcher/logs/2022-11-13-2.log.gz
.gz
Launcher/logs/2022-11-13-3.log.gz
.gz
Launcher/logs/2022-11-14-1.log.gz
.gz
Launcher/logs/2022-11-14-2.log.gz
.gz
Launcher/logs/2022-11-14-3.log.gz
.gz
Launcher/logs/2022-11-16-1.log.gz
.gz
Launcher/logs/2022-11-16-2.log.gz
.gz
Launcher/logs/2022-11-16-3.log.gz
.gz
Launcher/logs/2022-11-16-4.log.gz
.gz
Launcher/logs/2022-11-19-1.log.gz
.gz
Launcher/logs/2022-11-19-2.log.gz
.gz
Launcher/logs/2022-11-19-3.log.gz
.gz
Launcher/logs/2022-11-20-1.log.gz
.gz
Launcher/logs/2022-11-20-2.log.gz
.gz
Launcher/logs/2022-11-21-1.log.gz
.gz
Launcher/logs/2022-11-21-2.log.gz
.gz
Launcher/logs/2022-11-21-3.log.gz
.gz
Launcher/logs/2022-11-21-4.log.gz
.gz
Launcher/logs/2022-11-21-5.log.gz
.gz
Launcher/logs/2022-11-22-1.log.gz
.gz
Launcher/logs/2022-11-22-2.log.gz
.gz
Launcher/logs/2022-11-23-1.log.gz
.gz
Launcher/logs/2022-11-23-2.log.gz
.gz
Launcher/logs/2022-11-23-3.log.gz
.gz
Launcher/logs/2022-11-24-1.log.gz
.gz
Launcher/logs/2022-11-25-1.log.gz
.gz
Launcher/logs/2022-11-25-2.log.gz
.gz
Launcher/logs/2022-11-26-1.log.gz
.gz
Launcher/logs/2022-11-26-2.log.gz
.gz
Launcher/logs/2022-11-27-1.log.gz
.gz
Launcher/logs/2022-11-27-2.log.gz
.gz
Launcher/logs/2022-12-03-1.log.gz
.gz
Launcher/logs/2022-12-16-1.log.gz
.gz
Launcher/logs/2022-12-16-2.log.gz
.gz
Launcher/logs/2022-12-16-3.log.gz
.gz
Launcher/logs/2022-12-16-4.log.gz
.gz
Launcher/logs/2022-12-18-1.log.gz
.gz
Launcher/logs/2022-12-18-2.log.gz
.gz
Launcher/logs/2022-12-18-3.log.gz
.gz
Launcher/logs/2022-12-19-1.log.gz
.gz
Launcher/logs/2022-12-20-1.log.gz
.gz
Launcher/logs/2022-12-23-1.log.gz
.gz
Launcher/logs/2022-12-23-2.log.gz
.gz
Launcher/logs/2022-12-23-3.log.gz
.gz
Launcher/logs/2022-12-23-4.log.gz
.gz
Launcher/logs/2022-12-24-1.log.gz
.gz
Launcher/logs/2022-12-24-2.log.gz
.gz
Launcher/logs/2022-12-24-3.log.gz
.gz
Launcher/logs/2022-12-24-4.log.gz
.gz
Launcher/logs/2022-12-28-1.log.gz
.gz
Launcher/logs/2022-12-30-1.log.gz
.gz
Launcher/logs/2022-12-30-2.log.gz
.gz
Launcher/logs/2022-12-31-1.log.gz
.gz
Launcher/logs/2023-01-01-1.log.gz
.gz
Launcher/logs/2023-01-01-2.log.gz
.gz
Launcher/logs/2023-01-05-1.log.gz
.gz
Launcher/logs/2023-01-05-2.log.gz
.gz
Launcher/logs/2023-01-13-1.log.gz
.gz
Launcher/logs/2023-01-18-1.log.gz
.gz
Launcher/logs/2023-07-20-1.log.gz
.gz
Launcher/logs/2023-07-20-2.log.gz
.gz
Launcher/logs/2023-08-11-1.log.gz
.gz
Launcher/logs/2023-08-12-1.log.gz
.gz
Launcher/logs/2023-08-12-2.log.gz
.gz
Launcher/logs/2023-08-17-1.log.gz
.gz
Launcher/logs/2023-11-04-1.log.gz
.gz
Launcher/logs/2023-11-10-1.log.gz
.gz
Launcher/logs/2023-11-10-2.log.gz
.gz
Launcher/logs/2023-11-10-3.log.gz
.gz
Launcher/logs/2023-11-10-4.log.gz
.gz
Launcher/logs/2023-11-11-1.log.gz
.gz
Launcher/logs/2023-11-12-1.log.gz
.gz
Launcher/logs/2023-11-12-2.log.gz
.gz
Launcher/logs/2023-11-12-3.log.gz
.gz
Launcher/logs/2023-11-13-1.log.gz
.gz
Launcher/logs/2023-11-13-2.log.gz
.gz
Launcher/logs/2023-11-13-3.log.gz
.gz
Launcher/logs/2023-11-13-4.log.gz
.gz
Launcher/logs/2023-11-14-1.log.gz
.gz
Launcher/logs/2023-11-14-2.log.gz
.gz
Launcher/logs/2023-11-14-3.log.gz
.gz
Launcher/logs/2023-11-15-1.log.gz
.gz
Launcher/logs/2023-11-16-1.log.gz
.gz
Launcher/logs/2023-11-16-2.log.gz
.gz
Launcher/logs/2023-11-17-1.log.gz
.gz
Launcher/logs/2023-11-17-2.log.gz
.gz
Launcher/logs/2023-11-17-3.log.gz
.gz
Launcher/logs/2023-11-18-1.log.gz
.gz
Launcher/logs/2023-11-18-2.log.gz
.gz
Launcher/logs/2023-11-18-3.log.gz
.gz
Launcher/logs/2023-11-18-4.log.gz
.gz
Launcher/logs/2023-11-18-5.log.gz
.gz
Launcher/logs/2023-11-19-1.log.gz
.gz
Launcher/logs/2023-11-20-1.log.gz
.gz
Launcher/logs/2023-11-21-1.log.gz
.gz
Launcher/logs/2023-11-22-1.log.gz
.gz
Launcher/logs/2023-11-24-1.log.gz
.gz
Launcher/logs/2023-11-24-2.log.gz
.gz
Launcher/logs/2023-11-25-1.log.gz
.gz
Launcher/logs/2023-11-25-2.log.gz
.gz
Launcher/logs/2023-11-25-3.log.gz
.gz
Launcher/logs/2023-11-26-1.log.gz
.gz
Launcher/logs/2023-11-26-2.log.gz
.gz
Launcher/logs/2023-11-26-3.log.gz
.gz
Launcher/logs/2023-11-27-1.log.gz
.gz
Launcher/logs/2023-11-28-1.log.gz
.gz
Launcher/logs/2023-11-29-1.log.gz
.gz
Launcher/logs/2023-11-29-2.log.gz
.gz
Launcher/logs/2023-11-30-1.log.gz
.gz
Launcher/logs/2023-11-30-2.log.gz
.gz
Launcher/logs/2023-11-30-3.log.gz
.gz
Launcher/logs/2023-12-01-1.log.gz
.gz
Launcher/logs/2023-12-03-1.log.gz
.gz
Launcher/logs/2023-12-05-1.log.gz
.gz
Launcher/logs/2023-12-06-1.log.gz
.gz
Launcher/logs/2023-12-06-2.log.gz
.gz
Launcher/logs/2023-12-07-1.log.gz
.gz
Launcher/logs/2023-12-07-2.log.gz
.gz
Launcher/logs/2023-12-09-1.log.gz
.gz
Launcher/logs/2023-12-09-2.log.gz
.gz
Launcher/logs/2023-12-10-1.log.gz
.gz
Launcher/logs/2023-12-10-2.log.gz
.gz
Launcher/logs/2023-12-13-1.log.gz
.gz
Launcher/logs/2023-12-15-1.log.gz
.gz
Launcher/logs/2023-12-22-1.log.gz
.gz
Launcher/logs/latest.log
Launcher/logs/options.txt
Launcher/logs/rei.log
Launcher/options.txt
Launcher/support/logging/actionqueueetw.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ce:88:8c:c2:3a:b4:8e:39:36:8f:e5:93:70:cc:ff:30:db:19:d4:46:ab:87:cf:31:52:d5:dc:00:e5:79:60:7d
Signer

Actual PE Digest

ce:88:8c:c2:3a:b4:8e:39:36:8f:e5:93:70:cc:ff:30:db:19:d4:46:ab:87:cf:31:52:d5:dc:00:e5:79:60:7d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launcher/support/logging/auditetw.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

25:f2:51:e7:64:1a:3c:84:7f:c1:63:12:dc:72:37:f7:b8:1c:55:66:8d:95:9b:25:fe:fa:60:2a:94:1d:48:94
Signer

Actual PE Digest

25:f2:51:e7:64:1a:3c:84:7f:c1:63:12:dc:72:37:f7:b8:1c:55:66:8d:95:9b:25:fe:fa:60:2a:94:1d:48:94

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launcher/support/logging/cmisetupetw.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

db:1c:0b:5c:96:48:29:7b:07:6a:0f:f8:13:a1:96:a0:13:0a:ff:53:f5:0c:9d:cb:15:2c:48:15:01:e6:c8:9b
Signer

Actual PE Digest

db:1c:0b:5c:96:48:29:7b:07:6a:0f:f8:13:a1:96:a0:13:0a:ff:53:f5:0c:9d:cb:15:2c:48:15:01:e6:c8:9b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launcher/support/logging/etwproviderinstall.vbs
.vbs
Launcher/support/logging/microsoft-windows-actionqueue-instrumentation.man
.xml
Launcher/support/logging/microsoft-windows-audit-instrumentation.man
.xml
Launcher/support/logging/microsoft-windows-cmisetup-instrumentation.man
.xml
Launcher/support/logging/microsoft-windows-oobeldr-instrumentation.man
.xml
Launcher/support/logging/microsoft-windows-setup-events.man
.xml
Launcher/support/logging/microsoft-windows-setup-instrumentation.man
.xml
Launcher/support/logging/microsoft-windows-setupcl-instrumentation.man
.xml
Launcher/support/logging/microsoft-windows-setupugc-instrumentation.man
.xml
Launcher/support/logging/microsoft-windows-sysprep-instrumentation.man
.xml
Launcher/support/logging/microsoft-windows-windeploy-instrumentation.man
.xml
Launcher/support/logging/oobeldretw.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

83:43:b4:67:05:16:bc:a1:c7:74:32:19:35:d2:26:0a:f2:df:f2:f4:4d:fb:3b:7d:ef:0f:e0:35:d4:65:d1:4c
Signer

Actual PE Digest

83:43:b4:67:05:16:bc:a1:c7:74:32:19:35:d2:26:0a:f2:df:f2:f4:4d:fb:3b:7d:ef:0f:e0:35:d4:65:d1:4c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launcher/support/logging/options.txt
Launcher/support/logging/ru-ru/actionqueueetw.dll.mui
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launcher/support/logging/setupcletw.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:bb:6e:ff:e7:ac:8f:a2:93:6e:3f:3c:64:ef:2f:dc:5e:da:fd:2f:cb:83:12:19:14:e2:c0:15:fc:b8:29:ea
Signer

Actual PE Digest

4f:bb:6e:ff:e7:ac:8f:a2:93:6e:3f:3c:64:ef:2f:dc:5e:da:fd:2f:cb:83:12:19:14:e2:c0:15:fc:b8:29:ea

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launcher/support/logging/setupetw.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:23

Not After

01/09/2022, 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:ce:4c:c7:b3:50:78:29:d3:a4:6a:b4:70:73:fb:59:e5:d6:b7:69:66:ef:52:d1:07:8b:ad:72:31:7c:63:b8
Signer

Actual PE Digest

72:ce:4c:c7:b3:50:78:29:d3:a4:6a:b4:70:73:fb:59:e5:d6:b7:69:66:ef:52:d1:07:8b:ad:72:31:7c:63:b8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launcher/support/logging/setupugcetw.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:f4:84:e0:6e:74:9f:fc:06:d5:0b:15:26:d0:c0:51:20:d9:74:78:28:c9:80:dc:06:7b:1e:43:b4:29:4c:9c
Signer

Actual PE Digest

b4:f4:84:e0:6e:74:9f:fc:06:d5:0b:15:26:d0:c0:51:20:d9:74:78:28:c9:80:dc:06:7b:1e:43:b4:29:4c:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launcher/support/logging/sysprepetw.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e7:79:0c:b9:c0:4e:29:b5:b8:f0:f2:47:31:6f:b4:eb:af:d8:35:a8:d9:28:3c:75:69:c7:98:60:83:cf:d7:e8
Signer

Actual PE Digest

e7:79:0c:b9:c0:4e:29:b5:b8:f0:f2:47:31:6f:b4:eb:af:d8:35:a8:d9:28:3c:75:69:c7:98:60:83:cf:d7:e8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launcher/support/logging/windeployetw.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:25:a8:99:f6:7d:bc:81:48:c8:a5:de:e7:c0:0f:a8:a3:dd:e8:79:0f:5a:c3:b1:77:fb:5a:c5:bb:52:9f:d0
Signer

Actual PE Digest

bc:25:a8:99:f6:7d:bc:81:48:c8:a5:de:e7:c0:0f:a8:a3:dd:e8:79:0f:5a:c3:b1:77:fb:5a:c5:bb:52:9f:d0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launcher/support/logging/winsetupetw.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d5:b7:47:5f:16:f0:91:af:ec:49:d9:6b:96:a2:66:9a:90:b3:7f:eb:c8:e5:2a:76:4e:bc:b0:5a:d2:6d:02:9c
Signer

Actual PE Digest

d5:b7:47:5f:16:f0:91:af:ec:49:d9:6b:96:a2:66:9a:90:b3:7f:eb:c8:e5:2a:76:4e:bc:b0:5a:d2:6d:02:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1af6c885af093afc55142c2f1761dbe8

Headers

DLL Characteristics

File Characteristics

Imports

user32

comctl32

kernel32

advapi32

gdi32

Sections

.text Size: 167KB - Virtual size: 167KB

.rdata Size: 75KB - Virtual size: 75KB

.data Size: 3KB - Virtual size: 12KB

.pdata Size: 9KB - Virtual size: 8KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 267KB - Virtual size: 266KB

.reloc Size: 2KB - Virtual size: 1KB

8e2588a9cf43886de3449dfff03137b6

Code Sign

33:00:00:00:6f:65:2d:58:6d:07:11:46:28:00:00:00:00:00:6fCertificate

Extended Key Usages

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

6b:c4:15:a1:23:fa:49:fb:dc:05:86:1f:21:48:b0:49:3b:d5:1d:dc:c6:72:35:17:aa:75:ea:bc:63:fa:76:f8Signer

57:19:7f:e6:ec:8b:ea:59:58:33:9f:f6:88:06:04:41:78:e0:04:94Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gdiplus

advapi32

user32

oleaut32

gdi32

shell32

ole32

kernel32

cabinet

crypt32

msi

rpcrt4

wininet

wintrust

version

Sections

.text Size: 229KB - Virtual size: 228KB

.rdata Size: 104KB - Virtual size: 104KB

.data Size: 4KB - Virtual size: 12KB

.wixburn Size: 512B - Virtual size: 56B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 14KB - Virtual size: 14KB

.reloc Size: 17KB - Virtual size: 17KB

8e2588a9cf43886de3449dfff03137b6

Code Sign

33:00:00:00:71:b3:2e:8a:6b:82:aa:1f:4e:00:00:00:00:00:71Certificate

Extended Key Usages

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38Certificate

.text
Size: 167KB - Virtual size: 167KB

.rdata
Size: 75KB - Virtual size: 75KB

.data
Size: 3KB - Virtual size: 12KB

.pdata
Size: 9KB - Virtual size: 8KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 267KB - Virtual size: 266KB

.reloc
Size: 2KB - Virtual size: 1KB

33:00:00:00:6f:65:2d:58:6d:07:11:46:28:00:00:00:00:00:6f
Certificate

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

6b:c4:15:a1:23:fa:49:fb:dc:05:86:1f:21:48:b0:49:3b:d5:1d:dc:c6:72:35:17:aa:75:ea:bc:63:fa:76:f8
Signer

57:19:7f:e6:ec:8b:ea:59:58:33:9f:f6:88:06:04:41:78:e0:04:94
Signer

.text
Size: 229KB - Virtual size: 228KB

.rdata
Size: 104KB - Virtual size: 104KB

.data
Size: 4KB - Virtual size: 12KB

.wixburn
Size: 512B - Virtual size: 56B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 14KB - Virtual size: 14KB

.reloc
Size: 17KB - Virtual size: 17KB

33:00:00:00:71:b3:2e:8a:6b:82:aa:1f:4e:00:00:00:00:00:71
Certificate

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:38:8d:23:6d:16:27:a3:26:e0:00:00:00:00:00:38
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

ab:06:cb:ec:52:d7:a1:69:63:80:49:01:2e:f8:86:a1:5e:87:65:11:a6:e9:90:cd:1f:7b:f7:ad:25:14:e8:b4
Signer

df:f2:e7:17:7c:35:2e:2a:10:e7:c1:35:9e:a2:41:d0:98:70:74:d6
Signer

.text
Size: 229KB - Virtual size: 228KB

.rdata
Size: 104KB - Virtual size: 104KB

.data
Size: 4KB - Virtual size: 12KB

.wixburn
Size: 512B - Virtual size: 56B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 14KB - Virtual size: 14KB

.reloc
Size: 17KB - Virtual size: 17KB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:05:a2:30:00:00:00:00:00:08
Certificate

7e:e6:b3:26:a0:5b:83:d2:4a:74:47:94:80:1b:e6:8c:ef:59:05:96
Signer

.text
Size: 33KB - Virtual size: 33KB

.data
Size: 512B - Virtual size: 68KB

.rsrc
Size: 5.4MB - Virtual size: 5KB

33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33
Certificate

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
Certificate