0d1379361d9bcb05858fdcba29825182_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0d1379361d9bcb05858fdcba29825182_JaffaCakes118
Size

6.6MB
MD5

0d1379361d9bcb05858fdcba29825182
SHA1

10f3d6c8d619ccc322956773dfe46dccc61ab806
SHA256

76f02e13d890c465e8212fd9afa4fbe9ea47d051a2e558f3e26e124e8675da15
SHA512

b6e46a1422fdc08b21183f2a9f528ed876138a4d645eb20d98adcf6c53780ceeedaeb50c28aac9a1202ddf00706a6fce819f660aee2b158ac1df2a28cffd431b
SSDEEP

98304:0/uQ/WGINp+nwrwtqj6lOdC2/jcqadRjaBvnzHDKScXLh0cVqX0AnsawsG21STNa:Q1FIH+DqmlR2/j6dRmbfYtVKTw8eoY0

Score

1^/10

Malware Config

Signatures

Files

0d1379361d9bcb05858fdcba29825182_JaffaCakes118
.zip
Launch Manager_Dritek_5.0.3_Win7x86/CDROMUTL.DLL
.dll windows:5 windows x86 arch:x86

d90ac94ff22c174e8c4ff0db5b137461

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/10/2006, 00:00

Not After

16/10/2009, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d5:4a:1d:4f:25:3b:df:1a:4a:a2:e9:8e:67:8d:e0:9b:c4:63:25:08
Signer

Actual PE Digest

d5:4a:1d:4f:25:3b:df:1a:4a:a2:e9:8e:67:8d:e0:9b:c4:63:25:08

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Dritek\Compal\2008\JAxx.export-for all 2008win7.unicode\Update\CDRomUtl.DLL\src\Release_Unicode\CDRomUtl.pdb

Imports

winmm

mciSendStringW
mciSendCommandW

kernel32

DeleteCriticalSection
CompareStringW
CompareStringA
GetPrivateProfileStringA
DeleteFileA
WritePrivateProfileStringA
CopyFileA
lstrcmpiA
SearchPathA
GetDriveTypeW
GetLogicalDrives
FindClose
FindNextFileW
lstrcmpiW
FindFirstFileW
lstrcatW
lstrcpyW
lstrlenW
GetVolumeInformationW
FlushFileBuffers
CloseHandle
CreateFileA
GetLocaleInfoW
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetLastError
GetCurrentThread
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetEnvironmentVariableA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
FatalAppExitA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapAlloc
VirtualAlloc
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetTimeZoneInformation
HeapSize

user32

SendMessageW
PostMessageW
wsprintfW

Exports

Exports

CDRomUtl_DeInit
CDRomUtl_DeviceChange
CDRomUtl_GetCDRomDrive
CDRomUtl_GetCDTitle
CDRomUtl_GetCDTitleEx
CDRomUtl_GetTotalCDRomDrives
CDRomUtl_Init
CDRomUtl_IsCDRomDoorOpen
CDRomUtl_IsCDRomMediaPresent
CDRomUtl_OpenCDRomDoor

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/CdDirIo.dll
.dll windows:5 windows x86 arch:x86

15d1a8ea27c634088e401db37908d9cc

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

db:56:77:6f:1a:bd:20:87:4b:a6:c9:5b:68:54:86:44:66:67:63:17
Signer

Actual PE Digest

db:56:77:6f:1a:bd:20:87:4b:a6:c9:5b:68:54:86:44:66:67:63:17

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\SVN_Map\SRC\utility\CdDirIo.DLL\trunk\src\Release_Unicode\CdDirIo.pdb

Imports

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
CM_Reenumerate_DevNode
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsW
CM_Get_Parent
SetupDiDestroyDeviceInfoList

kernel32

ExitProcess
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
lstrcpynW
IsBadWritePtr
WideCharToMultiByte
CloseHandle
CreateFileW
DeviceIoControl
lstrlenW
lstrcpyW
GetLogicalDrives
QueryDosDeviceW
lstrcmpW
GetLastError
GetLocaleInfoA
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize

user32

wsprintfW

Exports

Exports

CdDirIo_ConfirmMeidaNotExist
CdDirIo_DeInit
CdDirIo_EjectDevice
CdDirIo_EjectMedia
CdDirIo_GetBusType
CdDirIo_GetDeviceHardwareIDA
CdDirIo_GetDeviceHardwareIDW
CdDirIo_GetFriendlyNameA
CdDirIo_GetFriendlyNameW
CdDirIo_GetHotPlugSupported
CdDirIo_Init
CdDirIo_IsDoorOpen
CdDirIo_IsMediaReady
CdDirIo_OpenDoor
CdDirIo_RescanDevice
CdDirIo_StopDisc

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/CloseApp/CloseHookApp.cfg
Launch Manager_Dritek_5.0.3_Win7x86/CloseApp/CloseHookApp.exe
.exe windows:5 windows x86 arch:x86

eeff1b59d6cb6eeb8133f38a816aecfd

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

42:48:19:3a:f9:f9:6a:7d:c6:33:1a:c0:3a:a1:c6:35:15:c4:d5:26
Signer

Actual PE Digest

42:48:19:3a:f9:f9:6a:7d:c6:33:1a:c0:3a:a1:c6:35:15:c4:d5:26

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveExtensionW
PathAddExtensionW

kernel32

GetPrivateProfileStringW
GetModuleFileNameW
LCMapStringW
LCMapStringA
GetStringTypeW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar

user32

FindWindowW
PostMessageW
wsprintfW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/ComFnUtl.dll
.dll windows:5 windows x86 arch:x86

395dc3652b1ff5c2221d842e50e3b6de

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/10/2006, 00:00

Not After

16/10/2009, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:7d:1d:71:cc:df:c7:d7:1f:6e:9b:ec:3b:73:d1:b6:23:8b:26:5f
Signer

Actual PE Digest

3b:7d:1d:71:cc:df:c7:d7:1f:6e:9b:ec:3b:73:d1:b6:23:8b:26:5f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Dritek\Compal\2008\JAxx.export-for all 2008win7.unicode\Update\ComFnUtl.DLL\src\Release_UNICODE\ComFnUtl.pdb

Imports

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

GlobalAlloc
lstrlenW
MultiByteToWideChar
lstrcpyA
WideCharToMultiByte
lstrcatW
ExpandEnvironmentStringsW
lstrcmpiW
GetVersionExW
LocalFree
FormatMessageW
DeleteFileW
CloseHandle
WriteFile
GetLastError
CreateFileW
GetModuleFileNameW
GetWindowsDirectoryW
GetSystemDirectoryW
GetCurrentProcess
SetSystemPowerState
CreateProcessW
GetCurrentThreadId
Sleep
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GlobalLock
GetLocaleInfoA
GetLocaleInfoW
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetCurrentThread
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
lstrcpyW
GlobalUnlock
GlobalFree
GetTimeZoneInformation
CompareStringA
SetEnvironmentVariableA
CompareStringW
GetTimeFormatA
GetStdHandle
ExitProcess
GetProcAddress
GetModuleHandleW
HeapReAlloc
VirtualAlloc
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapFree
HeapAlloc
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy

user32

EmptyClipboard
SetClipboardData
SetRect
OpenClipboard
GetTopWindow
GetWindow
GetSystemMenu
GetMenuState
GetFocus
SetFocus
GetParent
GetWindowLongW
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
IsIconic
ShowWindow
GetSystemMetrics
GetWindowRect
RegisterWindowMessageW
SetWindowPos
GetDesktopWindow
SendMessageTimeoutW
EnumDesktopWindows
GetCursorPos
mouse_event
SetCursorPos
OpenDesktopW
CloseDesktop
SystemParametersInfoW
EnumThreadWindows
ExitWindowsEx
FindWindowW
PostMessageW
wsprintfW
keybd_event
MessageBoxW
IsWindow
IsWindowVisible
CloseClipboard

advapi32

LookupPrivilegeValueW
OpenProcessToken
AdjustTokenPrivileges
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
FindExecutableW
ShellExecuteExW

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Exports

Exports

BroadcastMessage
ComFnUtl_BroadcastMessage
ComFnUtl_CenterWindow
ComFnUtl_CloseScreenSaver
ComFnUtl_CopyTextToClipboard
ComFnUtl_CopyTextToClipboardA
ComFnUtl_CopyTextToClipboardW
ComFnUtl_CreateShortcut
ComFnUtl_CreateShortcutA
ComFnUtl_CreateShortcutW
ComFnUtl_CycleApplication
ComFnUtl_ExecuteCommand
ComFnUtl_ExecuteCommandA
ComFnUtl_ExecuteCommandEx
ComFnUtl_ExecuteCommandExA
ComFnUtl_ExecuteCommandExW
ComFnUtl_ExecuteCommandW
ComFnUtl_ExecuteScreenSaver
ComFnUtl_GetAssociateExecuteFileFromExtName
ComFnUtl_GetAssociateExecuteFileFromExtNameA
ComFnUtl_GetAssociateExecuteFileFromExtNameW
ComFnUtl_GetDefaultPlayerFileNameByExtName
ComFnUtl_GetDefaultPlayerFileNameByExtNameA
ComFnUtl_GetDefaultPlayerFileNameByExtNameW
ComFnUtl_GetFileVersionByFileName
ComFnUtl_GetFileVersionByFileNameA
ComFnUtl_GetFileVersionByFileNameW
ComFnUtl_GetFileVersionByFullPathFileName
ComFnUtl_GetFileVersionByFullPathFileNameA
ComFnUtl_GetFileVersionByFullPathFileNameW
ComFnUtl_GetFocusHandle
ComFnUtl_GetInternetExplorerDefaultHomePage
ComFnUtl_GetInternetExplorerDefaultHomePageA
ComFnUtl_GetInternetExplorerDefaultHomePageW
ComFnUtl_GetScreenSaverTimeOut
ComFnUtl_GetSpecialFolder
ComFnUtl_GetSpecialFolderA
ComFnUtl_GetSpecialFolderPath
ComFnUtl_GetSpecialFolderPathA
ComFnUtl_GetSpecialFolderPathW
ComFnUtl_GetSpecialFolderW
ComFnUtl_GetSystemClientsDefaultSubKey
ComFnUtl_GetSystemClientsDefaultSubKeyA
ComFnUtl_GetSystemClientsDefaultSubKeyW
ComFnUtl_GetSystemClientsFileNameBySubKey
ComFnUtl_GetSystemClientsFileNameBySubKeyA
ComFnUtl_GetSystemClientsFileNameBySubKeyW
ComFnUtl_GetSystemClientsSubKey
ComFnUtl_GetSystemClientsSubKeyA
ComFnUtl_GetSystemClientsSubKeyW
ComFnUtl_GetSystemDefaultBrowserFileName
ComFnUtl_GetSystemDefaultBrowserFileNameA
ComFnUtl_GetSystemDefaultBrowserFileNameW
ComFnUtl_GetSystemDefaultMailFileName
ComFnUtl_GetSystemDefaultMailFileNameA
ComFnUtl_GetSystemDefaultMailFileNameW
ComFnUtl_GetSystemDefaultMailSubKey
ComFnUtl_GetSystemDefaultMailSubKeyA
ComFnUtl_GetSystemDefaultMailSubKeyW
ComFnUtl_GetSystemDefaultPlayerFileName
ComFnUtl_GetSystemDefaultPlayerFileNameA
ComFnUtl_GetSystemDefaultPlayerFileNameW
ComFnUtl_GetSystemMailFileNameBySubKey
ComFnUtl_GetSystemMailFileNameBySubKeyA
ComFnUtl_GetSystemMailFileNameBySubKeyW
ComFnUtl_GetSystemMailSubKey
ComFnUtl_GetSystemMailSubKeyA
ComFnUtl_GetSystemMailSubKeyW
ComFnUtl_IsScreenSaverActive
ComFnUtl_IsScreenSaverRunning
ComFnUtl_IssueWindowsAPPCommand
ComFnUtl_MinimizeAllApplication
ComFnUtl_MinimizeWindow
ComFnUtl_OpenSpecialFolder
ComFnUtl_OpenSpecialFolderA
ComFnUtl_OpenSpecialFolderW
ComFnUtl_ResolveShortcut
ComFnUtl_ResolveShortcutA
ComFnUtl_ResolveShortcutW
ComFnUtl_RetrieveRegisterWindowMessage
ComFnUtl_RotateApplication
ComFnUtl_SendAPPCommand
ComFnUtl_SendAPPCommandEx
ComFnUtl_SetFocusHandle
ComFnUtl_SetScreenSaverActive
ComFnUtl_SetScreenSaverTimeOut
ComFnUtl_SetWindowToActive
ComFnUtl_SetWindowToForeground
ComFnUtl_ShowShutDownWindows
ComFnUtl_ShowSystemDefaultErrorMessage
ComFnUtl_ShowSystemDefaultErrorMessageA
ComFnUtl_ShowSystemDefaultErrorMessageW
ComFnUtl_ShutDownWindows
ComFnUtl_SuspendSystemByPowerDown

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/DelPrevV.dll
.dll windows:5 windows x86 arch:x86

40ab5af6a7352a09025052786c4d9d1a

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

99:53:70:e3:69:ac:23:75:0f:b7:97:7d:3c:f5:5c:42:4a:b3:c5:d6
Signer

Actual PE Digest

99:53:70:e3:69:ac:23:75:0f:b7:97:7d:3c:f5:5c:42:4a:b3:c5:d6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Works\Acer\lmv5.svn.reltag\src\Release\DelPrevV.pdb

Imports

shlwapi

PathAddExtensionW
PathFindExtensionW
PathIsDirectoryEmptyW
PathAppendW
PathIsSystemFolderW

kernel32

InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
VirtualFree
VerSetConditionMask
VerifyVersionInfoW
GetModuleHandleW
OutputDebugStringA
lstrcpynW
InterlockedExchange
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetLastError
SetLastError
WaitForSingleObject
SetFilePointer
CreateFileW
CreateMutexW
ReleaseMutex
WriteFile
GetModuleHandleA
RaiseException
IsDebuggerPresent
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
HeapSize
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
CloseHandle
CreateProcessW
GetPrivateProfileIntW
Sleep
lstrcmpW
GetWindowsDirectoryW
FreeLibrary
SetEnvironmentVariableA
GetProcAddress
LoadLibraryW
GetFullPathNameW
GetPrivateProfileStringW
RemoveDirectoryW
lstrcmpiW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
lstrcatW
lstrlenW
lstrcpyW
ReadFile
CreateFileA
GetLocaleInfoW
CompareStringA
CompareStringW
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
HeapReAlloc
ExitProcess
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
GetCommandLineA
SetUnhandledExceptionFilter
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
TerminateProcess
UnhandledExceptionFilter

user32

DdeInitializeW
MessageBoxW
SendMessageW
FindWindowW
wsprintfW
LoadStringW
DdeCreateStringHandleW
PostMessageW
DdeCreateDataHandle
DdeUninitialize
DdeFreeDataHandle
DdeUnaccessData
DdeAccessData
DdeDisconnect
DdeFreeStringHandle
DdeClientTransaction
DdeConnect

advapi32

RegDeleteKeyW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
DeleteService
ControlService
StartServiceW
QueryServiceStatusEx
RegEnumKeyExW
RegDeleteValueW
RegEnumValueW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

SHChangeNotify
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc

ole32

CoUninitialize
CoInitialize
CoCreateInstance

Exports

Exports

DelPrevV_DoIt

Sections

.text
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/DelPrevV.ini
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.BGR
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.CZE
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.Dan
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.Dut
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.EST
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.Eng
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.Fin
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.Fre
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.GRC
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.Ger
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.HRV
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.HUN
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.Ita
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.Jap
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.Kor
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.LTU
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.LVA
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.NOR
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.POL
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.Por
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.ROU
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.RUS
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.SVK
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.SVN
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.SWE
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.Sch
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.Spa
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.TUR
Launch Manager_Dritek_5.0.3_Win7x86/INFs/Setup.Tch
Launch Manager_Dritek_5.0.3_Win7x86/InstScript/SetupMCE.w7
Launch Manager_Dritek_5.0.3_Win7x86/InstScript/SetupMCE64.w7
Launch Manager_Dritek_5.0.3_Win7x86/LGKCUTL.DLL
.dll windows:5 windows x86 arch:x86

1308d6b1e03be2bbc760a45ec504ee86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/10/2006, 00:00

Not After

16/10/2009, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:55:f7:22:18:5d:89:f6:50:26:47:9e:9d:58:d7:51:1c:83:b1:f9
Signer

Actual PE Digest

48:55:f7:22:18:5d:89:f6:50:26:47:9e:9d:58:d7:51:1c:83:b1:f9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntW
CreateFileW
lstrcatW
lstrcpyW
GetPrivateProfileStringW
lstrlenW
Sleep
GetShortPathNameW
GetModuleFileNameW
lstrcpynW
GetVersionExW
GetCurrentThread
WideCharToMultiByte
HeapSize
LoadLibraryA
RtlUnwind
WaitForSingleObject
CloseHandle
GetCurrentThreadId
MultiByteToWideChar
DeviceIoControl
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount

user32

wsprintfW
KillTimer
SetTimer
MessageBoxW
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
GetKeyState
PostMessageW

advapi32

OpenServiceW
CloseServiceHandle
QueryServiceStatus
OpenSCManagerW

Exports

Exports

LgKCUtl_AddEraseFnKeyCodeToDriver
LgKCUtl_AddEraseKeyCodeToDriver
LgKCUtl_CheckIfWorkWell
LgKCUtl_CtrlKeyState
LgKCUtl_DeInit
LgKCUtl_DirverNotifyMessage
LgKCUtl_DoCommand
LgKCUtl_HookScanCode
LgKCUtl_IgnoreRejectKeyWhenCtrlKeysPressed
LgKCUtl_Init
LgKCUtl_InitA
LgKCUtl_InitW
LgKCUtl_InputByteValue
LgKCUtl_InputDWordValue
LgKCUtl_InputDWordValueEx
LgKCUtl_InputWordValue
LgKCUtl_LoadDriver
LgKCUtl_OutputByteValue
LgKCUtl_OutputDWordValue
LgKCUtl_OutputDWordValueEx
LgKCUtl_OutputWordValue
LgKCUtl_PrepareKeyCode
LgKCUtl_RegisterWindow
LgKCUtl_SendCommandAndGetResponse
LgKCUtl_SendCommandAndGetResponseA
LgKCUtl_SendCommandAndGetResponseW
LgKCUtl_SendECCommand
LgKCUtl_SendECCommandA
LgKCUtl_SendECCommandAndGetResponse
LgKCUtl_SendECCommandAndGetResponseA
LgKCUtl_SendECCommandAndGetResponseEx
LgKCUtl_SendECCommandAndGetResponseExA
LgKCUtl_SendECCommandAndGetResponseExW
LgKCUtl_SendECCommandAndGetResponseW
LgKCUtl_SendECCommandEx
LgKCUtl_SendECCommandExA
LgKCUtl_SendECCommandExW
LgKCUtl_SendECCommandW
LgKCUtl_SetCapsLockLEDState
LgKCUtl_SetNumLockLEDState
LgKCUtl_SetScrollLockLEDState
LgKCUtl_StartHookKeyCode
LgKCUtl_UnLoadDriver
LgKCUtl_UnRegisterWindow

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/LMLang.dll
.dll windows:5 windows x86 arch:x86

826c02e30a05521bb6ee55255924c5fa

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/10/2006, 00:00

Not After

16/10/2009, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f1:3f:24:99:71:7c:87:bf:8d:8c:fc:20:de:81:0e:8c:4c:71:e3:26
Signer

Actual PE Digest

f1:3f:24:99:71:7c:87:bf:8d:8c:fc:20:de:81:0e:8c:4c:71:e3:26

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Dritek\Compal\LMLang\Release\LMLang.pdb

Imports

kernel32

TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
RaiseException
Sleep
ExitProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
GlobalFindAtomW
LoadLibraryA
GetVersionExA
GlobalFlags
GetModuleHandleA
WritePrivateProfileStringW
InterlockedIncrement
lstrlenA
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
GlobalAddAtomW
CloseHandle
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
lstrcmpW
GetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
FreeLibrary
InterlockedDecrement
GetModuleFileNameW
SetLastError
GetModuleHandleW
GetProcAddress
lstrlenW
WideCharToMultiByte
FindResourceW
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
GetTickCount
FindResourceExW

user32

DestroyMenu
ShowWindow
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DefWindowProcW
CallWindowProcW
CopyRect
GetMenu
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
ClientToScreen
GrayStringW
UnhookWindowsHookEx
GetSubMenu
GetMenuItemCount
DrawTextExW
DrawTextW
TabbedTextOutW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowTextW
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageW
CheckMenuItem
EnableMenuItem
ModifyMenuW
SendMessageW
GetParent
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
UnregisterClassW
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible

gdi32

DeleteDC
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
TextOutW
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
GetDeviceCaps
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
ExtTextOutW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shlwapi

PathFindFileNameW
PathFindExtensionW

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

Lang_GetTranslateStringA
Lang_GetTranslateStringW
Lang_Init

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/LManager.exe
.exe windows:5 windows x86 arch:x86

b7ba9d31d32e62065e9c5ef7b99343ac

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

29:d6:38:89:38:27:1d:d8:6a:df:b9:bc:48:ee:51:19:3a:c5:57:07
Signer

Actual PE Digest

29:d6:38:89:38:27:1d:d8:6a:df:b9:bc:48:ee:51:19:3a:c5:57:07

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Works\Acer\lmv5.svn.reltag\src\Release\LManager.pdb

Imports

comctl32

ImageList_GetImageCount
ord17
ImageList_GetIcon

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsA
CM_Get_DevNode_Status
SetupDiDestroyDeviceInfoList
CM_Get_DevNode_Registry_PropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

shlwapi

PathFileExistsW
PathAddBackslashW
PathFileExistsA
StrTrimW

netapi32

NetApiBufferFree
NetUserGetInfo

powrprof

SetSuspendState

wlanapi

WlanRegisterNotification
WlanFreeMemory
WlanGetInterfaceCapability
WlanOpenHandle
WlanSetInterface
WlanQueryInterface
WlanCloseHandle
WlanEnumInterfaces

comfnutl

ComFnUtl_BroadcastMessage
ComFnUtl_GetAssociateExecuteFileFromExtNameW
ComFnUtl_GetSpecialFolderW
ComFnUtl_RotateApplication
ComFnUtl_ExecuteScreenSaver
ComFnUtl_GetSpecialFolderPathW
ComFnUtl_GetSystemDefaultMailFileNameW
ComFnUtl_ShowShutDownWindows
ComFnUtl_ShutDownWindows
ComFnUtl_OpenSpecialFolderW
ComFnUtl_GetSystemMailFileNameBySubKeyW
ComFnUtl_CopyTextToClipboardW
ComFnUtl_IsScreenSaverRunning
ComFnUtl_CloseScreenSaver
ComFnUtl_GetFocusHandle
ComFnUtl_RetrieveRegisterWindowMessage
ComFnUtl_GetDefaultPlayerFileNameByExtNameW
ComFnUtl_ExecuteCommandW
ComFnUtl_IssueWindowsAPPCommand
ComFnUtl_GetSystemDefaultBrowserFileNameW
ComFnUtl_SetWindowToForeground
ComFnUtl_GetSystemDefaultPlayerFileNameW

cdromutl

CDRomUtl_DeInit
CDRomUtl_DeviceChange
CDRomUtl_GetCDRomDrive
CDRomUtl_GetCDTitle
CDRomUtl_OpenCDRomDoor
CDRomUtl_Init
CDRomUtl_IsCDRomDoorOpen
CDRomUtl_GetTotalCDRomDrives

mixerutl

MixerUtl_GetLineNameExByCtrlIDW
MixerUtl_HookDevice
MixerUtl_GetValueExByCtrlID
MixerUtl_FreeValueItems
MixerUtl_GetValue
MixerUtl_UnHookDevice
MixerUtl_SetValue
MixerUtl_GetMaxMinValue
MixerUtl_GetValueItemCount
MixerUtl_GetControlID

wnd2file

WND2FILE_GetWindowHandleFromExecutableFileW

powerutl

PowerUtl_DeInit
PowerUtl_GetPowerSchemeCounts
PowerUtl_Init
PowerUtl_SetActivePowerScheme
PowerUtl_GetAllPowerScheme
PowerUtl_GetActivePowerScheme

osdutl2

OSDUtl_HideAll
OSDUtl_ShowStringW
OSDUtl_HideAllOthers
OSDUtl_Show
OSDUtl_Hide
OSDUtl_SetPredefinedOSDStringW
OSDUtl_ShowVolume
OSDUtl_InitW
OSDUtl_SetProperties
OSDUtl_DeInit
OSDUtl_ShowConfigDialog

szupfutl

SzUPFUtl_GetProfileBooleanExW
SzUPFUtl_GetProfileStringW
SzUPFUtl_GetProfileDWordExW
SzUPFUtl_SetUserProfileInfoW
SzUPFUtl_SetProfileStringW
SzUPFUtl_EnumKeyNameW
SzUPFUtl_SetRegistryValueW
SzUPFUtl_QueryRegistryValueW
SzUPFUtl_CreateKeyW
SzUPFUtl_OpenKeyW
SzUPFUtl_GetProfileStringExW
SzUPFUtl_GetProfileDWordW
SzUPFUtl_GetProfileBooleanW
SzUPFUtl_SetProfileBooleanW

radiowndutl

RadioWndUtl_SetStyle
RadioWndUtl_SetDeviceSystemStatus
RadioWndUtl_DeviceChangeNotify
RadioWndUtl_DeInit
RadioWndUtl_Init
RadioWndUtl_RegisterMessage
RadioWndUtl_GetWindow
RadioWndUtl_Show
RadioWndUtl_DeviceExisted

kernel32

SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetModuleFileNameA
HeapCreate
VirtualAlloc
VirtualFree
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
SetEndOfFile
ExitProcess
GetFileType
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStartupInfoW
UnhandledExceptionFilter
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
InitializeCriticalSection
lstrlenA
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
GetLocaleInfoW
CreateProcessW
CloseHandle
WaitForSingleObject
lstrlenW
ExpandEnvironmentStringsW
lstrcpyW
lstrcatW
lstrcpynW
GetSystemDefaultLangID
lstrcmpiW
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
GetVersionExW
GetVersionExA
LoadLibraryW
GetProcAddress
FreeLibrary
GetLastError
lstrcmpW
GetTempPathW
DeleteFileW
GetPrivateProfileIntW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetVolumeInformationW
GetStartupInfoA
FindFirstFileW
WriteFile
FindNextFileW
FindClose
CreateFileW
GetWindowsDirectoryW
GetSystemDirectoryW
GetSystemInfo
SetSystemPowerState
GetCurrentProcess
Sleep
GetCurrentThreadId
GetTickCount
GetModuleHandleW
CreateMutexW
CreateEventW
GetModuleFileNameW
SetCurrentDirectoryW
LocalAlloc
LocalFree
OpenProcess
GetFileAttributesW
InterlockedCompareExchange
InterlockedExchange
FormatMessageW
InterlockedIncrement
InterlockedDecrement
GetUserGeoID
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetCurrentProcessId
WTSGetActiveConsoleSessionId
DeleteFileA
SetLastError
SetFilePointer
ReleaseMutex
OutputDebugStringA
FormatMessageA
GetModuleHandleA
GetCommandLineW
GetStdHandle
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
TerminateProcess
ReadFile
SetEnvironmentVariableW
GetEnvironmentVariableW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
IsDebuggerPresent
GlobalMemoryStatusEx
GetCurrentDirectoryW
QueryPerformanceCounter
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LoadLibraryA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
WideCharToMultiByte

user32

DdeDisconnect
DdeConnect
DdeFreeStringHandle
DdeCreateStringHandleW
DdeInitializeW
GetWindowTextW
IsWindowEnabled
IsWindowVisible
PostMessageW
CloseClipboard
SetClipboardData
OpenClipboard
IsWindow
GetClassNameW
GetWindow
SendMessageW
IsIconic
FindWindowExW
FindWindowW
DdeFreeDataHandle
DdeClientTransaction
WaitForInputIdle
MessageBoxW
SendMessageTimeoutW
BringWindowToTop
CreatePopupMenu
mouse_event
DdeUninitialize
GetCursorPos
SystemParametersInfoW
RegisterWindowMessageW
EndPaint
BeginPaint
GetClientRect
SetWindowPos
wsprintfW
MapWindowPoints
GetSubMenu
GetMenu
SetClassLongW
LoadImageW
PostQuitMessage
LoadIconW
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW
GetParent
EnumWindows
keybd_event
GetTopWindow
GetForegroundWindow
GetWindowThreadProcessId
GetKeyboardLayout
GetSystemMetrics
GetDesktopWindow
GetWindowLongW
GetFocus
AttachThreadInput
MapVirtualKeyW
GetMenuState
GetSystemMenu
CreateDialogParamW
SendDlgItemMessageW
GetKeyState
LoadStringW
GetWindowRect
DrawIconEx
DrawFocusRect
SetForegroundWindow
KillTimer
DefWindowProcW
LoadCursorW
RegisterClassW
CreateWindowExW
DestroyWindow
GetSysColor
FillRect
DrawIcon
CopyRect
DrawTextW
GetDC
SetCursorPos
SetRect
DestroyIcon
SetWindowTextW
SetTimer
ShowWindow
GetDlgItem
EndDialog
DestroyMenu
TrackPopupMenu
ReleaseDC
AppendMenuW
EmptyClipboard
DdeCreateDataHandle

gdi32

DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetTextExtentPoint32W
SetBkMode
SetTextColor
DeleteObject
CreateSolidBrush

advapi32

GetSidSubAuthorityCount
GetSidSubAuthority
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
GetUserNameW
GetTokenInformation

shell32

SHGetFolderPathW
SHGetFileInfoW
ExtractAssociatedIconW
ExtractIconW
FindExecutableW
ShellExecuteExW
CommandLineToArgvW

ole32

CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoUninitialize

oleaut32

SafeArrayGetUBound
SafeArrayGetElement
SysFreeString
SysAllocString
VariantClear
SafeArrayGetVartype
SafeArrayGetLBound

winmm

timeGetTime

Sections

.text
Size: 434KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 390KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/LMconfig.exe
.exe windows:5 windows x86 arch:x86

683bfaa46a81cf1c49434747bcfb4a72

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

80:31:4a:c1:2c:6c:6b:73:86:55:6b:49:29:4b:12:c9:4c:d6:29:34
Signer

Actual PE Digest

80:31:4a:c1:2c:6c:6b:73:86:55:6b:49:29:4b:12:c9:4c:d6:29:34

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Dritek\_Compal\LMconfig\Release\LMconfig.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GetFileSizeEx
SetErrorMode
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
RaiseException
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetFileTime
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetFileAttributesW
WritePrivateProfileStringW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetThreadLocale
lstrlenA
GlobalFlags
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetCurrentProcessId
GetModuleHandleA
GetProfileIntW
GetTickCount
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
InterlockedDecrement
CopyFileW
GlobalSize
FormatMessageW
LocalFree
MulDiv
WideCharToMultiByte
Sleep
GetCommandLineW
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExW
SetLastError
ExpandEnvironmentStringsW
GetPrivateProfileStringW
LoadLibraryW
FreeLibrary
MultiByteToWideChar
GetLastError
GetModuleFileNameW
GetProcAddress
GetModuleHandleW
WaitForSingleObject
CreateThread
lstrlenW
lstrcpyW
FindResourceW
LoadResource
LockResource
SizeofResource
HeapCreate

user32

PostThreadMessageW
CharNextW
CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
SetCursor
GetMessageW
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
PostQuitMessage
IsClipboardFormatAvailable
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
InflateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
RemovePropW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
GetMessageTime
GetMessagePos
SetCapture
MapWindowPoints
GetKeyState
SetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
ScreenToClient
EqualRect
DefWindowProcW
CallWindowProcW
GetMenu
OffsetRect
SystemParametersInfoA
GetWindowPlacement
GetFocus
SetWindowPos
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SendDlgItemMessageW
CheckRadioButton
UnhookWindowsHookEx
GetWindowTextLengthW
GetWindowTextW
GetWindow
SetFocus
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
CharUpperW
ReleaseCapture
DestroyMenu
UnregisterClassW
LoadCursorW
PeekMessageW
GetSysColorBrush
GetParent
GetNextDlgTabItem
EndDialog
GetClipboardFormatNameW
EnumWindows
GetPropW
DestroyIcon
IntersectRect
ReleaseDC
GetSysColor
GetDC
UpdateWindow
SetRectEmpty
PtInRect
GetCursorPos
SetForegroundWindow
IsWindowVisible
CopyRect
DrawIcon
GetSystemMetrics
GetClientRect
SendMessageW
PostMessageW
SetPropW
LoadIconW
EnableWindow
SetTimer
InvalidateRect
IsIconic
KillTimer
GetWindowRect
IsWindow
LoadStringW
RegisterClassW
CheckMenuItem

gdi32

ExtSelectClipRgn
DeleteDC
GetStockObject
SetWindowExtEx
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
ScaleWindowExtEx
GetWindowExtEx
GetViewportExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetDeviceCaps
CreateFontIndirectW
GetObjectW
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CopyMetaFileW

comdlg32

GetOpenFileNameW
GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegQueryValueW
RegOpenKeyW
RegEnumKeyW
GetUserNameW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW

shell32

SHGetFileInfoW
SHGetPathFromIDListW
ord25
ord152
SHGetFolderPathW

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFileExistsW

oledlg

OleUIBusyW

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleGetClipboard
CoTaskMemFree
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateInstance
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal

oleaut32

VariantClear
SysAllocString
OleCreateFontIndirect
SysAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
SysFreeString
SysStringLen

gdiplus

GdipGetImageWidth
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageHeight
GdipCloneImage
GdipAlloc
GdipFree
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipDrawImageRectI
GdipLoadImageFromStream
GdipDisposeImage
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromStreamICM

Sections

.text
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Launch Manager_Dritek_5.0.3_Win7x86/LMutilps.exe
.exe windows:5 windows x86 arch:x86

31d0dc3051f9c5597171f9a82909072b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2a:10:b2:4b:bc:45:70:30:47:de:08:db:fd:c0:8f:d8:26:1d:77:b1
Signer

Actual PE Digest

2a:10:b2:4b:bc:45:70:30:47:de:08:db:fd:c0:8f:d8:26:1d:77:b1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Works\Acer\lmv5.svn.reltag\src\Release\LMutilps.pdb

Imports

wtsapi32

WTSUnRegisterSessionNotification
WTSRegisterSessionNotification

kernel32

ReleaseMutex
WriteFile
OutputDebugStringA
GetModuleHandleA
LocalFree
GetCommandLineW
InterlockedCompareExchange
InterlockedExchange
SetEnvironmentVariableW
GetEnvironmentVariableW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
GetCurrentProcess
Sleep
RaiseException
GetSystemDirectoryW
GetWindowsDirectoryW
GetFileAttributesW
CreateFileW
GetTempPathW
GetCurrentDirectoryW
ReadFile
GetVersionExW
QueryPerformanceCounter
GetSystemTimeAsFileTime
MultiByteToWideChar
WideCharToMultiByte
GetOEMCP
GetACP
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
VirtualAlloc
IsValidCodePage
VirtualFree
HeapCreate
GetModuleFileNameA
GetStdHandle
HeapSize
TlsFree
TlsSetValue
TlsAlloc
SetFilePointer
GetModuleFileNameW
CreateProcessW
WaitForSingleObject
DeleteFileW
SetLastError
GetTickCount
GetCurrentThreadId
WTSGetActiveConsoleSessionId
GetCurrentProcessId
GetProcAddress
LoadLibraryW
FreeLibrary
CloseHandle
GetLastError
CreateMutexW
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsGetValue
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
CreateFileA
GetLocaleInfoW
GetStringTypeW
HeapReAlloc
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LoadLibraryA
ExitProcess
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
GetStartupInfoW
GetConsoleCP
GetConsoleMode

user32

MessageBoxW
DefWindowProcW
PostQuitMessage
EndPaint
BeginPaint
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
FindWindowW

advapi32

GetUserNameW

shell32

SHGetFolderPathW
CommandLineToArgvW

winmm

timeGetTime

Sections

.text
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/LMutilps.x64
.exe windows:5 windows x64 arch:x64

8b22bee8e27856e79fff227b037bdda3

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:11:c3:22:4d:44:d9:44:7f:04:89:33:d3:7f:56:a8:0a:71:1e:d9
Signer

Actual PE Digest

0f:11:c3:22:4d:44:d9:44:7f:04:89:33:d3:7f:56:a8:0a:71:1e:d9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Works\Acer\lmv5.svn.reltag\src\Release.x64\LMutilps.pdb

Imports

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

kernel32

ReleaseMutex
WriteFile
OutputDebugStringA
LocalFree
GetCommandLineW
SetEnvironmentVariableW
GetEnvironmentVariableW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
GetCurrentProcess
Sleep
RaiseException
GetSystemDirectoryW
GetWindowsDirectoryW
GetFileAttributesW
CreateFileW
GetCurrentDirectoryW
ReadFile
GetVersionExW
QueryPerformanceCounter
GetSystemTimeAsFileTime
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
SetFilePointer
SetEnvironmentVariableA
GetModuleFileNameW
CreateProcessW
WaitForSingleObject
DeleteFileW
SetLastError
GetTickCount
GetCurrentThreadId
WTSGetActiveConsoleSessionId
GetCurrentProcessId
GetProcAddress
LoadLibraryW
FreeLibrary
CloseHandle
GetLastError
CreateMutexW
CompareStringA
CompareStringW
GetTempPathW
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
HeapSetInformation
GetModuleFileNameA
GetStdHandle
HeapSize
FlsAlloc
FlsFree
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
LCMapStringW
LCMapStringA
GetCPInfo
HeapReAlloc
RtlUnwindEx
InitializeCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlPcToFileHeader
HeapFree
HeapAlloc
GetStartupInfoW
GetConsoleCP
GetConsoleMode
GetModuleHandleW
ExitProcess

user32

RegisterClassExW
LoadCursorW
DispatchMessageW
CreateWindowExW
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcW
MessageBoxW
TranslateMessage
GetMessageW
PostMessageW
FindWindowW
LoadIconW

advapi32

GetUserNameW

shell32

SHGetFolderPathW
CommandLineToArgvW

winmm

timeGetTime

Sections

.text
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/LMworker.exe
.exe windows:5 windows x86 arch:x86

d2adabde94eb32b61ec0b5bc7b750d3f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ed:89:9c:81:95:8c:2c:43:b2:5e:51:e5:99:60:8f:e2:d6:bf:b3:75
Signer

Actual PE Digest

ed:89:9c:81:95:8c:2c:43:b2:5e:51:e5:99:60:8f:e2:d6:bf:b3:75

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Works\Acer\lmv5.svn.reltag\src\Release\LMworker.pdb

Imports

kernel32

ReleaseMutex
WriteFile
OutputDebugStringA
GetModuleHandleA
GetVersionExW
LocalFree
GetCurrentProcess
SetEnvironmentVariableW
GetEnvironmentVariableW
Sleep
RaiseException
IsDebuggerPresent
GetCommandLineW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemDirectoryW
GetWindowsDirectoryW
GetFileAttributesW
GetTempPathW
CreateFileW
ReadFile
QueryPerformanceCounter
GetSystemTimeAsFileTime
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
CompareStringA
CreateFileA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
FlushFileBuffers
VirtualAlloc
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
VirtualFree
SetEnvironmentVariableA
HeapCreate
GetStartupInfoA
GetFileType
SetHandleCount
SetFilePointer
CreateProcessW
WaitForSingleObject
DeleteFileW
SetLastError
GetTickCount
WTSGetActiveConsoleSessionId
GetCurrentProcessId
GetModuleFileNameW
LoadLibraryW
FreeLibrary
CloseHandle
GetLastError
CreateMutexW
GetCurrentThreadId
GetProcAddress
GetModuleHandleW
InterlockedExchange
GetCurrentDirectoryW
InterlockedCompareExchange
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
HeapReAlloc
HeapAlloc
ExitProcess
HeapFree
GetConsoleMode
GetConsoleCP
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection

user32

LoadCursorW
TranslateMessage
BringWindowToTop
LoadIconW
CreateWindowExW
RegisterClassExW
DispatchMessageW
SwitchToThisWindow
GetShellWindow
IsWindowVisible
GetMessageW
SetTimer
KillTimer
GetLastActivePopup
MessageBoxW
keybd_event
DefWindowProcW
PostQuitMessage
PostMessageW
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow

advapi32

GetUserNameW

shell32

SHGetFolderPathW
CommandLineToArgvW

winmm

timeGetTime

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/LmSmbFile.dll
.dll windows:5 windows x86 arch:x86

373761ccec28511352d07d2d56aa17db

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:f5:da:49:41:fd:0e:cf:ad:a5:61:5d:b1:48:ce:10:a7:26:f9:33
Signer

Actual PE Digest

49:f5:da:49:41:fd:0e:cf:ad:a5:61:5d:b1:48:ce:10:a7:26:f9:33

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\SVN_Project\LM-V4\LmSMbios.Utility\Release\LmSmbFile.pdb

Imports

kernel32

CreateFileW
GetFileSize
CloseHandle
ReadFile
WriteFile
MultiByteToWideChar
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

Exports

Exports

ASF_OpenSMBiosToBinaryFormatFileA
ASF_OpenSMBiosToBinaryFormatFileW
ASF_SaveSMBiosToBinaryFormatFileA
ASF_SaveSMBiosToBinaryFormatFileW
ASF_SaveSMBiosToTextFormatFileA
ASF_SaveSMBiosToTextFormatFileW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/LmSmbKel.dll
.dll windows:5 windows x86 arch:x86

c18df02319f110b9baca068e44db0ae1

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

66:f1:ab:0f:07:ce:bc:aa:e7:cf:5a:31:a1:bc:26:81:4a:4f:ea:1a
Signer

Actual PE Digest

66:f1:ab:0f:07:ce:bc:aa:e7:cf:5a:31:a1:bc:26:81:4a:4f:ea:1a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

h:\SVN_Map\SRC\Acer\LM\trunk\util\Tools\LmSMBios\Release\LmSmbKel.pdb

Imports

kernel32

MultiByteToWideChar
GetFileAttributesW
WideCharToMultiByte
GetModuleFileNameW
lstrlenW
LoadLibraryW
GetProcAddress
FreeLibrary
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

user32

wsprintfW

Exports

Exports

ASK_ButtonFunction2Acer
ASK_ButtonFunctionFieldIDStrA
ASK_ButtonFunctionFieldIDStrW
ASK_ButtonFunctionFieldStrA
ASK_ButtonFunctionFieldStrW
ASK_ButtonFunctionGroupStrA
ASK_ButtonFunctionGroupStrW
ASK_ButtonFunctionIDStrA
ASK_ButtonFunctionIDStrW
ASK_ButtonFunctionStrA
ASK_ButtonFunctionStrW
ASK_ButtonKeyType2Acer
ASK_ButtonKeyTypeStrA
ASK_ButtonKeyTypeStrW
ASK_ButtonNumber2Acer
ASK_CombinedFunction2Array
ASK_CombinedFunctionFieldIDStrA
ASK_CombinedFunctionFieldIDStrArrayA
ASK_CombinedFunctionFieldIDStrArrayW
ASK_CombinedFunctionFieldIDStrW
ASK_Deinitial
ASK_DeviceType2Acer
ASK_GetAcerSMBiosRevision
ASK_GetApplicationFunctionSupported
ASK_GetBaseboardProductNameA
ASK_GetBaseboardProductNameW
ASK_GetButtonFunctionInfo
ASK_GetCommunicationFunctionSupported
ASK_GetDisplayFunctionSupported
ASK_GetFirstAcerSMBiosSupportedRevision
ASK_GetFirstSMBiosSupportedVersion
ASK_GetHotkeyFunctionRawBlock
ASK_GetLastAcerSMBiosSupportedRevision
ASK_GetLastSMBiosSupportedVersion
ASK_GetManufactureNameA
ASK_GetManufactureNameW
ASK_GetMediaFunctionSupported
ASK_GetOEMStringA
ASK_GetOEMStringW
ASK_GetOtherFunctionSupported
ASK_GetProductNameA
ASK_GetProductNameW
ASK_GetRawBlockFileNameA
ASK_GetRawBlockFileNameW
ASK_GetRevisionSupportRawBlock
ASK_GetSMBiosBaseBoardInformation
ASK_GetSMBiosBiosInformation
ASK_GetSMBiosOEMStrings
ASK_GetSMBiosSystemConfigurationOptions
ASK_GetSMBiosSystemEnclosureOrClassis
ASK_GetSMBiosSystemInformation
ASK_GetSMBiosVersion
ASK_GetSystemConfigurationOptionA
ASK_GetSystemConfigurationOptionW
ASK_GetSystemDeviceInfo
ASK_GetSystemDeviceRawBlock
ASK_GeviceTypeStrA
ASK_GeviceTypeStrW
ASK_Initial
ASK_IsInitialed
ASK_IsInitialedEx
ASK_SaveRawBlockToFileA
ASK_SaveRawBlockToFileW
ASK_SetRawBlockFromFileA
ASK_SetRawBlockFromFileW

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/MIXERUTL.DLL
.dll windows:5 windows x86 arch:x86

036dbeb14cb4cdcb4440988c9a8ed348

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/10/2006, 00:00

Not After

16/10/2009, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:6c:d3:e2:e4:dd:42:22:cf:eb:c3:50:83:f0:1a:ae:6f:17:2d:0c
Signer

Actual PE Digest

0a:6c:d3:e2:e4:dd:42:22:cf:eb:c3:50:83:f0:1a:ae:6f:17:2d:0c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetLineInfoW
mixerGetDevCapsW
mixerGetNumDevs
mixerOpen
mixerSetControlDetails
mixerClose

kernel32

TlsFree
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
VirtualFree
WideCharToMultiByte
lstrcpyW
MultiByteToWideChar
VirtualAlloc
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA

Exports

Exports

MixerUtl_CanRecordMultipleSelected
MixerUtl_FindDefaultMixerNumber
MixerUtl_FreeValueItems
MixerUtl_GetControlID
MixerUtl_GetControlIDEx
MixerUtl_GetControlNameA
MixerUtl_GetControlNameExA
MixerUtl_GetControlNameExByCtrlIDA
MixerUtl_GetControlNameExByCtrlIDW
MixerUtl_GetControlNameExW
MixerUtl_GetControlNameW
MixerUtl_GetDeviceNameA
MixerUtl_GetDeviceNameW
MixerUtl_GetDevicesCount
MixerUtl_GetLineNameA
MixerUtl_GetLineNameExA
MixerUtl_GetLineNameExByCtrlIDA
MixerUtl_GetLineNameExByCtrlIDW
MixerUtl_GetLineNameExW
MixerUtl_GetLineNameW
MixerUtl_GetMaxMinValue
MixerUtl_GetMaxMinValueEx
MixerUtl_GetMaxMinValueExByCtrlID
MixerUtl_GetRecordSelectedCount
MixerUtl_GetValue
MixerUtl_GetValueEx
MixerUtl_GetValueExByCtrlID
MixerUtl_GetValueItemCount
MixerUtl_GetValueItemCountEx
MixerUtl_GetValueItemCountExByCtrlID
MixerUtl_HookDevice
MixerUtl_IsRecordSelected
MixerUtl_IsRecordSelectedEx
MixerUtl_IsRecordSelectedExByCtrlID
MixerUtl_SetRecordSelected
MixerUtl_SetRecordSelectedEx
MixerUtl_SetRecordSelectedExByCtrlID
MixerUtl_SetValue
MixerUtl_SetValueEx
MixerUtl_SetValueExByCtrlID
MixerUtl_UnHookDevice

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/MMDUtl.cfg
Launch Manager_Dritek_5.0.3_Win7x86/MMDUtl.dll
.dll windows:5 windows x86 arch:x86

d4528920f9f135669dd8a5b041d55435

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cb:fd:d8:94:cb:7f:32:98:dd:1f:d7:f6:8d:b3:a9:e1:c1:27:59:79
Signer

Actual PE Digest

cb:fd:d8:94:cb:7f:32:98:dd:1f:d7:f6:8d:b3:a9:e1:c1:27:59:79

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Works\Acer\lmv5.svn.reltag\src\Release\MMDUtl.pdb

Imports

shlwapi

PathCombineA
PathRemoveFileSpecW
PathFileExistsA

comctl32

ord17

kernel32

FindResourceExA
WideCharToMultiByte
SizeofResource
LockResource
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
WritePrivateProfileStringW
GetTempPathW
GetCurrentProcess
OutputDebugStringW
ExpandEnvironmentStringsA
GetModuleFileNameA
GetCurrentProcessId
LocalFree
GetCommandLineW
GetVersionExW
GetLastError
GetCurrentThreadId
GetTickCount
SetLastError
DeleteFileW
WaitForSingleObject
CreateProcessW
SetFilePointer
CreateFileW
CreateMutexW
ReleaseMutex
WriteFile
GetModuleHandleA
InterlockedCompareExchange
InterlockedExchange
SetEnvironmentVariableW
GetEnvironmentVariableW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
RaiseException
GetSystemDirectoryW
GetWindowsDirectoryW
GetFileAttributesW
CloseHandle
LoadResource
LoadLibraryA
ReadFile
QueryPerformanceCounter
GetSystemTimeAsFileTime
CompareStringW
CompareStringA
CreateFileA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeA
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
VirtualAlloc
VirtualFree
HeapCreate
GetStdHandle
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetStringTypeW
HeapSize
LCMapStringA
LCMapStringW
RtlUnwind
GetCPInfo
ExitProcess
GetConsoleMode
FindResourceA
DeleteFileA
GetTempPathA
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
lstrcpynA
GetVersionExA
CreateToolhelp32Snapshot
Process32Next
GetPrivateProfileStringA
GetProcAddress
GetPrivateProfileIntW
lstrlenW
GetModuleFileNameW
Sleep
GetModuleHandleW
Process32First
lstrlenA
GetCurrentDirectoryW
FreeLibrary
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
InitializeCriticalSection
SetEnvironmentVariableA
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetConsoleCP

user32

GetWindow
UpdateWindow
MapWindowPoints
EnumChildWindows
SetWindowPos
MonitorFromWindow
ReleaseDC
GetClassNameW
GetWindowTextW
GetWindowLongA
BringWindowToTop
InvalidateRect
SetWindowLongA
ChangeDisplaySettingsExA
GetDC
GetMonitorInfoA
EnumWindows
GetClientRect
FindWindowW
EnumDisplaySettingsA
GetParent
CreateDialogParamA
GetWindowRect
UpdateLayeredWindow
EnumDisplaySettingsExA
DestroyWindow
ChangeDisplaySettingsA
EnumDisplayDevicesA
GetCursorPos
SetCursorPos
EnumDisplaySettingsW
GetDesktopWindow
GetForegroundWindow
wsprintfA
SetForegroundWindow
keybd_event
KillTimer
SetTimer
MessageBoxW

gdi32

CreateDCA
CreateSolidBrush
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
ExtEscape

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

CommandLineToArgvW
SHGetFolderPathW
SHGetSpecialFolderPathA

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysFreeString
SysAllocStringLen

gdiplus

GdipCreateBitmapFromScan0
GdipCloneBitmapAreaI
GdipFree
GdipGetImageWidth
GdiplusShutdown
GdipDrawImageRectI
GdipGetImageHeight
GdipCloneImage
GdipCreatePen1
GdipDeletePen
GdiplusStartup
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipLoadImageFromFile
GdipAlloc
GdipDisposeImage
GdipCreateHBITMAPFromBitmap

setupapi

SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status
SetupDiOpenDevRegKey
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

winmm

timeGetTime

Exports

Exports

MMDUtl_Cancel
MMDUtl_ChangeToNBOnlySingleDisplayMode
MMDUtl_DeInit
MMDUtl_DeInitExtendMode
MMDUtl_DetectDisplayConnectedFeatureIsValid
MMDUtl_EnableExtendMode
MMDUtl_FlushRememberedSettings
MMDUtl_GetActiveDisplays
MMDUtl_GetConnectedDisplays
MMDUtl_GetCurrentDisplayMode
MMDUtl_GetVgaVendor
MMDUtl_HasDualOutputCapability
MMDUtl_HasExternalMonitorConnected
MMDUtl_Init
MMDUtl_InitExtendMode
MMDUtl_IsExtendModeEnabled
MMDUtl_PermitToChangeMode
MMDUtl_Run
MMDUtl_RunEx
MMDUtl_SaveCurrentMode
MMDUtl_SetLassoBoxStatus
MMDUtl_SetNewDisplayMode
MMDUtl_Stop

Sections

.text
Size: 341KB - Virtual size: 341KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/MMDUtl.x64
.dll windows:5 windows x64 arch:x64

4dd321fae5ccf6e97d8dbe441007f8fb

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:a2:49:53:bb:a1:0a:67:d1:98:0f:39:b4:94:85:a1:b1:df:34:79
Signer

Actual PE Digest

7b:a2:49:53:bb:a1:0a:67:d1:98:0f:39:b4:94:85:a1:b1:df:34:79

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Works\Acer\lmv5.svn.reltag\src\Release.x64\MMDUtl.pdb

Imports

shlwapi

PathCombineA
PathRemoveFileSpecW
PathFileExistsA

comctl32

ord17

kernel32

FindResourceExA
WideCharToMultiByte
SizeofResource
LockResource
OutputDebugStringA
MultiByteToWideChar
WritePrivateProfileStringW
GetTempPathW
GetCurrentProcess
OutputDebugStringW
ExpandEnvironmentStringsA
GetModuleFileNameA
GetCurrentProcessId
LocalFree
GetCommandLineW
GetVersionExW
GetLastError
GetCurrentThreadId
GetTickCount
SetLastError
DeleteFileW
WaitForSingleObject
CreateProcessW
SetFilePointer
CreateFileW
CreateMutexW
ReleaseMutex
WriteFile
SetEnvironmentVariableW
GetEnvironmentVariableW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
RaiseException
GetSystemDirectoryW
GetWindowsDirectoryW
GetFileAttributesW
CloseHandle
LoadResource
GetCurrentDirectoryW
LoadLibraryA
ReadFile
QueryPerformanceCounter
GetSystemTimeAsFileTime
CompareStringW
CompareStringA
CreateFileA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeA
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapCreate
HeapSetInformation
GetStdHandle
FlsAlloc
FlsFree
FlsGetValue
DecodePointer
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
GetStringTypeW
LCMapStringA
LCMapStringW
RtlPcToFileHeader
GetCPInfo
HeapSize
RtlUnwindEx
ExitProcess
FindResourceA
DeleteFileA
GetTempPathA
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
lstrcpynA
GetVersionExA
CreateToolhelp32Snapshot
Process32Next
GetPrivateProfileStringA
GetProcAddress
GetPrivateProfileIntW
lstrlenW
GetModuleFileNameW
Sleep
GetModuleHandleW
Process32First
lstrlenA
FreeLibrary
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
InitializeCriticalSection
SetEnvironmentVariableA
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
GetConsoleMode
GetConsoleCP
GetCommandLineA
FlsSetValue
RtlCaptureContext

user32

GetWindow
UpdateWindow
MapWindowPoints
SetWindowLongPtrA
EnumChildWindows
SetWindowPos
MonitorFromWindow
ReleaseDC
GetClassNameW
GetWindowTextW
GetWindowLongA
BringWindowToTop
InvalidateRect
ChangeDisplaySettingsExA
GetDC
GetMonitorInfoA
EnumWindows
GetClientRect
FindWindowW
EnumDisplaySettingsA
GetParent
CreateDialogParamA
GetWindowLongPtrA
GetWindowRect
UpdateLayeredWindow
EnumDisplaySettingsExA
DestroyWindow
ChangeDisplaySettingsA
EnumDisplayDevicesA
GetCursorPos
SetCursorPos
EnumDisplaySettingsW
GetDesktopWindow
GetForegroundWindow
wsprintfA
SetForegroundWindow
keybd_event
KillTimer
SetTimer
MessageBoxW

gdi32

CreateDCA
CreateSolidBrush
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
ExtEscape

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

CommandLineToArgvW
SHGetFolderPathW
SHGetSpecialFolderPathA

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysFreeString
SysAllocStringLen

gdiplus

GdipLoadImageFromFile
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipCloneBitmapAreaI
GdipFree
GdipGetImageWidth
GdipDrawImageRectI
GdipGetImageHeight
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipDeletePen
GdipCreatePen1
GdipAlloc
GdipCreateHBITMAPFromBitmap

setupapi

SetupDiGetClassDevsA
SetupDiOpenDevRegKey
CM_Get_DevNode_Status
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

winmm

timeGetTime

Exports

Exports

MMDUtl_Cancel
MMDUtl_ChangeToNBOnlySingleDisplayMode
MMDUtl_DeInit
MMDUtl_DeInitExtendMode
MMDUtl_DetectDisplayConnectedFeatureIsValid
MMDUtl_EnableExtendMode
MMDUtl_FlushRememberedSettings
MMDUtl_GetActiveDisplays
MMDUtl_GetConnectedDisplays
MMDUtl_GetCurrentDisplayMode
MMDUtl_GetVgaVendor
MMDUtl_HasDualOutputCapability
MMDUtl_HasExternalMonitorConnected
MMDUtl_Init
MMDUtl_InitExtendMode
MMDUtl_IsExtendModeEnabled
MMDUtl_PermitToChangeMode
MMDUtl_Run
MMDUtl_RunEx
MMDUtl_SaveCurrentMode
MMDUtl_SetLassoBoxStatus
MMDUtl_SetNewDisplayMode
MMDUtl_Stop

Sections

.text
Size: 409KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/MMDx64Fx.exe
.exe windows:5 windows x64 arch:x64

9ad44e916591f1d719f9f250e706efda

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e1:28:b8:f7:7d:dc:af:bb:87:35:19:e4:78:68:10:07:ed:e2:be:29
Signer

Actual PE Digest

e1:28:b8:f7:7d:dc:af:bb:87:35:19:e4:78:68:10:07:ed:e2:be:29

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

h:\temp\MMDUtl_VS90\MMDx64Fx\x64\Release\MMDx64Fx.pdb

Imports

mmdutl

MMDUtl_IsExtendModeEnabled
MMDUtl_ChangeToNBOnlySingleDisplayMode
MMDUtl_DeInitExtendMode
MMDUtl_DeInit
MMDUtl_Init
MMDUtl_DetectDisplayConnectedFeatureIsValid
MMDUtl_InitExtendMode
MMDUtl_Cancel
MMDUtl_SaveCurrentMode
MMDUtl_HasExternalMonitorConnected
MMDUtl_EnableExtendMode
MMDUtl_SetLassoBoxStatus
MMDUtl_HasDualOutputCapability
MMDUtl_RunEx
MMDUtl_PermitToChangeMode
MMDUtl_Stop

kernel32

FlsGetValue
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
CreateMutexW
SetEvent
GetLastError
CreateEventW
CloseHandle
CreateEventA
WritePrivateProfileStringW
GetTempPathW
LoadLibraryA
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCommandLineA
GetStartupInfoA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
HeapAlloc
HeapFree
EncodePointer
DecodePointer
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
Sleep
HeapSize
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount

user32

LoadCursorA
DispatchMessageA
DefWindowProcA
CreateWindowExA
TranslateMessage
PostQuitMessage
RegisterClassExA
GetMessageA
SendMessageW
IsWindow
IsWindowVisible
FindWindowW

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/MMKEYBD.CFG
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/CRT.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/DP.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/DVI.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/Extend.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/Extend2CRT.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/Extend2DP.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/Extend2HDMI.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/HDMI.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/LCD.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/NB-CRT.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/NB-DP.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/NB-DVI.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/NB-HDMI.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/NB-TV.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/NB.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/TV.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/bg_center.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/bg_left.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/bg_right.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/p1024x768.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/p800x600.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MMRes/selected.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/MkServis.exe
.exe windows:4 windows x86 arch:x86

219345e4e0b041131b9890cba487fa86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/10/2006, 00:00

Not After

16/10/2009, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:6a:f6:11:ee:c2:3d:d2:8e:cb:5d:14:3b:5a:2a:03:84:6c:3c:bd
Signer

Actual PE Digest

97:6a:f6:11:ee:c2:3d:d2:8e:cb:5d:14:3b:5a:2a:03:84:6c:3c:bd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\SVN_Utility\MkServis.Exe\trunk\src\release\MkServis.pdb

Imports

kernel32

LoadLibraryW
GetProcAddress
FreeLibrary
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
Sleep
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/NTKCUtl.dll
.dll windows:5 windows x86 arch:x86

af364f20560eba9638d8da0050e90e1d

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:a1:70:9c:19:98:c3:e1:d2:37:d2:31:a6:40:7b:fe:1f:3c:21:74
Signer

Actual PE Digest

d4:a1:70:9c:19:98:c3:e1:d2:37:d2:31:a6:40:7b:fe:1f:3c:21:74

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\CWork60\Utility\NTKCUtl.dll.svn\src\Release\NTKCUtl.pdb

Imports

kernel32

GetPrivateProfileStringW
GetVersionExW
GetFileAttributesW
GetModuleFileNameW
lstrlenW
GetPrivateProfileIntW
lstrcatW
GetCurrentThreadId
lstrcpyW
MultiByteToWideChar
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapAlloc
GetLastError
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
HeapSize
ExitProcess
RaiseException
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

MapVirtualKeyW
PostMessageW
GetKeyState
AttachThreadInput
CallNextHookEx
wsprintfW
GetForegroundWindow
SetWindowsHookExW
UnhookWindowsHookEx
GetWindowThreadProcessId

Exports

Exports

NTKCUtl_DeInit
NTKCUtl_DeleteAllRegisterKey
NTKCUtl_HookKey
NTKCUtl_IgnoreRejectKeyWhenFnKeyPressed
NTKCUtl_Init
NTKCUtl_IsKeyStateEnabled
NTKCUtl_Register
NTKCUtl_RegisterKey
NTKCUtl_RegisterKeyBySectionA
NTKCUtl_RegisterKeyBySectionW
NTKCUtl_UnRegister
NTKCUtl_UnRegisterKey
NTKCUtl_UnRegisterKeyBySectionA
NTKCUtl_UnRegisterKeyBySectionW

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/3G_Disable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/3G_Enable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Bluetooth_Disable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Bluetooth_Enable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/CapsLock_Off.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/CapsLock_On.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_000.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_001.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_002.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_003.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_004.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_005.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_006.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_007.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_008.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_009.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_010.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_011.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_012.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_013.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_014.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_015.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Cir_016.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Mute.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/NumLock_Off.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/NumLock_On.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Power.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/ScrollLock_Off.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/ScrollLock_On.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Setting.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Touchpad_Disable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Touchpad_Enable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/UnMute.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_000.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_001.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_002.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_003.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_004.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_005.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_006.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_007.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_008.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_009.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_010.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_011.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_012.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_013.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_014.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_015.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/Vol_016.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/WiFi_Disable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/WiFi_Enable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/WiMax_Disable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/WiMax_Enable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/no_device.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/wimax_wifi_off.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC/wimax_wifi_on.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/3G_Disable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/3G_Enable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Bluetooth_Disable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Bluetooth_Enable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/CapsLock_Off.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/CapsLock_On.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_000.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_001.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_002.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_003.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_004.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_005.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_006.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_007.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_008.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_009.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_010.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_011.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_012.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_013.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_014.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_015.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Cir_016.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Mute.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/NumLock_Off.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/NumLock_On.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Power.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/ScrollLock_Off.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/ScrollLock_On.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Setting.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Touchpad_Disable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Touchpad_Enable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/UnMute.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_000.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_001.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_002.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_003.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_004.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_005.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_006.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_007.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_008.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_009.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_010.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_011.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_012.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_013.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_014.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_015.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/Vol_016.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/WiFi_Disable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/WiFi_Enable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/WiMax_Disable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/WiMax_Enable.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/no_device.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/wimax_wifi_off.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDRC2/wimax_wifi_on.png
.png
Launch Manager_Dritek_5.0.3_Win7x86/OSDUtl2.dll
.dll windows:5 windows x86 arch:x86

8af1a123beea5393fc41c7f2b897f7da

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1c:e2:8c:c9:bf:75:5f:42:45:fe:04:96:23:23:0e:79:7c:36:fc:6c
Signer

Actual PE Digest

1c:e2:8c:c9:bf:75:5f:42:45:fe:04:96:23:23:0e:79:7c:36:fc:6c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Dritek\OSDUtl2.DLL 2.0.0.17thread\src\Release\OSDUtl2.pdb

Imports

kernel32

TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapAlloc
HeapFree
RtlUnwind
RaiseException
ExitThread
HeapReAlloc
ExitProcess
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringW
GlobalFlags
lstrlenA
InterlockedIncrement
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetModuleHandleA
GetCurrentProcessId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
InterlockedExchange
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryA
lstrcmpW
GetVersionExA
CreateEventW
SuspendThread
SetEvent
GetCurrentThreadId
ResumeThread
GetLastError
GlobalFree
FormatMessageW
LocalFree
InterlockedDecrement
SetLastError
GetProcAddress
GetModuleHandleW
SetThreadPriority
GetCurrentThread
GetThreadPriority
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
GetExitCodeThread
Sleep
QueryPerformanceFrequency
LoadLibraryW
FreeLibrary
GetModuleFileNameW
CreateThread
CloseHandle
WideCharToMultiByte
lstrcpyW
MultiByteToWideChar
WaitForSingleObject
QueryPerformanceCounter
LockResource
SizeofResource
LoadResource
FindResourceW
FreeEnvironmentStringsW
lstrlenW

user32

DestroyMenu
GetSysColorBrush
UnregisterClassW
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ShowWindow
SetWindowTextW
GetWindowThreadProcessId
IsWindowEnabled
SetCursor
PostQuitMessage
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetLastActivePopup
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
GetDlgCtrlID
CallWindowProcW
PtInRect
GetMenu
GetWindowLongW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
SendMessageW
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnhookWindowsHookEx
DestroyIcon
EnableWindow
GetSystemMetrics
EnumDisplayMonitors
UpdateWindow
InvalidateRect
GetWindowRect
IsWindowVisible
GetWindow
GetWindowTextW
GetForegroundWindow
FindWindowW
UpdateLayeredWindow
EqualRect
SystemParametersInfoW
SetRect
CopyRect
GetDC
ReleaseDC
PostThreadMessageW
MonitorFromWindow
PostMessageW
MonitorFromPoint
IsWindow
LoadCursorW
DefWindowProcW
SetMenu

gdi32

GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteDC
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
BitBlt
CreateDIBSection
SelectObject
GetObjectW
GetDeviceCaps
DeleteObject
CreateCompatibleDC

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueW
RegOpenKeyW
RegEnumKeyW
GetUserNameW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW

shlwapi

PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW

ole32

CreateStreamOnHGlobal

oleaut32

VariantClear
VariantChangeType
VariantInit

gdiplus

GdipSetCompositingMode
GdipDeletePen
GdipCreatePen1
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipDrawPath
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteGraphics
GdipCreateFromHDC
GdipAddPathLineI
GdipAddPathArcI
GdipFillPath
GdipDrawString
GdipMeasureString
GdipAlloc
GdiplusStartup
GdiplusShutdown
GdipDeleteFont
GdipFree
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipCloneFont
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCloneImage
GdipDisposeImage
GdipCreateHBITMAPFromBitmap
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipCreatePath
GdipDeletePath
GdipClonePath

Exports

Exports

OSDUtl_AddStringA
OSDUtl_AddStringW
OSDUtl_ChangeStringA
OSDUtl_ChangeStringW
OSDUtl_DeInit
OSDUtl_DeleteString
OSDUtl_EnableShowString
OSDUtl_GetPredefinedOSDStringA
OSDUtl_GetPredefinedOSDStringW
OSDUtl_GetProperties
OSDUtl_GetShowMonitorFromPoint
OSDUtl_GetShowMonitorFromWindow
OSDUtl_GetVolumePropertiesA
OSDUtl_Hide
OSDUtl_HideAll
OSDUtl_HideAllOthers
OSDUtl_HideNow
OSDUtl_InitA
OSDUtl_InitW
OSDUtl_MultipleAdd
OSDUtl_MultipleAddStringA
OSDUtl_MultipleAddStringW
OSDUtl_MultipleDelete
OSDUtl_MultipleDeleteAll
OSDUtl_MultipleHideNow
OSDUtl_MultipleHideNowForAll
OSDUtl_MultipleHideNowbyMonitor
OSDUtl_MultipleSetShowMonitor
OSDUtl_MultipleShow
OSDUtl_MultipleVolumeShow
OSDUtl_SetPredefinedOSDStringA
OSDUtl_SetPredefinedOSDStringW
OSDUtl_SetProperties
OSDUtl_SetShowMonitor
OSDUtl_SetShowMonitorFromPoint
OSDUtl_SetShowMonitorFromWindow
OSDUtl_SetVolumePropertiesA
OSDUtl_SetVolumePropertiesW
OSDUtl_Show
OSDUtl_ShowConfigDialog
OSDUtl_ShowStringA
OSDUtl_ShowStringW
OSDUtl_ShowVolume

Sections

.text
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/Panel/LManager.ICO
Launch Manager_Dritek_5.0.3_Win7x86/PowerUtl.dll
.dll windows:4 windows x86 arch:x86

26607775cdea552bbc2d9d5872fa209a

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/10/2006, 00:00

Not After

16/10/2009, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

af:f8:51:3f:7f:af:42:64:6a:97:2d:b0:92:bb:f6:eb:23:02:ab:0a
Signer

Actual PE Digest

af:f8:51:3f:7f:af:42:64:6a:97:2d:b0:92:bb:f6:eb:23:02:ab:0a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\cwork60\utility\powerutl.dll.svn\src\release_unicode\PowerUtl.pdb

Imports

powrprof

EnumPwrSchemes
SetActivePwrScheme
GetActivePwrScheme

kernel32

FreeEnvironmentStringsW
WideCharToMultiByte
GetVersionExW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSection
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

PowerUtl_DeInit
PowerUtl_GetActivePowerScheme
PowerUtl_GetActivePowerSchemeEx
PowerUtl_GetAllPowerScheme
PowerUtl_GetPowerSchemeCounts
PowerUtl_Init
PowerUtl_SetActivePowerScheme
PowerUtl_SetActivePowerSchemeEx
PowerUtl_SetPowerPolicy

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/RGNMAKER.DLL
.dll windows:4 windows x86 arch:x86

0cc3b6f861618b87f9dee2896facab8b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/10/2006, 00:00

Not After

16/10/2009, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:c7:c3:a7:62:d5:a6:4a:aa:bc:f0:d7:24:12:80:14:e4:e6:22:e9
Signer

Actual PE Digest

4c:c7:c3:a7:62:d5:a6:4a:aa:bc:f0:d7:24:12:80:14:e4:e6:22:e9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
lstrlenW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

GetDC
SetRect
ReleaseDC
CopyRect
IntersectRect

gdi32

SetBkMode
OffsetRgn
GetRgnBox
CreateRectRgn
GetPixel
CreateRectRgnIndirect
CombineRgn
GetObjectW
CreateCompatibleDC
DeleteDC
DeleteObject
ExtTextOutW
SetTextColor
PatBlt
CreateCompatibleBitmap
GetTextExtentPoint32W
SelectObject

Exports

Exports

RgnMaker_CombineRegion
RgnMaker_CopyRegion
RgnMaker_CreateRegionByBitmap
RgnMaker_CreateRegionByDC
RgnMaker_CreateRegionByString
RgnMaker_CreateRegionByStringA
RgnMaker_CreateRegionByStringW
RgnMaker_GetRegionRect
RgnMaker_OffsetRegion

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/RadioWndUtl.dll
.dll windows:5 windows x86 arch:x86

80c7e69e18e86c76258f5b9f24a86f19

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9e:bb:96:28:7a:31:dd:07:a4:1a:90:94:f2:55:b9:a7:0b:14:a1:ae
Signer

Actual PE Digest

9e:bb:96:28:7a:31:dd:07:a4:1a:90:94:f2:55:b9:a7:0b:14:a1:ae

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\SVN_Map\SRC\utility\RadioWndUtl.Dll\trunk\Release\RadioWndUtl.pdb

Imports

gdiplus

GdipCreateBitmapFromStream
GdipAlloc
GdipCloneBitmapAreaI
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImagePointRectI
GdipDrawImageI
GdipDrawImage
GdipDrawString
GdipGetImageGraphicsContext
GdipGetStringFormatFlags
GdipSetStringFormatFlags
GdipCreateSolidFill
GdipCloneBrush
GdipDeleteBrush
GdiplusShutdown
GdiplusStartup
GdipFree
GdipCloneImage
GdipDeleteFont
GdipGetLogFontW
GdipCreateFont
GdipCreateFontFromLogfontW
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipMeasureString
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDisposeImage

comctl32

ord17

kernel32

LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapReAlloc
VirtualAlloc
HeapSize
RtlUnwind
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
LCMapStringW
GetStringTypeA
lstrcpyW
FindResourceW
SizeofResource
LoadResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
MulDiv
lstrlenW
DisableThreadLibraryCalls
SetEvent
CreateEventW
CreateThread
GetStringTypeW
CloseHandle
GetModuleHandleW
lstrcpynW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetFilePointer
SetHandleCount
ExitProcess
Sleep
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
HeapFree
GetLastError
RaiseException
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
GetLocaleInfoA
CreateFileA
FlushFileBuffers
WaitForSingleObject
GetModuleHandleA
GetConsoleCP
WriteFile
GetCurrentThreadId

user32

SendMessageW
GetForegroundWindow
ShowWindow
LoadIconW
UnregisterClassW
RegisterClassExW
LoadCursorW
SetRect
SetRectEmpty
SetCapture
SetCursor
SetClassLongW
EqualRect
OffsetRect
CopyRect
PtInRect
UpdateWindow
InvalidateRect
UpdateLayeredWindow
EndPaint
BeginPaint
IsWindowVisible
KillTimer
DestroyWindow
GetWindowLongW
PostMessageW
SetWindowPos
SystemParametersInfoW
GetDesktopWindow
GetWindowRect
SetWindowLongW
DefWindowProcW
CreateWindowExW
IsWindow
GetDC
LoadStringW
ReleaseDC
SetTimer

gdi32

PtInRegion
DeleteObject
DeleteDC
CreateRectRgn
SelectObject
CreateCompatibleDC
GetDeviceCaps
CombineRgn
BitBlt

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW

ole32

CreateStreamOnHGlobal

Exports

Exports

RadioWndUtl_DeInit
RadioWndUtl_DeviceChangeNotify
RadioWndUtl_DeviceExisted
RadioWndUtl_GetStyle
RadioWndUtl_GetWindow
RadioWndUtl_Init
RadioWndUtl_RegisterMessage
RadioWndUtl_SetDeviceSystemStatus
RadioWndUtl_SetStyle
RadioWndUtl_SetWindowTitle
RadioWndUtl_Show

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/Readme.txt
Launch Manager_Dritek_5.0.3_Win7x86/SZUPFUTL.DLL
.dll windows:4 windows x86 arch:x86

7e55b0c14062a29d92e735c0cf9c5175

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/10/2006, 00:00

Not After

16/10/2009, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3f:5c:38:fc:c0:fb:f4:5a:09:d3:64:47:e8:09:d2:a8:49:1f:5e:28
Signer

Actual PE Digest

3f:5c:38:fc:c0:fb:f4:5a:09:d3:64:47:e8:09:d2:a8:49:1f:5e:28

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExpandEnvironmentStringsW
VirtualAlloc
VirtualFree
ExpandEnvironmentStringsA
WideCharToMultiByte
MultiByteToWideChar
lstrcatW
lstrcpyW
lstrlenW
lstrcatA
lstrcpyA
lstrlenA
GetSystemDefaultLangID
GetUserDefaultLangID
GetCommandLineA
GetVersion
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind

user32

wsprintfA
wsprintfW

advapi32

RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegCreateKeyExW
RegCreateKeyExA
RegOpenKeyExW
RegOpenKeyExA
RegEnumValueW
RegEnumValueA
RegEnumKeyExW
RegEnumKeyExA

Exports

Exports

SzUPFUtl_CopyRegistryTree
SzUPFUtl_CopyRegistryTreeA
SzUPFUtl_CopyRegistryTreeW
SzUPFUtl_CreateKey
SzUPFUtl_CreateKeyA
SzUPFUtl_CreateKeyW
SzUPFUtl_DeleteRegistryTree
SzUPFUtl_DeleteRegistryTreeA
SzUPFUtl_DeleteRegistryTreeW
SzUPFUtl_EnumKeyName
SzUPFUtl_EnumKeyNameA
SzUPFUtl_EnumKeyNameW
SzUPFUtl_EnumValueName
SzUPFUtl_EnumValueNameA
SzUPFUtl_EnumValueNameW
SzUPFUtl_GetProfileBoolean
SzUPFUtl_GetProfileBooleanA
SzUPFUtl_GetProfileBooleanEx
SzUPFUtl_GetProfileBooleanExA
SzUPFUtl_GetProfileBooleanExW
SzUPFUtl_GetProfileBooleanW
SzUPFUtl_GetProfileByteArray
SzUPFUtl_GetProfileByteArrayA
SzUPFUtl_GetProfileByteArrayEx
SzUPFUtl_GetProfileByteArrayExA
SzUPFUtl_GetProfileByteArrayExW
SzUPFUtl_GetProfileByteArrayW
SzUPFUtl_GetProfileDWord
SzUPFUtl_GetProfileDWordA
SzUPFUtl_GetProfileDWordByRadix
SzUPFUtl_GetProfileDWordByRadixA
SzUPFUtl_GetProfileDWordByRadixW
SzUPFUtl_GetProfileDWordEx
SzUPFUtl_GetProfileDWordExA
SzUPFUtl_GetProfileDWordExByRadix
SzUPFUtl_GetProfileDWordExByRadixA
SzUPFUtl_GetProfileDWordExByRadixW
SzUPFUtl_GetProfileDWordExW
SzUPFUtl_GetProfileDWordW
SzUPFUtl_GetProfileMultiString
SzUPFUtl_GetProfileMultiStringA
SzUPFUtl_GetProfileMultiStringEx
SzUPFUtl_GetProfileMultiStringExA
SzUPFUtl_GetProfileMultiStringExW
SzUPFUtl_GetProfileMultiStringW
SzUPFUtl_GetProfileString
SzUPFUtl_GetProfileStringA
SzUPFUtl_GetProfileStringEx
SzUPFUtl_GetProfileStringExA
SzUPFUtl_GetProfileStringExW
SzUPFUtl_GetProfileStringW
SzUPFUtl_GetUserProfileInfo
SzUPFUtl_GetUserProfileInfoA
SzUPFUtl_GetUserProfileInfoW
SzUPFUtl_GetUserProfileSettings
SzUPFUtl_GetUserProfileSettingsA
SzUPFUtl_GetUserProfileSettingsW
SzUPFUtl_GetUserProfileSuffixSubKeySettings
SzUPFUtl_GetUserProfileSuffixSubKeySettingsA
SzUPFUtl_GetUserProfileSuffixSubKeySettingsW
SzUPFUtl_OpenKey
SzUPFUtl_OpenKeyA
SzUPFUtl_OpenKeyW
SzUPFUtl_QueryRegistryValue
SzUPFUtl_QueryRegistryValueA
SzUPFUtl_QueryRegistryValueW
SzUPFUtl_SetProfileBoolean
SzUPFUtl_SetProfileBooleanA
SzUPFUtl_SetProfileBooleanW
SzUPFUtl_SetProfileByteArray
SzUPFUtl_SetProfileByteArrayA
SzUPFUtl_SetProfileByteArrayW
SzUPFUtl_SetProfileDWord
SzUPFUtl_SetProfileDWordA
SzUPFUtl_SetProfileDWordByRadix
SzUPFUtl_SetProfileDWordByRadixA
SzUPFUtl_SetProfileDWordByRadixW
SzUPFUtl_SetProfileDWordW
SzUPFUtl_SetProfileMultiString
SzUPFUtl_SetProfileMultiStringA
SzUPFUtl_SetProfileMultiStringW
SzUPFUtl_SetProfileString
SzUPFUtl_SetProfileStringA
SzUPFUtl_SetProfileStringW
SzUPFUtl_SetRegistryValue
SzUPFUtl_SetRegistryValueA
SzUPFUtl_SetRegistryValueW
SzUPFUtl_SetUserProfileInfo
SzUPFUtl_SetUserProfileInfoA
SzUPFUtl_SetUserProfileInfoEx
SzUPFUtl_SetUserProfileInfoExA
SzUPFUtl_SetUserProfileInfoExW
SzUPFUtl_SetUserProfileInfoW
SzUPFUtl_SetUserProfileSettings
SzUPFUtl_SetUserProfileSettingsA
SzUPFUtl_SetUserProfileSettingsW
SzUPFUtl_SetUserProfileSuffixSubKeySettings
SzUPFUtl_SetUserProfileSuffixSubKeySettingsA
SzUPFUtl_SetUserProfileSuffixSubKeySettingsW

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/Setup.exe
.exe windows:5 windows x86 arch:x86

952b205c3f24333a19bd99931c2dd3a1

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:db:9b:ac:6b:13:52:6b:1d:c0:c2:45:28:1f:0a:35:2f:52:de:92
Signer

Actual PE Digest

bc:db:9b:ac:6b:13:52:6b:1d:c0:c2:45:28:1f:0a:35:2f:52:de:92

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\SVN_Setup\Setup\trunk\src\Release_CheckPreviousVersion\Setup.pdb

Imports

version

VerInstallFileW

ole32

CoCreateInstance
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
CoInitialize
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CoTreatAsClass
OleDuplicateData
CoDisconnectObject
CLSIDFromString
CoInitializeEx
CoUninitialize
CoTaskMemFree
StringFromGUID2
CreateBindCtx

shlwapi

StrStrW
PathIsDirectoryW
PathAppendW
PathAddBackslashW
PathFileExistsA
PathFileExistsW
PathAddExtensionW
PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW
PathRemoveExtensionW
PathFindFileNameW
PathFindExtensionW

setupapi

CM_Locate_DevNodeW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList

kernel32

GetModuleHandleA
GlobalGetAtomNameW
GetCurrentProcessId
InterlockedExchange
CompareStringA
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
InterlockedIncrement
GetAtomNameW
lstrlenA
SystemTimeToFileTime
LocalUnlock
LocalLock
GetFileAttributesExW
LocalFileTimeToFileTime
SetFileTime
GetFileSizeEx
GetTempFileNameW
GetStartupInfoW
RtlUnwind
GetFullPathNameW
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
CreateThread
HeapReAlloc
SetStdHandle
GetFileType
ExitProcess
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
FatalAppExitA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
GetTimeZoneInformation
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GetStringTypeExW
MoveFileW
WideCharToMultiByte
GlobalSize
FormatMessageW
CreateEventW
SuspendThread
SetEvent
SetThreadPriority
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
InterlockedDecrement
SetLastError
CreateMutexW
SetThreadLocale
WritePrivateProfileStringW
GetUserDefaultUILanguage
GetLocaleInfoW
CopyFileW
GetDiskFreeSpaceW
DeleteFileW
Sleep
GetSystemDefaultLangID
GetSystemTime
WaitForSingleObject
OutputDebugStringW
GetProfileStringW
WriteProfileStringW
CreateProcessW
MulDiv
GetModuleFileNameW
GetShortPathNameW
ResumeThread
OpenProcess
MoveFileExW
WriteFile
SetFilePointer
LoadLibraryExW
GetCurrentThread
LocalAlloc
LocalFree
ExpandEnvironmentStringsW
GetComputerNameW
GetDriveTypeW
GetVersion
GetCurrentProcess
GetVersionExW
GetModuleHandleW
MultiByteToWideChar
SetFileAttributesW
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateDirectoryW
GetLastError
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
VirtualFree
ReadFile
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetVersionExA
GetPrivateProfileStringA
GetTempPathA
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrcmpW
CreateFileW
GetFileSize
CloseHandle
GetSystemDirectoryW
GetWindowsDirectoryW
SetErrorMode
LoadLibraryW
GetProcAddress
FreeLibrary
FindResourceW
LoadResource
LockResource
SizeofResource
lstrcmpiW
lstrcpynW
GetFileAttributesW
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrcpyW
lstrlenW
lstrcatW
RaiseException

user32

SetParent
UnionRect
WindowFromPoint
GetDCEx
LockWindowUpdate
SetCapture
GetSystemMenu
DeleteMenu
IsRectEmpty
GetTabbedTextExtentW
SetRect
MessageBeep
IsClipboardFormatAvailable
GetDialogBaseUnits
LoadCursorW
SystemParametersInfoW
GetMenuItemInfoW
InflateRect
UnregisterClassW
ShowOwnedPopups
UnpackDDElParam
ReuseDDElParam
DestroyMenu
GetMenuBarInfo
SetCursor
ReleaseCapture
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
CharUpperW
MapVirtualKeyW
GetKeyNameTextW
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
LoadMenuW
ScrollWindowEx
IsWindowEnabled
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetActiveWindow
GetCursorPos
ValidateRect
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetSubMenu
GetMenuItemID
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetParent
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
GetWindowLongW
SetWindowLongW
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
UnhookWindowsHookEx
SetClassLongW
keybd_event
GetForegroundWindow
ShowWindow
SetForegroundWindow
LoadImageW
DdeCreateDataHandle
PostQuitMessage
IsWindowVisible
OffsetRect
FindWindowW
InvalidateRect
UpdateWindow
GetWindowThreadProcessId
ExitWindowsEx
DdeInitializeW
DdeCreateStringHandleW
DdeConnect
DdeClientTransaction
DdeFreeStringHandle
DdeDisconnect
DdeAccessData
DdeUnaccessData
DdeFreeDataHandle
DdeUninitialize
GetMessageW
GetDC
GetSysColorBrush
GetSysColor
GetDesktopWindow
FillRect
DrawTextW
ReleaseDC
GetDlgItem
IsWindow
PostMessageW
MapWindowPoints
GetClientRect
PeekMessageW
DispatchMessageW
TranslateMessage
LoadIconW
DestroyIcon
wsprintfW
GetSystemMetrics
SendMessageW
EnableWindow
KillTimer
SetTimer
GetWindowRect
LoadStringW
MessageBoxW
GetMenuItemCount

gdi32

GetTextMetricsW
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetCharWidthW
CreateHatchBrush
StartPage
EndPage
CreatePen
AbortDoc
EndDoc
GetBkColor
StretchDIBits
ExtCreatePen
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
CreatePatternBrush
CreateDIBPatternBrushPt
ExtSelectClipRgn
PolyBezierTo
PolylineTo
GetDCOrgEx
StretchBlt
CreateSolidBrush
Rectangle
CreateDIBitmap
SelectPalette
RealizePalette
CreateFontIndirectW
SetTextColor
GetDeviceCaps
CreatePalette
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
BitBlt
CreateFontW
GetTextExtentPoint32W
DeleteObject
GetObjectW
GetStockObject
SelectObject
SetBkMode
SetAbortProc
SetBkColor
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
StartDocW
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
PatBlt
CreateRectRgnIndirect
CreateDCW
CopyMetaFileW
CreateBitmap
GetClipBox
PolyDraw

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetJobW

advapi32

SetFileSecurityW
RegDeleteValueW
RegCreateKeyW
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegSetValueW
RegDeleteKeyW
ImpersonateSelf
OpenThreadToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
RevertToSelf
FreeSid
GetUserNameW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
GetFileSecurityW

shell32

SHBrowseForFolderW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetFileInfoW
DragFinish
DragQueryFileW
SHGetFolderPathW
ShellExecuteW
ExtractIconW
SHGetPathFromIDListW

oleaut32

VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VarDateFromStr
VarBstrFromDate
VarDecFromStr
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SystemTimeToVariantTime

Sections

.text
Size: 608KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 527KB - Virtual size: 526KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Launch Manager_Dritek_5.0.3_Win7x86/Setup.inf
Launch Manager_Dritek_5.0.3_Win7x86/SetupDev.dll
.dll windows:4 windows x86 arch:x86

3fb1b236ed57fc51f5a729d5ddd40d85

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:29:36:cb:fc:d6:21:46:e1:ad:09:0f:cd:40:4a:2a:ad:5d:d1:f7
Signer

Actual PE Digest

f9:29:36:cb:fc:d6:21:46:e1:ad:09:0f:cd:40:4a:2a:ad:5d:d1:f7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpynA
GetPrivateProfileStringA
LocalAlloc
GetVersionExA
GlobalAlloc
LocalFree
GetPrivateProfileIntA
GlobalFree
GetCurrentProcess
GetCurrentThread
GetLastError
SetErrorMode
CloseHandle
FreeLibrary
lstrcpyA
LoadLibraryA
GetProcAddress
lstrlenA
lstrcmpiA
GetModuleFileNameA
InterlockedDecrement
FreeEnvironmentStringsA
GetStartupInfoA
RtlUnwind
GetCommandLineA
GetVersion
lstrcatA
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
GetACP
GetOEMCP
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
VirtualAlloc
HeapReAlloc

user32

wsprintfA

advapi32

OpenThreadToken
OpenProcessToken
InitializeSecurityDescriptor
GetLengthSid
AllocateAndInitializeSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
InitializeAcl
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
SetSecurityDescriptorGroup
RevertToSelf
FreeSid
AccessCheck
RegQueryValueExA
RegEnumKeyExA
GetUserNameA
RegSetValueExA
RegOpenKeyExA
ImpersonateSelf
RegCloseKey

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiSetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList

Exports

Exports

SetupDev_AddDevicesRegistry
SetupDev_AddDevicesRegistryEx
SetupDev_IsAdministrator

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/SzPtcUtl.dll
.dll windows:4 windows x86 arch:x86

05736871180a0ca59eaa47fc7b128712

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:05:46:dc:04:26:ce:05:a0:04:f2:13:db:7a:38:0d:2d:64:b5:6f
Signer

Actual PE Digest

06:05:46:dc:04:26:ce:05:a0:04:f2:13:db:7a:38:0d:2d:64:b5:6f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapDestroy
lstrlenA
lstrcatA
VirtualFree
HeapFree
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
InterlockedDecrement
InterlockedIncrement
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
lstrcpyA
HeapCreate
GetOEMCP
GetACP
WriteFile
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind

user32

wsprintfA

Exports

Exports

SzPtcUtl_Decode
SzPtcUtl_DecodeEx
SzPtcUtl_Encode
SzPtcUtl_EncodeEx

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/UNINST32.EXE
.exe windows:5 windows x86 arch:x86

0100ad4297554d4104b27c5475401823

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e5:e0:1a:2c:53:40:ba:27:21:40:da:5c:2b:cb:79:1e:fe:87:9b:4e
Signer

Actual PE Digest

e5:e0:1a:2c:53:40:ba:27:21:40:da:5c:2b:cb:79:1e:fe:87:9b:4e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\SVN_SOURCE\uninst32\trunk\src\Release\UnInst32.pdb

Imports

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

shlwapi

StrStrIW
StrCmpIW
PathFileExistsA
StrStrW
StrTrimW
PathIsRootW
PathFindFileNameW
PathFileExistsW
PathIsDirectoryW
PathAddBackslashW
PathStripPathW

setupapi

CM_Locate_DevNodeW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller
SetupDiGetDeviceInstanceIdW

kernel32

SetFileAttributesW
VirtualFree
LeaveCriticalSection
GetLastError
VirtualAlloc
EnterCriticalSection
DeleteCriticalSection
lstrcpynW
SetErrorMode
GetCurrentProcess
GetCurrentThread
GlobalAlloc
GlobalFree
LocalFree
SetEndOfFile
WideCharToMultiByte
GetModuleFileNameW
GetTempPathW
LocalAlloc
lstrcmpW
SetThreadLocale
GetUserDefaultUILanguage
CreateMutexW
OpenProcess
GetSystemDirectoryW
SetLastError
Process32FirstW
ProcessIdToSessionId
Process32NextW
WTSGetActiveConsoleSessionId
GetModuleHandleA
CreateToolhelp32Snapshot
OutputDebugStringA
GetVersion
GetCurrentThreadId
GetProfileStringW
WriteProfileStringW
GetPrivateProfileIntA
GetTempPathA
DeleteFileA
lstrcatW
GetStringTypeW
GetStringTypeA
lstrcpyW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetModuleFileNameA
GetStdHandle
HeapReAlloc
HeapCreate
ExitProcess
HeapSize
Sleep
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
RtlUnwind
RaiseException
GetStartupInfoW
HeapAlloc
WriteConsoleA
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
lstrcmpiW
RemoveDirectoryW
SetCurrentDirectoryW
FindClose
GetProcAddress
GetPrivateProfileIntW
DeleteFileW
GetWindowsDirectoryW
CloseHandle
GetShortPathNameW
MultiByteToWideChar
FindNextFileW
WritePrivateProfileStringW
lstrlenW
CreateFileW
GetFileAttributesW
GetVersionExW
LoadLibraryW
WriteFile
GetPrivateProfileStringW
GetModuleHandleW
WaitForSingleObject
MoveFileExW
CreateProcessW
FreeLibrary
SetFilePointer
FindFirstFileW
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
ReadFile
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetConsoleOutputCP
WriteConsoleW
CreateFileA

user32

SetFocus
GetDC
TranslateMessage
LoadIconW
PeekMessageW
ReleaseDC
GetDlgItem
EndDialog
SetWindowPos
LoadStringW
MessageBoxW
SendMessageW
EnableWindow
SetWindowTextW
GetWindowThreadProcessId
DispatchMessageW
DdeInitializeW
DdeCreateStringHandleW
PostMessageW
FindWindowW
DdeFreeStringHandle
DdeUninitialize
DdeCreateDataHandle
DdeClientTransaction
DdeConnect
DdeDisconnect
DdeFreeDataHandle
wsprintfW
MessageBeep
DialogBoxParamW
KillTimer
GetWindowRect
MoveWindow
MapWindowPoints
IsWindowVisible
ShowWindow
GetWindowLongW
GetForegroundWindow
GetClientRect
IsWindowEnabled
AttachThreadInput
GetParent
SetForegroundWindow
IsIconic
SetTimer
GetSystemMetrics
IsWindow

gdi32

LineTo
DeleteObject
SelectObject
CreatePen
MoveToEx

advapi32

ImpersonateSelf
AccessCheck
SetSecurityDescriptorGroup
OpenThreadToken
RegEnumValueW
RegDeleteKeyW
RegCreateKeyExW
ConvertSidToStringSidW
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
CreateProcessAsUserW
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
GetSecurityDescriptorDacl
RegEnumKeyExW
GetLengthSid
IsValidSecurityDescriptor
AddAce
RegSetKeySecurity
AddAccessAllowedAce
InitializeAcl
RegDeleteValueW
RegGetKeySecurity
GetAce
SetSecurityDescriptorDacl
LookupAccountNameW
InitializeSecurityDescriptor
GetAclInformation
RegEnumKeyW
GetUserNameW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
AllocateAndInitializeSid
SetSecurityDescriptorOwner
RevertToSelf
FreeSid

shell32

SHGetMalloc
SHGetPathFromIDListW
ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderLocation
SHChangeNotify

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Launch Manager_Dritek_5.0.3_Win7x86/VistaVol.dll
.dll windows:5 windows x86 arch:x86

1b929c3f3eeaf824c0ef24844fa7dd72

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/10/2006, 00:00

Not After

16/10/2009, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6f:49:55:41:37:a0:70:06:f9:a5:b6:f1:61:b9:00:cf:bd:cc:89:f8
Signer

Actual PE Digest

6f:49:55:41:37:a0:70:06:f9:a5:b6:f1:61:b9:00:cf:bd:cc:89:f8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

t:\Temp\vc\Utility\VistaVol\Win32\Release_NoDelay\VistaVol.pdb

Imports

kernel32

InitOnceExecuteOnce
CloseHandle
CreateEventW
WaitForSingleObject
ResetEvent
SetEvent
InterlockedIncrement
InterlockedDecrement
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
HeapAlloc
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetModuleHandleA

user32

PostMessageW

ole32

CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree

Exports

Exports

VistaVol_DeInit
VistaVol_DeviceChanged
VistaVol_GetMute
VistaVol_GetVolumeLevel
VistaVol_Init
VistaVol_InitEx
VistaVol_OnDefaultDeviceChanged
VistaVol_OnDeviceRemoved
VistaVol_Register
VistaVol_SetMute
VistaVol_SetVolumeLevel
VistaVol_Unregister
VistaVol_VolumeLevelStepDown
VistaVol_VolumeLevelStepUp

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/WND2FILE.DLL
.dll windows:4 windows x86 arch:x86

f2a7f3fd605127138b4990dfa2acea0f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/10/2006, 00:00

Not After

16/10/2009, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

af:34:79:6a:14:5d:32:0e:72:df:a4:17:96:44:36:7c:a0:b2:22:f5
Signer

Actual PE Digest

af:34:79:6a:14:5d:32:0e:72:df:a4:17:96:44:36:7c:a0:b2:22:f5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryW
lstrcpyA
WideCharToMultiByte
GetVersionExW
MultiByteToWideChar
lstrcmpiW
GetModuleFileNameW
lstrlenW
lstrcatW
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
HeapReAlloc
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetStringTypeA
GetStringTypeW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
LCMapStringA

user32

IsWindowEnabled
GetClassNameW
IsIconic
EnumWindows
wsprintfW
IsWindow
GetWindowThreadProcessId
IsWindowVisible

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

FindExecutableW

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Exports

Exports

WND2FILE_GetExecutableFileFromWindowHandle
WND2FILE_GetExecutableFileFromWindowHandleA
WND2FILE_GetExecutableFileFromWindowHandleW
WND2FILE_GetWindowHandleFromExecutableFile
WND2FILE_GetWindowHandleFromExecutableFileA
WND2FILE_GetWindowHandleFromExecutableFileW
WND2FILE_GetWindowHandlesFromExecutableFile
WND2FILE_GetWindowHandlesFromExecutableFileA
WND2FILE_GetWindowHandlesFromExecutableFileW

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/WmiProp.dll
.dll windows:4 windows x86 arch:x86

0411aaa0e6d02e841e37951cd3594c51

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

65:62:48:15:2b:d6:98:c6:09:4b:30:ba:cd:76:9b:4c:fd:60:b4:56
Signer

Actual PE Digest

65:62:48:15:2b:d6:98:c6:09:4b:30:ba:cd:76:9b:4c:fd:60:b4:56

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\SVN_Utility\WmiProp.Dll\trunk\src\release\WmiProp.pdb

Imports

kernel32

InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetStringTypeW
GetLastError
lstrlenA
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
InitializeCriticalSection
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA

user32

wsprintfW

ole32

CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoInitializeEx
CoSetProxyBlanket

oleaut32

VariantClear
SysFreeString
SysAllocString

Exports

Exports

WMIP_Deinitial
WMIP_GetCurrentNameSpaceA
WMIP_GetCurrentNameSpaceW
WMIP_GetInstanceIndexByNameA
WMIP_GetInstanceIndexByNameW
WMIP_GetPropertyByteArrayA
WMIP_GetPropertyByteArrayW
WMIP_GetPropertyByteValueA
WMIP_GetPropertyByteValueByIndexA
WMIP_GetPropertyByteValueByIndexW
WMIP_GetPropertyByteValueByNameA
WMIP_GetPropertyByteValueByNameW
WMIP_GetPropertyByteValueW
WMIP_GetPropertyDWordArrayA
WMIP_GetPropertyDWordArrayW
WMIP_GetPropertyDWordValueA
WMIP_GetPropertyDWordValueByIndexA
WMIP_GetPropertyDWordValueByIndexW
WMIP_GetPropertyDWordValueByNameA
WMIP_GetPropertyDWordValueByNameW
WMIP_GetPropertyDWordValueW
WMIP_GetPropertyStringA
WMIP_GetPropertyStringByIndexA
WMIP_GetPropertyStringByIndexW
WMIP_GetPropertyStringByNameA
WMIP_GetPropertyStringByNameW
WMIP_GetPropertyStringW
WMIP_GetPropertyWordArrayA
WMIP_GetPropertyWordArrayW
WMIP_GetPropertyWordValueA
WMIP_GetPropertyWordValueByIndexA
WMIP_GetPropertyWordValueByIndexW
WMIP_GetPropertyWordValueByNameA
WMIP_GetPropertyWordValueByNameW
WMIP_GetPropertyWordValueW
WMIP_Initial
WMIP_SetNameSpaceA
WMIP_SetNameSpaceW

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/aiPlatformSetupAddOn.dll
.dll windows:5 windows x86 arch:x86

085084ce7f513a6fd785864321a210c8

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3f:46:31:9d:53:d1:b4:28:86:7b:1d:dd:19:7a:95:9f:f4:9f:dd:27
Signer

Actual PE Digest

3f:46:31:9d:53:d1:b4:28:86:7b:1d:dd:19:7a:95:9f:f4:9f:dd:27

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Works\Acer\lmv5.svn.reltag\src\Release\aiPlatformSetupAddOn.pdb

Imports

kernel32

GetModuleFileNameW
SetFilePointer
CreateFileW
CreateMutexW
ReleaseMutex
WriteFile
OutputDebugStringA
GetModuleHandleA
InterlockedCompareExchange
InterlockedExchange
LocalFree
GetCommandLineW
SetEnvironmentVariableW
GetEnvironmentVariableW
IsDebuggerPresent
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
RaiseException
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetTempPathW
GetCurrentDirectoryW
ReadFile
GetVersionExW
QueryPerformanceCounter
GetSystemTimeAsFileTime
MultiByteToWideChar
WideCharToMultiByte
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
WaitForSingleObject
DeleteFileW
SetLastError
GetLastError
CloseHandle
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
FindResourceExW
FindResourceW
GetProcAddress
SizeofResource
LockResource
LoadResource
InterlockedDecrement
ExpandEnvironmentStringsW
LoadLibraryW
FreeLibrary
GetFileAttributesW
GetStringTypeW
GetStringTypeA
LoadLibraryA
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
HeapCreate
VirtualAlloc
VirtualFree
LCMapStringW
InterlockedIncrement
InitializeCriticalSection
lstrlenA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetModuleHandleW
ExitProcess
RtlUnwind
GetCPInfo
LCMapStringA

user32

MessageBoxW
LoadStringW

shell32

CommandLineToArgvW
SHGetFolderPathW

ole32

CoCreateInstance
CoInitializeSecurity
CoUninitialize
CoInitializeEx

oleaut32

VariantClear
SysFreeString
SysAllocString

winmm

timeGetTime

Exports

Exports

DoAddOnAction
InitialAddOnDLL
UnInitialAddOnDLL

Sections

.text
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/aipflib.dll
.dll windows:5 windows x86 arch:x86

d12d04a646bfadf0bfed9a72b61f5d9a

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a4:70:76:7a:a8:a6:34:9a:35:d0:23:3b:0a:db:a9:96:7a:82:b9:53
Signer

Actual PE Digest

a4:70:76:7a:a8:a6:34:9a:35:d0:23:3b:0a:db:a9:96:7a:82:b9:53

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Works\Acer\lmv5.svn.reltag\src\Release\aipflib.pdb

Imports

kernel32

GetCurrentProcessId
FindClose
WaitForSingleObject
SetEvent
GetTickCount
LoadLibraryW
CreateEventW
CreateNamedPipeW
ConnectNamedPipe
ReadFile
FlushFileBuffers
DisconnectNamedPipe
ReleaseMutex
CreateMutexW
GetCurrentThreadId
SetLastError
DeleteFileW
CreateProcessW
GetModuleFileNameW
SetFilePointer
CreateFileW
OutputDebugStringA
InterlockedCompareExchange
InterlockedExchange
SetEnvironmentVariableW
GetEnvironmentVariableW
GetCommandLineW
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetSystemDirectoryW
GetWindowsDirectoryW
ProcessIdToSessionId
GetFileAttributesW
GetTempPathW
GetCurrentDirectoryW
GetVersionExW
QueryPerformanceCounter
ExpandEnvironmentStringsW
MultiByteToWideChar
WideCharToMultiByte
GetSystemTimeAsFileTime
GetModuleHandleA
GetProcAddress
FreeLibrary
GetProcessTimes
LoadLibraryA
WriteFile
SetFilePointerEx
SetEndOfFile
RemoveDirectoryA
CreateDirectoryA
GetFileSizeEx
DeleteFileA
CreateFileA
MapViewOfFileEx
CreateFileMappingA
UnmapViewOfFile
GetCurrentProcess
FindNextFileA
FindFirstFileA
LocalFree
FormatMessageA
GetSystemInfo
GetLastError
Sleep
GetTempPathA
InterlockedDecrement
InterlockedIncrement
CloseHandle
lstrlenA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
IsValidCodePage
GetOEMCP
GetACP
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetModuleHandleW
InitializeCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
GetCommandLineA
GetConsoleCP
GetConsoleMode
ExitProcess
HeapReAlloc
GetProcessHeap
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
SetHandleCount
GetFileType

user32

MessageBoxW

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenServiceA
QueryServiceStatus
ControlService
CloseServiceHandle
OpenSCManagerW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameW

shell32

CommandLineToArgvW
SHGetFolderPathW

ole32

CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoUninitialize

oleaut32

VariantClear
SafeArrayUnaccessData
SysAllocString
SysFreeString
SafeArrayAccessData

shlwapi

PathFileExistsA
PathCombineA
PathFileExistsW

netapi32

NetApiBufferFree
NetUserGetInfo

winmm

timeGetTime

psapi

QueryWorkingSet

Exports

Exports

DsiCreateInstance
DsiDllCanUnloadNow

Sections

.text
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/dsiwmis.exe
.exe windows:5 windows x86 arch:x86

7a2ac29ad998db55bbdcfa149f45afb6

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

01/10/2009, 00:00

Not After

15/10/2012, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f3:25:5c:2e:da:d5:96:f2:6a:e1:4b:a8:2c:58:bb:65:b6:d3:b5:b1
Signer

Actual PE Digest

f3:25:5c:2e:da:d5:96:f2:6a:e1:4b:a8:2c:58:bb:65:b6:d3:b5:b1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Works\Acer\lmv5.svn.reltag\src\Release\dsiwmis.pdb

Imports

wtsapi32

WTSQueryUserToken

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

advapi32

RegCreateKeyExW
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
StartServiceCtrlDispatcherW
DuplicateTokenEx
SetTokenInformation
CreateProcessAsUserW
ConvertStringSidToSidW
GetLengthSid
RegisterServiceCtrlHandlerExW
SetServiceStatus
RegCloseKey
RegOpenKeyExW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
CM_Reenumerate_DevNode
SetupDiDestroyDeviceInfoList

kernel32

LocalFree
CloseHandle
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcess
WaitForSingleObject
UnmapViewOfFile
CreateFileMappingA
MapViewOfFileEx
CreateFileA
DeleteFileA
GetSystemInfo
GetFileSizeEx
CreateDirectoryA
RemoveDirectoryA
WriteFile
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleHandleA
Sleep
GetSystemTimeAsFileTime
OpenEventW
LoadLibraryW
CreateFileW
GetCurrentThreadId
CreateEventW
ResetEvent
GetCurrentProcessId
ExpandEnvironmentStringsW
GetModuleHandleW
GetVersionExW
InterlockedIncrement
SetLastError
DeleteFileW
CreateProcessW
GetModuleFileNameW
SetFilePointer
CreateMutexW
ReleaseMutex
OutputDebugStringA
InterlockedCompareExchange
InterlockedExchange
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEnvironmentVariableW
GetEnvironmentVariableW
GetCommandLineW
IsDebuggerPresent
RaiseException
FormatMessageA
GetWindowsDirectoryW
GetFileAttributesW
GetTempPathW
GetCurrentDirectoryW
SetStdHandle
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
WideCharToMultiByte
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
IsValidCodePage
GetOEMCP
GetACP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
ExitProcess
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
GetConsoleMode
GetConsoleCP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
lstrlenA
CompareStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
GetLastError
WTSGetActiveConsoleSessionId
SetEvent
InterlockedDecrement
GetTickCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetSystemDirectoryW
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
FlushFileBuffers
VirtualAlloc
InitializeCriticalSection

user32

MessageBoxW

shell32

SHGetFolderPathW
CommandLineToArgvW

ole32

CoInitializeSecurity
CoCreateInstance
CoInitializeEx
CoUninitialize

oleaut32

VariantInit
SysFreeString
SysAllocStringLen
VariantClear
SysAllocString

winmm

timeGetTime

Sections

.text
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/gdiplus.dll
.dll windows:5 windows x86 arch:x86

7941976a82dd7ff8b1a2ea069878fab3

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:06:2a:8d:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

29/03/2001, 21:27

Not After

29/05/2002, 21:37

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2001 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetOEMCP
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
InterlockedExchange
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
RaiseException
Sleep
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
SetEvent
lstrcmpiA
CreateThread
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
GetSystemDefaultLCID
GetProcAddress
GetModuleHandleW
GetACP
GetVersionExA
VirtualQuery
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetCommandLineA
GetSystemInfo
HeapReAlloc
HeapFree
VirtualAlloc
IsValidLocale
ConvertDefaultLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
GetProfileIntA
GetProfileStringA
lstrcmpiW
IsDBCSLeadByteEx
LocalReAlloc
MulDiv
SetLastError
LocalAlloc
LocalFree
GetFileTime
SearchPathW
SearchPathA
InterlockedIncrement
CreateSemaphoreA
lstrcpyW
lstrcatW
LoadLibraryW
lstrcpyA
lstrcatA
GetSystemDirectoryA
CreateFileMappingW
ReleaseSemaphore
GetProfileSectionA
CreateFileW
SetEndOfFile
SetFilePointer
ReadFile
UnlockFile
GetFileInformationByHandle
LockFile
FlushFileBuffers
GetLastError
VirtualFree
GlobalAlloc
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GlobalLock
GlobalSize
GlobalUnlock
GlobalFree
HeapCreate
GetModuleHandleA
GetSystemDirectoryW
GetWindowsDirectoryA
FreeLibrary
HeapDestroy
LoadLibraryA

user32

ReleaseDC
LoadBitmapW
LoadBitmapA
wsprintfW
SystemParametersInfoA
GetDC
wsprintfA
GetSysColor
UnregisterClassA
DestroyWindow
GetSystemMetrics
DefWindowProcA
CreateWindowExA
RegisterClassA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
GetClientRect
GetDesktopWindow
GetWindowRect
WindowFromDC
CreateIconIndirect
GetIconInfo
ClientToScreen
wvsprintfA
GetDCEx
GetWindowLongA
GetClassLongA

gdi32

GetNearestPaletteIndex
GetDIBColorTable
FillRgn
SetMiterLimit
CreateSolidBrush
StrokePath
GetGraphicsMode
SetPolyFillMode
FillPath
StrokeAndFillPath
GetViewportExtEx
ExtTextOutA
GetTextCharsetInfo
TranslateCharsetInfo
PolylineTo
Polyline
LineTo
GetCurrentPositionEx
ArcTo
SetArcDirection
SelectClipPath
GetPath
CloseFigure
AbortPath
FlattenPath
WidenPath
BeginPath
Ellipse
AngleArc
PolyBezierTo
PolyBezier
RoundRect
PolyDraw
Pie
Chord
Arc
EndPath
OffsetClipRgn
GetRgnBox
CombineRgn
SetPaletteEntries
ResizePalette
ExcludeClipRect
MoveToEx
PlayEnhMetaFile
GetWinMetaFileBits
PlgBlt
BitBlt
OffsetViewportOrgEx
StretchBlt
ScaleViewportExtEx
ScaleWindowExtEx
CombineTransform
SetMapperFlags
CreatePen
CreateDIBitmap
CreatePatternBrush
ExtSelectClipRgn
GetBkMode
GetTextAlign
ModifyWorldTransform
ExtCreateRegion
CreateCompatibleBitmap
GetNearestColor
SetStretchBltMode
StretchDIBits
SetTextAlign
SetTextJustification
PolyPolygon
PlayMetaFileRecord
ExtCreatePen
GetWorldTransform
GetROP2
SetROP2
Rectangle
Polygon
IntersectClipRect
SetBrushOrgEx
GetClipRgn
SelectClipRgn
GetBkColor
GetTextColor
CreatePenIndirect
GetObjectW
DPtoLP
CreateDIBPatternBrushPt
ExtTextOutW
SetBitmapBits
CreateEnhMetaFileW
GdiComment
GetMetaFileW
GetMetaFileA
SaveDC
SetWindowOrgEx
SetViewportOrgEx
SetGraphicsMode
SetWorldTransform
GetEnhMetaFileW
GetEnhMetaFileA
GetEnhMetaFileBits
CopyEnhMetaFileA
CopyMetaFileA
DeleteMetaFile
GetEnhMetaFileHeader
SetMetaFileBitsEx
SetEnhMetaFileBits
CreateEnhMetaFileA
SetMapMode
SetViewportExtEx
SetWindowExtEx
PlayMetaFile
CloseEnhMetaFile
DeleteEnhMetaFile
SetMetaRgn
GetMetaFileBitsEx
EnumMetaFile
EnumEnhMetaFile
PlayEnhMetaFileRecord
RestoreDC
GetStockObject
CreateBitmap
SetTextColor
SetBkColor
SetBkMode
SetDIBits
CreatePalette
GetSystemPaletteEntries
GetSystemPaletteUse
GetDeviceCaps
ExtEscape
GetObjectType
GetPixel
SetDIBColorTable
DeleteObject
SelectPalette
GetTextFaceA
GetTextMetricsA
GetTextFaceW
GetTextMetricsW
EnumFontFamiliesExA
EnumFontFamiliesExW
SelectObject
CreateFontIndirectW
CreateFontIndirectA
GetRegionData
DeleteDC
CreateDCA
CreateICA
CreateRectRgn
GetRandomRgn
LPtoDP
GetWindowExtEx
PolyPolyline
GetWindowOrgEx
GetViewportOrgEx
GetMapMode
SetICMMode
Escape
GetDCOrgEx
GetObjectA
GetCurrentObject
GetDIBits
CreateCompatibleDC
CreateDIBSection
RealizePalette
GetPaletteEntries
GdiFlush
PatBlt
CreateBrushIndirect

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal

advapi32

RegSetValueExA
RegCloseKey
RegEnumValueW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegEnumKeyExA
RegEnumKeyExW
RegCreateKeyExA
RegQueryValueExW
RegSetValueExW
RegEnumValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW

Exports

Exports

GdipAddPathArc
GdipAddPathArcI
GdipAddPathBezier
GdipAddPathBezierI
GdipAddPathBeziers
GdipAddPathBeziersI
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathClosedCurve2I
GdipAddPathClosedCurveI
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathCurve2I
GdipAddPathCurve3
GdipAddPathCurve3I
GdipAddPathCurveI
GdipAddPathEllipse
GdipAddPathEllipseI
GdipAddPathLine
GdipAddPathLine2
GdipAddPathLine2I
GdipAddPathLineI
GdipAddPathPath
GdipAddPathPie
GdipAddPathPieI
GdipAddPathPolygon
GdipAddPathPolygonI
GdipAddPathRectangle
GdipAddPathRectangleI
GdipAddPathRectangles
GdipAddPathRectanglesI
GdipAddPathString
GdipAddPathStringI
GdipAlloc
GdipBeginContainer
GdipBeginContainer2
GdipBeginContainerI
GdipBitmapGetPixel
GdipBitmapLockBits
GdipBitmapSetPixel
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipClearPathMarkers
GdipCloneBitmapArea
GdipCloneBitmapAreaI
GdipCloneBrush
GdipCloneCustomLineCap
GdipCloneFont
GdipCloneFontFamily
GdipCloneImage
GdipCloneImageAttributes
GdipCloneMatrix
GdipClonePath
GdipClonePen
GdipCloneRegion
GdipCloneStringFormat
GdipClosePathFigure
GdipClosePathFigures
GdipCombineRegionPath
GdipCombineRegionRect
GdipCombineRegionRectI
GdipCombineRegionRegion
GdipComment
GdipCreateAdjustableArrowCap
GdipCreateBitmapFromDirectDrawSurface
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateCachedBitmap
GdipCreateCustomLineCap
GdipCreateFont
GdipCreateFontFamilyFromName
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCreateFontFromLogfontW
GdipCreateFromHDC
GdipCreateFromHDC2
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreateHalftonePalette
GdipCreateHatchBrush
GdipCreateImageAttributes
GdipCreateLineBrush
GdipCreateLineBrushFromRect
GdipCreateLineBrushFromRectI
GdipCreateLineBrushFromRectWithAngle
GdipCreateLineBrushFromRectWithAngleI
GdipCreateLineBrushI
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCreateMatrix3I
GdipCreateMetafileFromEmf
GdipCreateMetafileFromFile
GdipCreateMetafileFromStream
GdipCreateMetafileFromWmf
GdipCreateMetafileFromWmfFile
GdipCreatePath
GdipCreatePath2
GdipCreatePath2I
GdipCreatePathGradient
GdipCreatePathGradientFromPath
GdipCreatePathGradientI
GdipCreatePathIter
GdipCreatePen1
GdipCreatePen2
GdipCreateRegion
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionRgnData
GdipCreateSolidFill
GdipCreateStreamOnFile
GdipCreateStringFormat
GdipCreateTexture
GdipCreateTexture2
GdipCreateTexture2I
GdipCreateTextureIA
GdipCreateTextureIAI
GdipDeleteBrush
GdipDeleteCachedBitmap
GdipDeleteCustomLineCap
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteMatrix
GdipDeletePath
GdipDeletePathIter
GdipDeletePen
GdipDeletePrivateFontCollection
GdipDeleteRegion
GdipDeleteStringFormat
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawArc
GdipDrawArcI
GdipDrawBezier
GdipDrawBezierI
GdipDrawBeziers
GdipDrawBeziersI
GdipDrawCachedBitmap
GdipDrawClosedCurve
GdipDrawClosedCurve2
GdipDrawClosedCurve2I
GdipDrawClosedCurveI
GdipDrawCurve
GdipDrawCurve2
GdipDrawCurve2I
GdipDrawCurve3
GdipDrawCurve3I
GdipDrawCurveI
GdipDrawDriverString
GdipDrawEllipse
GdipDrawEllipseI
GdipDrawImage
GdipDrawImageI
GdipDrawImagePointRect
GdipDrawImagePointRectI
GdipDrawImagePoints
GdipDrawImagePointsI
GdipDrawImagePointsRect
GdipDrawImagePointsRectI
GdipDrawImageRect
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipDrawLine
GdipDrawLineI
GdipDrawLines
GdipDrawLinesI
GdipDrawPath
GdipDrawPie
GdipDrawPieI
GdipDrawPolygon
GdipDrawPolygonI
GdipDrawRectangle
GdipDrawRectangleI
GdipDrawRectangles
GdipDrawRectanglesI
GdipDrawString
GdipEmfToWmfBits
GdipEndContainer
GdipEnumerateMetafileDestPoint
GdipEnumerateMetafileDestPointI
GdipEnumerateMetafileDestPoints
GdipEnumerateMetafileDestPointsI
GdipEnumerateMetafileDestRect
GdipEnumerateMetafileDestRectI
GdipEnumerateMetafileSrcRectDestPoint
GdipEnumerateMetafileSrcRectDestPointI
GdipEnumerateMetafileSrcRectDestPoints
GdipEnumerateMetafileSrcRectDestPointsI
GdipEnumerateMetafileSrcRectDestRect
GdipEnumerateMetafileSrcRectDestRectI
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillClosedCurve2I
GdipFillClosedCurveI
GdipFillEllipse
GdipFillEllipseI
GdipFillPath
GdipFillPie
GdipFillPieI
GdipFillPolygon
GdipFillPolygon2
GdipFillPolygon2I
GdipFillPolygonI
GdipFillRectangle
GdipFillRectangleI
GdipFillRectangles
GdipFillRectanglesI
GdipFillRegion
GdipFlattenPath
GdipFlush
GdipFree
GdipGetAdjustableArrowCapFillState
GdipGetAdjustableArrowCapHeight
GdipGetAdjustableArrowCapMiddleInset
GdipGetAdjustableArrowCapWidth
GdipGetAllPropertyItems
GdipGetBrushType
GdipGetCellAscent
GdipGetCellDescent
GdipGetClip
GdipGetClipBounds
GdipGetClipBoundsI
GdipGetCompositingMode
GdipGetCompositingQuality
GdipGetCustomLineCapBaseCap
GdipGetCustomLineCapBaseInset
GdipGetCustomLineCapStrokeCaps
GdipGetCustomLineCapStrokeJoin
GdipGetCustomLineCapType
GdipGetCustomLineCapWidthScale
GdipGetDC
GdipGetDpiX
GdipGetDpiY
GdipGetEmHeight
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipGetFamily
GdipGetFamilyName
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFontUnit
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetHatchBackgroundColor
GdipGetHatchForegroundColor
GdipGetHatchStyle
GdipGetHemfFromMetafile
GdipGetImageAttributesAdjustedPalette
GdipGetImageBounds
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageFlags
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageThumbnail
GdipGetImageType
GdipGetImageVerticalResolution
GdipGetImageWidth
GdipGetInterpolationMode
GdipGetLineBlend
GdipGetLineBlendCount
GdipGetLineColors
GdipGetLineGammaCorrection
GdipGetLinePresetBlend
GdipGetLinePresetBlendCount
GdipGetLineRect
GdipGetLineRectI
GdipGetLineSpacing
GdipGetLineTransform
GdipGetLineWrapMode
GdipGetLogFontA
GdipGetLogFontW
GdipGetMatrixElements
GdipGetMetafileDownLevelRasterizationLimit
GdipGetMetafileHeaderFromEmf
GdipGetMetafileHeaderFromFile
GdipGetMetafileHeaderFromMetafile
GdipGetMetafileHeaderFromStream
GdipGetMetafileHeaderFromWmf
GdipGetNearestColor
GdipGetPageScale
GdipGetPageUnit
GdipGetPathData
GdipGetPathFillMode
GdipGetPathGradientBlend
GdipGetPathGradientBlendCount
GdipGetPathGradientCenterColor
GdipGetPathGradientCenterPoint
GdipGetPathGradientCenterPointI
GdipGetPathGradientFocusScales
GdipGetPathGradientGammaCorrection
GdipGetPathGradientPath
GdipGetPathGradientPointCount
GdipGetPathGradientPresetBlend
GdipGetPathGradientPresetBlendCount
GdipGetPathGradientRect
GdipGetPathGradientRectI
GdipGetPathGradientSurroundColorCount
GdipGetPathGradientSurroundColorsWithCount
GdipGetPathGradientTransform
GdipGetPathGradientWrapMode
GdipGetPathLastPoint
GdipGetPathPoints
GdipGetPathPointsI
GdipGetPathTypes
GdipGetPathWorldBounds
GdipGetPathWorldBoundsI
GdipGetPenBrushFill
GdipGetPenColor
GdipGetPenCompoundArray
GdipGetPenCompoundCount
GdipGetPenCustomEndCap
GdipGetPenCustomStartCap
GdipGetPenDashArray
GdipGetPenDashCap197819
GdipGetPenDashCount
GdipGetPenDashOffset
GdipGetPenDashStyle
GdipGetPenEndCap
GdipGetPenFillType
GdipGetPenLineJoin
GdipGetPenMiterLimit
GdipGetPenMode
GdipGetPenStartCap
GdipGetPenTransform
GdipGetPenUnit
GdipGetPenWidth
GdipGetPixelOffsetMode
GdipGetPointCount
GdipGetPropertyCount
GdipGetPropertyIdList
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetPropertySize
GdipGetRegionBounds
GdipGetRegionBoundsI
GdipGetRegionData
GdipGetRegionDataSize
GdipGetRegionHRgn
GdipGetRegionScans
GdipGetRegionScansCount
GdipGetRegionScansI
GdipGetRenderingOrigin
GdipGetSmoothingMode
GdipGetSolidFillColor
GdipGetStringFormatAlign
GdipGetStringFormatDigitSubstitution
GdipGetStringFormatFlags
GdipGetStringFormatHotkeyPrefix
GdipGetStringFormatLineAlign
GdipGetStringFormatMeasurableCharacterRangeCount
GdipGetStringFormatTabStopCount
GdipGetStringFormatTabStops
GdipGetStringFormatTrimming
GdipGetTextContrast
GdipGetTextRenderingHint
GdipGetTextureImage
GdipGetTextureTransform
GdipGetTextureWrapMode
GdipGetVisibleClipBounds
GdipGetVisibleClipBoundsI
GdipGetWorldTransform
GdipGraphicsClear
GdipImageForceValidation
GdipImageGetFrameCount
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageRotateFlip
GdipImageSelectActiveFrame
GdipInvertMatrix
GdipIsClipEmpty
GdipIsEmptyRegion
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsMatrixEqual
GdipIsMatrixIdentity
GdipIsMatrixInvertible
GdipIsOutlineVisiblePathPoint
GdipIsOutlineVisiblePathPointI
GdipIsStyleAvailable
GdipIsVisibleClipEmpty
GdipIsVisiblePathPoint
GdipIsVisiblePathPointI
GdipIsVisiblePoint
GdipIsVisiblePointI
GdipIsVisibleRect
GdipIsVisibleRectI
GdipIsVisibleRegionPoint
GdipIsVisibleRegionPointI
GdipIsVisibleRegionRect
GdipIsVisibleRegionRectI
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipMeasureCharacterRanges
GdipMeasureDriverString
GdipMeasureString
GdipMultiplyLineTransform
GdipMultiplyMatrix
GdipMultiplyPathGradientTransform
GdipMultiplyPenTransform
GdipMultiplyTextureTransform
GdipMultiplyWorldTransform
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPathIterCopyData
GdipPathIterEnumerate
GdipPathIterGetCount
GdipPathIterGetSubpathCount
GdipPathIterHasCurve
GdipPathIterIsValid
GdipPathIterNextMarker
GdipPathIterNextMarkerPath
GdipPathIterNextPathType
GdipPathIterNextSubpath
GdipPathIterNextSubpathPath
GdipPathIterRewind
GdipPlayMetafileRecord
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipRecordMetafile
GdipRecordMetafileFileName
GdipRecordMetafileFileNameI
GdipRecordMetafileI
GdipRecordMetafileStream
GdipRecordMetafileStreamI
GdipReleaseDC
GdipRemovePropertyItem
GdipResetClip
GdipResetImageAttributes
GdipResetLineTransform
GdipResetPageTransform
GdipResetPath
GdipResetPathGradientTransform
GdipResetPenTransform
GdipResetTextureTransform
GdipResetWorldTransform
GdipRestoreGraphics
GdipReversePath
GdipRotateLineTransform
GdipRotateMatrix
GdipRotatePathGradientTransform
GdipRotatePenTransform
GdipRotateTextureTransform
GdipRotateWorldTransform
GdipSaveAdd
GdipSaveAddImage
GdipSaveGraphics
GdipSaveImageToFile
GdipSaveImageToStream
GdipScaleLineTransform
GdipScaleMatrix
GdipScalePathGradientTransform
GdipScalePenTransform
GdipScaleTextureTransform
GdipScaleWorldTransform
GdipSetAdjustableArrowCapFillState
GdipSetAdjustableArrowCapHeight
GdipSetAdjustableArrowCapMiddleInset
GdipSetAdjustableArrowCapWidth
GdipSetClipGraphics
GdipSetClipHrgn
GdipSetClipPath
GdipSetClipRect
GdipSetClipRectI
GdipSetClipRegion
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetCustomLineCapBaseCap
GdipSetCustomLineCapBaseInset
GdipSetCustomLineCapStrokeCaps
GdipSetCustomLineCapStrokeJoin

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/help.chm
.chm
Launch Manager_Dritek_5.0.3_Win7x86/runxx.exe
.exe windows:4 windows x86 arch:x86

3c7317e5a1e0d6111c70ea72c51a4d2a

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/10/2006, 00:00

Not After

16/10/2009, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

71:b9:85:84:a4:1b:83:ee:ae:90:f6:32:98:53:0a:fd:15:87:65:4d
Signer

Actual PE Digest

71:b9:85:84:a4:1b:83:ee:ae:90:f6:32:98:53:0a:fd:15:87:65:4d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\CWork60\Utility\runxx.exe.svn\Win32\Release\runxx.pdb

Imports

kernel32

CloseHandle
CreateProcessW
GetStartupInfoW
LocalFree
InitializeCriticalSection
LoadLibraryA
RaiseException
RtlUnwind
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

shell32

ShellExecuteExW
CommandLineToArgvW

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Launch Manager_Dritek_5.0.3_Win7x86/x64Commander.exe
.exe windows:4 windows x64 arch:x64

eed21ee37dddea2f022ecd4b80da009f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/10/2006, 00:00

Not After

16/10/2009, 23:59

Subject

CN=Dritek System Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Dritek System Inc.,L=Taipei City,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f3:15:ec:cb:7d:64:4f:af:ce:c2:f7:04:49:57:1b:1d:0a:4e:03:57
Signer

Actual PE Digest

f3:15:ec:cb:7d:64:4f:af:ce:c2:f7:04:49:57:1b:1d:0a:4e:03:57

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

d:\CWork60\Utility\runxx.exe.svn\x64\Release\x64Commander.pdb

Imports

kernel32

CloseHandle
CreateProcessW
GetStartupInfoW
LocalFree
InitializeCriticalSection
LoadLibraryA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
GetLastError
RtlVirtualUnwind
GetModuleHandleA
GetProcAddress
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapReAlloc

shell32

ShellExecuteExW
CommandLineToArgvW

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d90ac94ff22c174e8c4ff0db5b137461

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9cCertificate

Extended Key Usages

Key Usages

61:0c:12:06:00:00:00:00:00:1bCertificate

Key Usages

d5:4a:1d:4f:25:3b:df:1a:4a:a2:e9:8e:67:8d:e0:9b:c4:63:25:08Signer

Headers

File Characteristics

PDB Paths

Imports

winmm

kernel32

user32

Exports

Exports

Sections

.text Size: 95KB - Virtual size: 94KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

15d1a8ea27c634088e401db37908d9cc

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

61:0c:12:06:00:00:00:00:00:1bCertificate

Key Usages

db:56:77:6f:1a:bd:20:87:4b:a6:c9:5b:68:54:86:44:66:67:63:17Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

setupapi

kernel32

user32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 1024B - Virtual size: 944B

.reloc Size: 5KB - Virtual size: 4KB

eeff1b59d6cb6eeb8133f38a816aecfd

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92Certificate

Extended Key Usages

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

d5:4a:1d:4f:25:3b:df:1a:4a:a2:e9:8e:67:8d:e0:9b:c4:63:25:08
Signer

.text
Size: 95KB - Virtual size: 94KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

db:56:77:6f:1a:bd:20:87:4b:a6:c9:5b:68:54:86:44:66:67:63:17
Signer

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 944B

.reloc
Size: 5KB - Virtual size: 4KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

42:48:19:3a:f9:f9:6a:7d:c6:33:1a:c0:3a:a1:c6:35:15:c4:d5:26
Signer

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 2KB - Virtual size: 2KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

2f:17:4e:52:60:b0:e8:b1:34:3c:09:06:03:d5:a2:9c
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

3b:7d:1d:71:cc:df:c7:d7:1f:6e:9b:ec:3b:73:d1:b6:23:8b:26:5f
Signer

.text
Size: 90KB - Virtual size: 89KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 960B

.reloc
Size: 4KB - Virtual size: 4KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

58:41:07:27:95:e9:ef:2a:6e:fc:e6:68:4f:81:05:92
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate