534d1e3d7e1b3da44c4a24e67d2467ed56ac5644d8f92288b19ac4be7853c5f3[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

534d1e3d7e1b3da44c4a24e67d2467ed56ac5644d8f92288b19ac4be7853c5f3.zip
Size

3.4MB
MD5

a3012ac7efc1a6cca38bc8deb861696e
SHA1

bedf0e6da6b6abaab431bb0a418922039f817a3e
SHA256

534d1e3d7e1b3da44c4a24e67d2467ed56ac5644d8f92288b19ac4be7853c5f3
SHA512

d9c4eacd008f90e4194c09c019369a3b902bb3853554609a8e4a346cd2788241ea414f53c1632a9701ec3c639adea08c451be914c305ad0ff0976b7d5e9a161f
SSDEEP

98304:+7itWB5W5aqeRE+uw1rTb6zfSr5remX4xXRs6vlG:+7qWBCaVCwazarUoertG

Score

1^/10

Malware Config

Signatures

Files

534d1e3d7e1b3da44c4a24e67d2467ed56ac5644d8f92288b19ac4be7853c5f3.zip
.zip
001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/001-NOTIFICACION JUDICIAL.exe
.exe windows:5 windows x86 arch:x86

8e149a2ff051703c4fba168a5a92f52d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/10/2013, 00:00

Not After

15/11/2016, 23:59

Subject

CN=VMware\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7c:20:e0:ef:05:b5:a0:8e:ae:ca:61:f7:2c:29:ed:08:8c:5e:85:5d
Signer

Actual PE Digest

7c:20:e0:ef:05:b5:a0:8e:ae:ca:61:f7:2c:29:ed:08:8c:5e:85:5d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\build\ob\bora-4448491\bora-vmsoft\build\release\tools-for-windows\Win32\services\vmtoolsd\vmtoolsd.pdb

Imports

advapi32

FreeSid
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
AllocateAndInitializeSid
CloseServiceHandle
OpenServiceW
OpenSCManagerW
DeleteService
ReportEventW
RegisterEventSourceW
SetServiceStatus
DeregisterEventSource
RegCloseKey
RegSetValueExW
RegCreateKeyW
CreateServiceW
RegisterServiceCtrlHandlerExW
StartServiceCtrlDispatcherW

ole32

CoUninitialize

user32

UnregisterClassW
UnregisterDeviceNotification
RegisterDeviceNotificationW
MessageBoxW
RegisterClassW
GetDesktopWindow
CreateWindowExW
SetWindowLongW
GetWindowLongW
DefWindowProcW
PeekMessageW
TranslateMessage
DispatchMessageW
DestroyWindow

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

msvcr90

_cexit
_exit
_XcptFilter
__winitenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_purecall
wprintf
_wcsicmp
malloc
free
memset
setlocale
??2@YAPAXI@Z
??3@YAXPAX@Z
exit
__CxxFrameHandler3
__wgetmainargs
_amsg_exit

intl

libintl_gettext

glib-2.0

g_strdup
g_str_has_suffix
g_dir_read_name_utf8
g_ptr_array_new
g_dir_open_utf8
g_malloc0
g_strdup_printf
g_ptr_array_remove_index
g_array_free
g_thread_join
g_queue_remove
g_thread_functions_for_glib_use
g_idle_add_full
g_ptr_array_remove
g_free
g_thread_pool_push
g_queue_push_head
g_queue_delete_link
g_queue_find_custom
g_thread_create_full
g_queue_new
g_thread_pool_set_max_unused_threads
g_thread_pool_set_max_idle_time
g_thread_pool_new
g_malloc
g_queue_free
g_ptr_array_add
g_print
g_printerr
g_win32_error_message
g_option_context_free
g_option_context_parse
g_option_group_set_error_hook
g_option_context_get_main_group
g_option_context_add_main_entries
g_option_context_set_summary
g_option_context_new
g_key_file_get_boolean
g_ptr_array_free
g_array_append_vals
g_queue_pop_tail
g_log
g_clear_error
g_main_loop_run
g_source_remove
g_timeout_add
g_threads_got_initialized
g_main_context_default
g_main_loop_new
g_main_context_unref
g_key_file_new
g_key_file_free
g_dir_close
g_ptr_array_sort
g_thread_pool_free
g_file_test_utf8
g_idle_add
g_source_set_callback
g_main_loop_get_context
g_source_attach
g_source_unref
g_str_has_prefix
g_main_loop_is_running
g_main_loop_quit
g_logv
g_key_file_get_integer
g_main_loop_unref
g_array_new

gmodule-2.0

g_module_symbol
g_module_open_utf8
g_module_error
g_module_make_resident
g_module_close

gobject-2.0

g_signal_emit_by_name
g_object_unref
g_object_set
g_object_new
g_type_init
g_signal_connect_data
g_signal_lookup
g_signal_parse_name
g_value_set_boolean
g_value_get_boolean
g_value_set_pointer
g_value_get_pointer
g_value_set_uint
g_value_get_uint
g_object_notify
g_type_check_instance_cast
g_type_register_static
g_type_check_class_cast
g_cclosure_marshal_VOID__POINTER
g_signal_new
g_type_class_peek_parent
g_object_class_install_property
g_param_spec_pointer
g_value_peek_pointer

gthread-2.0

g_thread_init

vmtools

RpcChannel_New
GuestApp_GetConfPath
StrUtil_GetNextToken
RpcChannel_SetRetVals
RpcChannel_Send
Str_SafeAsprintf
RpcOut_sendOne
VMTools_GetString
GuestApp_GetInstallPath
RpcChannel_RegisterCallback
RpcChannel_Start
VMTools_SuspendLogIO
VMTools_ResumeLogIO
VMTools_LoadConfig
VMTools_NewHandleSource
Unicode_InitW
VMTools_ConfigLogging
VMTools_BindTextDomain
VMTools_AttachConsole
CodeSet_Utf8ToUtf16le
RpcChannel_Stop
RpcChannel_Destroy
Str_SafeVaswprintf
Str_Aswprintf
vm_free
Hostinfo_GetOSType
RpcChannel_Setup
Panic
Str_Vaswprintf
Str_Snwprintf
VmCheck_IsVirtualWorld
Str_Wcscpy
Str_Vasprintf

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
LoadLibraryW
GetProcAddress
FreeLibrary
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameW
OpenEventW
WaitForSingleObject
GetLastError
GetModuleHandleW
CreateEventW
SetConsoleCtrlHandler
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
LocalFree
SetErrorMode
SetEvent
CloseHandle

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/WINRAR/7z2301-arm64.exe
001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/glib-2.0.dll
.dll windows:5 windows x86 arch:x86

9bc40fa39ece484543c8e07744cdc3ca

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/10/2013, 00:00

Not After

15/11/2016, 23:59

Subject

CN=VMware\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a2:ea:f7:86:c4:8f:92:e5:22:db:09:1d:52:e6:71:df:10:61:29:fd
Signer

Actual PE Digest

a2:ea:f7:86:c4:8f:92:e5:22:db:09:1d:52:e6:71:df:10:61:29:fd

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

intl

libintl_gettext
libintl_sprintf
libintl_bindtextdomain
libintl_bind_textdomain_codeset
libintl_fprintf
libintl_textdomain
libintl_dgettext
libintl_dngettext

ws2_32

WSAEnumNetworkEvents
send
WSACloseEvent
WSASetEvent
ioctlsocket
WSAGetLastError
closesocket
WSAEventSelect
recv
WSACreateEvent
getsockopt

kernel32

LocalFree
GetVersion
GetShortPathNameW
FormatMessageW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedExchange
GetModuleHandleW
GetLocaleInfoA
ExpandEnvironmentStringsW
GetWindowsDirectoryW
FreeEnvironmentStringsW
GetModuleHandleA
InterlockedCompareExchange
InterlockedExchangeAdd
IsDebuggerPresent
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetLastError
IsDBCSLeadByteEx
GetProcAddress
IsValidCodePage
LoadLibraryA
GetCPInfoExA
GetDateFormatW
GetLocaleInfoW
GetTimeFormatW
GetTimeZoneInformation
GetThreadLocale
GetFileAttributesW
PeekNamedPipe
WaitForSingleObject
SetEvent
WriteFile
InitializeCriticalSection
ReadConsoleInputA
CreateEventA
LeaveCriticalSection
ReadFile
EnterCriticalSection
ResetEvent
PeekConsoleInputA
DeleteCriticalSection
CloseHandle
GetSystemTimeAsFileTime
GetExitCodeProcess
CreateSemaphoreA
ReleaseSemaphore
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
SleepEx
WaitForMultipleObjectsEx
GetSystemInfo
GetCurrentProcess
GetStdHandle
GetConsoleCursorInfo
DuplicateHandle
MoveFileExW
Sleep
GetComputerNameA
GetEnvironmentVariableW
VirtualQuery
SetEnvironmentVariableW
GetEnvironmentStringsW
GetSystemDirectoryW
GetModuleFileNameW
GetCurrentDirectoryW

user32

PostMessageA
MessageBoxA
MsgWaitForMultipleObjectsEx
PeekMessageA
IsWindow

advapi32

GetUserNameW

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation

ole32

CoTaskMemFree

msvcr90

_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
_close
_open
_fdopen
_read
_lseek
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_write
free
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
memcpy
memmove
qsort
memset
abort
_exit
strlen
strchr
atoi
strcmp
atol
_time64
strncmp
strncpy
_stricmp
_strnicmp
_getpid
calloc
strcpy
_errno
strstr
wcslen
setlocale
_localtime64
wcscat
malloc
_wfindfirst64i32
_findclose
_wfindnext64i32
_wfullpath
wcscmp
wcscpy
feof
memcmp
fflush
fread
ferror
fwrite
strrchr
fclose
strcspn
_fstat64i32
_beginthreadex
_get_osfhandle
getenv
_kbhit
strtol
strtoul
realloc
fputs
__iob_func
strcat
exit
strerror
fprintf
vfprintf
_wspawnvp
_pipe
_wspawnve
_wspawnv
_open_osfhandle
_wspawnvpe
_wopen
_wchmod
_wmkdir
_wrmdir
_wfopen
_wstat64i32
_wremove
_wcreat
_wchdir
_waccess
_wunlink
_wutime64
_wfreopen
strtod
localeconv
tolower
isdigit
isupper
toupper
islower
strpbrk
printf
_mktime64
_gmtime64
strcoll
strxfrm
bsearch
wcschr
_wputenv
_chsize
sprintf
___mb_cur_max_func

Exports

Exports

_g_debug_flags
_g_debug_initialized
g_access
g_allocator_free
g_allocator_new
g_array_append_vals
g_array_free
g_array_get_element_size
g_array_insert_vals
g_array_new
g_array_prepend_vals
g_array_ref
g_array_remove_index
g_array_remove_index_fast
g_array_remove_range
g_array_set_size
g_array_sized_new
g_array_sort
g_array_sort_with_data
g_array_unref
g_ascii_digit_value
g_ascii_dtostr
g_ascii_formatd
g_ascii_strcasecmp
g_ascii_strdown
g_ascii_strncasecmp
g_ascii_strtod
g_ascii_strtoll
g_ascii_strtoull
g_ascii_strup
g_ascii_table
g_ascii_tolower
g_ascii_toupper
g_ascii_xdigit_value
g_assert_warning
g_assertion_message
g_assertion_message_cmpnum
g_assertion_message_cmpstr
g_assertion_message_error
g_assertion_message_expr
g_async_queue_length
g_async_queue_length_unlocked
g_async_queue_lock
g_async_queue_new
g_async_queue_new_full
g_async_queue_pop
g_async_queue_pop_unlocked
g_async_queue_push
g_async_queue_push_sorted
g_async_queue_push_sorted_unlocked
g_async_queue_push_unlocked
g_async_queue_ref
g_async_queue_ref_unlocked
g_async_queue_sort
g_async_queue_sort_unlocked
g_async_queue_timed_pop
g_async_queue_timed_pop_unlocked
g_async_queue_try_pop
g_async_queue_try_pop_unlocked
g_async_queue_unlock
g_async_queue_unref
g_async_queue_unref_and_unlock
g_atexit
g_atomic_int_add
g_atomic_int_compare_and_exchange
g_atomic_int_exchange_and_add
g_atomic_int_get
g_atomic_int_set
g_atomic_pointer_compare_and_exchange
g_atomic_pointer_get
g_atomic_pointer_set
g_base64_decode
g_base64_decode_inplace
g_base64_decode_step
g_base64_encode
g_base64_encode_close
g_base64_encode_step
g_basename
g_bit_nth_lsf
g_bit_nth_msf
g_bit_storage
g_blow_chunks
g_bookmark_file_add_application
g_bookmark_file_add_group
g_bookmark_file_error_quark
g_bookmark_file_free
g_bookmark_file_get_added
g_bookmark_file_get_app_info
g_bookmark_file_get_applications
g_bookmark_file_get_description
g_bookmark_file_get_groups
g_bookmark_file_get_icon
g_bookmark_file_get_is_private
g_bookmark_file_get_mime_type
g_bookmark_file_get_modified
g_bookmark_file_get_size
g_bookmark_file_get_title
g_bookmark_file_get_uris
g_bookmark_file_get_visited
g_bookmark_file_has_application
g_bookmark_file_has_group
g_bookmark_file_has_item
g_bookmark_file_load_from_data
g_bookmark_file_load_from_data_dirs
g_bookmark_file_load_from_file
g_bookmark_file_move_item
g_bookmark_file_new
g_bookmark_file_remove_application
g_bookmark_file_remove_group
g_bookmark_file_remove_item
g_bookmark_file_set_added
g_bookmark_file_set_app_info
g_bookmark_file_set_description
g_bookmark_file_set_groups
g_bookmark_file_set_icon
g_bookmark_file_set_is_private
g_bookmark_file_set_mime_type
g_bookmark_file_set_modified
g_bookmark_file_set_title
g_bookmark_file_set_visited
g_bookmark_file_to_data
g_bookmark_file_to_file
g_build_filename
g_build_filenamev
g_build_path
g_build_pathv
g_byte_array_append
g_byte_array_free
g_byte_array_new
g_byte_array_prepend
g_byte_array_ref
g_byte_array_remove_index
g_byte_array_remove_index_fast
g_byte_array_remove_range
g_byte_array_set_size
g_byte_array_sized_new
g_byte_array_sort
g_byte_array_sort_with_data
g_byte_array_unref
g_cache_destroy
g_cache_insert
g_cache_key_foreach
g_cache_new
g_cache_remove
g_cache_value_foreach
g_chdir
g_checksum_copy
g_checksum_free
g_checksum_get_digest
g_checksum_get_string
g_checksum_new
g_checksum_reset
g_checksum_type_get_length
g_checksum_update
g_child_watch_add
g_child_watch_add_full
g_child_watch_funcs
g_child_watch_source_new
g_chmod
g_clear_error
g_completion_add_items
g_completion_clear_items
g_completion_complete
g_completion_complete_utf8
g_completion_free
g_completion_new
g_completion_remove_items
g_completion_set_compare
g_compute_checksum_for_data
g_compute_checksum_for_string
g_convert
g_convert_error_quark
g_convert_with_fallback
g_convert_with_iconv
g_creat
g_datalist_clear
g_datalist_foreach
g_datalist_get_flags
g_datalist_id_get_data
g_datalist_id_remove_no_notify
g_datalist_id_set_data_full
g_datalist_init
g_datalist_set_flags
g_datalist_unset_flags
g_dataset_destroy
g_dataset_foreach
g_dataset_id_get_data
g_dataset_id_remove_no_notify
g_dataset_id_set_data_full
g_date_add_days
g_date_add_months
g_date_add_years
g_date_clamp
g_date_clear
g_date_compare
g_date_days_between
g_date_free
g_date_get_day
g_date_get_day_of_year
g_date_get_days_in_month
g_date_get_iso8601_week_of_year
g_date_get_julian
g_date_get_monday_week_of_year
g_date_get_monday_weeks_in_year
g_date_get_month
g_date_get_sunday_week_of_year
g_date_get_sunday_weeks_in_year
g_date_get_weekday
g_date_get_year
g_date_is_first_of_month
g_date_is_last_of_month
g_date_is_leap_year
g_date_new
g_date_new_dmy
g_date_new_julian
g_date_order
g_date_set_day
g_date_set_dmy
g_date_set_julian
g_date_set_month
g_date_set_parse
g_date_set_time
g_date_set_time_t
g_date_set_time_val
g_date_set_year
g_date_strftime
g_date_subtract_days
g_date_subtract_months
g_date_subtract_years
g_date_to_struct_tm
g_date_valid
g_date_valid_day
g_date_valid_dmy
g_date_valid_julian
g_date_valid_month
g_date_valid_weekday
g_date_valid_year
g_dgettext
g_dir_close
g_dir_open
g_dir_open_utf8
g_dir_read_name
g_dir_read_name_utf8
g_dir_rewind
g_direct_equal
g_direct_hash
g_dngettext
g_double_equal
g_double_hash
g_dpgettext
g_dpgettext2
g_error_copy
g_error_free
g_error_matches
g_error_new
g_error_new_literal
g_error_new_valist
g_file_error_from_errno
g_file_error_quark
g_file_get_contents
g_file_get_contents_utf8
g_file_open_tmp
g_file_open_tmp_utf8
g_file_read_link
g_file_set_contents
g_file_test
g_file_test_utf8
g_filename_display_basename
g_filename_display_name
g_filename_from_uri
g_filename_from_uri_utf8
g_filename_from_utf8
g_filename_from_utf8_utf8
g_filename_to_uri
g_filename_to_uri_utf8
g_filename_to_utf8
g_filename_to_utf8_utf8
g_find_program_in_path
g_find_program_in_path_utf8
g_fopen
g_format_size_for_display
g_fprintf
g_free
g_freopen
g_get_application_name
g_get_charset
g_get_codeset
g_get_current_dir
g_get_current_dir_utf8
g_get_current_time
g_get_filename_charsets
g_get_home_dir
g_get_home_dir_utf8
g_get_host_name
g_get_language_names
g_get_prgname
g_get_real_name
g_get_real_name_utf8
g_get_system_config_dirs
g_get_system_data_dirs
g_get_tmp_dir
g_get_tmp_dir_utf8
g_get_user_cache_dir
g_get_user_config_dir
g_get_user_data_dir
g_get_user_name
g_get_user_name_utf8
g_get_user_special_dir
g_getenv
g_getenv_utf8
g_hash_table_destroy
g_hash_table_find
g_hash_table_foreach
g_hash_table_foreach_remove
g_hash_table_foreach_steal
g_hash_table_get_keys
g_hash_table_get_values
g_hash_table_insert
g_hash_table_iter_get_hash_table
g_hash_table_iter_init
g_hash_table_iter_next
g_hash_table_iter_remove
g_hash_table_iter_steal
g_hash_table_lookup
g_hash_table_lookup_extended
g_hash_table_new
g_hash_table_new_full
g_hash_table_ref
g_hash_table_remove
g_hash_table_remove_all
g_hash_table_replace
g_hash_table_size
g_hash_table_steal
g_hash_table_steal_all
g_hash_table_unref
g_hook_alloc
g_hook_compare_ids
g_hook_destroy
g_hook_destroy_link
g_hook_find
g_hook_find_data
g_hook_find_func
g_hook_find_func_data
g_hook_first_valid
g_hook_free
g_hook_get
g_hook_insert_before
g_hook_insert_sorted
g_hook_list_clear
g_hook_list_init
g_hook_list_invoke
g_hook_list_invoke_check
g_hook_list_marshal
g_hook_list_marshal_check
g_hook_next_valid
g_hook_prepend
g_hook_ref
g_hook_unref
g_hostname_is_ascii_encoded
g_hostname_is_ip_address
g_hostname_is_non_ascii
g_hostname_to_ascii
g_hostname_to_unicode
g_iconv
g_iconv_close
g_iconv_open
g_idle_add
g_idle_add_full
g_idle_funcs
g_idle_remove_by_data
g_idle_source_new
g_int64_equal
g_int64_hash
g_int_equal
g_int_hash
g_intern_static_string
g_intern_string
g_io_add_watch
g_io_add_watch_full
g_io_channel_close
g_io_channel_error_from_errno
g_io_channel_error_quark
g_io_channel_flush
g_io_channel_get_buffer_condition
g_io_channel_get_buffer_size
g_io_channel_get_buffered
g_io_channel_get_close_on_unref
g_io_channel_get_encoding
g_io_channel_get_flags
g_io_channel_get_line_term
g_io_channel_init
g_io_channel_new_file
g_io_channel_new_file_utf8
g_io_channel_read
g_io_channel_read_chars
g_io_channel_read_line
g_io_channel_read_line_string
g_io_channel_read_to_end
g_io_channel_read_unichar
g_io_channel_ref
g_io_channel_seek
g_io_channel_seek_position
g_io_channel_set_buffer_size
g_io_channel_set_buffered
g_io_channel_set_close_on_unref
g_io_channel_set_encoding
g_io_channel_set_flags
g_io_channel_set_line_term
g_io_channel_shutdown
g_io_channel_unix_get_fd
g_io_channel_unix_new
g_io_channel_unref
g_io_channel_win32_get_fd
g_io_channel_win32_make_pollfd
g_io_channel_win32_new_fd
g_io_channel_win32_new_messages
g_io_channel_win32_new_socket
g_io_channel_win32_new_stream_socket
g_io_channel_win32_poll
g_io_channel_win32_set_debug
g_io_channel_write
g_io_channel_write_chars
g_io_channel_write_unichar
g_io_create_watch
g_io_watch_funcs
g_key_file_error_quark
g_key_file_free
g_key_file_get_boolean
g_key_file_get_boolean_list
g_key_file_get_comment
g_key_file_get_double
g_key_file_get_double_list
g_key_file_get_groups
g_key_file_get_integer
g_key_file_get_integer_list
g_key_file_get_keys
g_key_file_get_locale_string
g_key_file_get_locale_string_list
g_key_file_get_start_group
g_key_file_get_string
g_key_file_get_string_list
g_key_file_get_value
g_key_file_has_group
g_key_file_has_key
g_key_file_load_from_data
g_key_file_load_from_data_dirs
g_key_file_load_from_dirs
g_key_file_load_from_file
g_key_file_new
g_key_file_remove_comment
g_key_file_remove_group
g_key_file_remove_key
g_key_file_set_boolean
g_key_file_set_boolean_list
g_key_file_set_comment
g_key_file_set_double
g_key_file_set_double_list
g_key_file_set_integer
g_key_file_set_integer_list
g_key_file_set_list_separator
g_key_file_set_locale_string
g_key_file_set_locale_string_list
g_key_file_set_string
g_key_file_set_string_list
g_key_file_set_value
g_key_file_to_data
g_list_alloc
g_list_append
g_list_concat
g_list_copy
g_list_delete_link
g_list_find
g_list_find_custom
g_list_first
g_list_foreach
g_list_free
g_list_free_1
g_list_index
g_list_insert
g_list_insert_before
g_list_insert_sorted
g_list_insert_sorted_with_data
g_list_last
g_list_length
g_list_nth
g_list_nth_data
g_list_nth_prev
g_list_pop_allocator
g_list_position
g_list_prepend
g_list_push_allocator
g_list_remove
g_list_remove_all
g_list_remove_link
g_list_reverse
g_list_sort
g_list_sort_with_data
g_listenv
g_locale_from_utf8
g_locale_to_utf8

Sections

.text
Size: 586KB - Virtual size: 585KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 173KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/gmodule-2.0.dll
.dll windows:5 windows x86 arch:x86

961e6d50deec0ca78bb33c98e62125f6

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/10/2013, 00:00

Not After

15/11/2016, 23:59

Subject

CN=VMware\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ca:63:0a:02:90:ba:30:2e:25:cb:59:bf:8a:00:43:9f:83:ce:1c:28
Signer

Actual PE Digest

ca:63:0a:02:90:ba:30:2e:25:cb:59:bf:8a:00:43:9f:83:ce:1c:28

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\toolchain\src\glib-2.22.4-3\glib-2.22.4\build\win32\vs8\Release\bin\gmodule-2.0.pdb

Imports

glib-2.0

g_locale_to_utf8
g_parse_debug_string
g_scanner_input_file
g_static_rec_mutex_lock
g_static_private_get
g_free
g_utf8_to_utf16
g_strdup_printf
g_scanner_new
g_locale_from_utf8
g_win32_error_message
g_static_private_set
g_filename_display_name
g_static_rec_mutex_unlock
g_open
g_scanner_eof
g_scanner_destroy
g_path_get_dirname
g_log
g_strdup_vprintf
g_strconcat
g_scanner_get_next_token
g_file_test_utf8
g_scanner_scope_add_symbol
g_getenv_utf8
g_strdup
g_malloc
g_ascii_strcasecmp

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetLastError
CloseHandle
LoadLibraryW
GetCurrentProcess
FreeLibrary

msvcr90

__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_crt_debugger_hook
__clean_type_info_names_internal
__dllonexit
_lock
_onexit
_except_handler4_common
_unlock
_close
strncmp
strlen
_errno
strcmp
strrchr
_encode_pointer
_malloc_crt
free

Exports

Exports

g_module_build_path
g_module_close
g_module_error
g_module_make_resident
g_module_name
g_module_name_utf8
g_module_open
g_module_open_utf8
g_module_supported
g_module_symbol

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/gobject-2.0.dll
.dll windows:5 windows x86 arch:x86

03b6752ccaa7cd8a35212e75b123b49e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/10/2013, 00:00

Not After

15/11/2016, 23:59

Subject

CN=VMware\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:d7:50:dd:ba:6d:62:62:10:44:04:cf:b0:0f:2d:37:5f:bb:e7:9b
Signer

Actual PE Digest

01:d7:50:dd:ba:6d:62:62:10:44:04:cf:b0:0f:2d:37:5f:bb:e7:9b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\toolchain\src\glib-2.22.4-3\glib-2.22.4\build\win32\vs8\Release\bin\gobject-2.0.pdb

Imports

glib-2.0

g_slist_find
g_datalist_id_remove_no_notify
g_nullify_pointer
g_atomic_pointer_compare_and_exchange
g_datalist_set_flags
g_datalist_unset_flags
g_atomic_int_exchange_and_add
g_quark_try_string
g_strconcat
g_once_init_leave
g_once_init_enter_impl
g_atomic_int_add
g_intern_string
g_strdup
g_hash_table_new
g_hash_table_insert
g_hash_table_remove
g_hash_table_lookup
g_hash_table_foreach
g_slist_sort
g_unichar_validate
g_direct_hash
g_hook_insert_before
g_hook_alloc
g_hook_list_init
g_hook_destroy
g_array_free
g_array_append_vals
g_assertion_message
g_array_new
g_memdup
g_strdelimit
g_hook_list_clear
g_slice_alloc
g_hook_next_valid
g_hook_destroy_link
g_hook_first_valid
g_io_channel_ref
g_io_channel_unref
g_idle_funcs
g_timeout_funcs
g_io_watch_funcs
g_source_set_callback_indirect
g_static_rw_lock_writer_unlock
g_static_rw_lock_writer_lock
g_static_rw_lock_reader_unlock
g_static_rw_lock_reader_lock
g_static_rec_mutex_unlock
g_static_rec_mutex_lock
g_direct_equal
g_parse_debug_string
g_getenv_utf8
g_qsort_with_data
g_string_append
g_string_new
g_strescape
g_slist_free_1
g_list_prepend
g_list_find
g_list_free_1
g_quark_from_string
g_datalist_clear
g_slice_free1
g_datalist_id_get_data
g_slice_alloc0
g_datalist_id_set_data_full
g_datalist_init
g_threads_got_initialized
g_static_mutex_get_mutex_impl
g_thread_functions_for_glib_use
g_slist_prepend
g_slist_remove
g_quark_from_static_string
g_slist_free
g_list_free
g_slist_copy
g_atomic_int_compare_and_exchange
g_realloc
g_strdup_printf
g_byte_array_unref
g_byte_array_ref
g_ptr_array_unref
g_ptr_array_ref
g_array_unref
g_hash_table_unref
g_array_ref
g_hash_table_ref
g_string_free
g_string_new_len
g_strfreev
g_strdupv
g_date_get_julian
g_date_new_julian
g_date_free
g_free
g_malloc0
g_log
g_malloc
g_intern_static_string
g_quark_to_string
g_assertion_message_expr

msvcr90

_except_handler4_common
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
qsort
exit
strlen
strcat
strncpy
strchr
memcmp
strncmp
strcmp
memmove
memcpy
memset
_onexit

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

g_array_get_type
g_boxed_copy
g_boxed_free
g_boxed_type_register_static
g_byte_array_get_type
g_cclosure_marshal_BOOLEAN__FLAGS
g_cclosure_marshal_STRING__OBJECT_POINTER
g_cclosure_marshal_VOID__BOOLEAN
g_cclosure_marshal_VOID__BOXED
g_cclosure_marshal_VOID__CHAR
g_cclosure_marshal_VOID__DOUBLE
g_cclosure_marshal_VOID__ENUM
g_cclosure_marshal_VOID__FLAGS
g_cclosure_marshal_VOID__FLOAT
g_cclosure_marshal_VOID__INT
g_cclosure_marshal_VOID__LONG
g_cclosure_marshal_VOID__OBJECT
g_cclosure_marshal_VOID__PARAM
g_cclosure_marshal_VOID__POINTER
g_cclosure_marshal_VOID__STRING
g_cclosure_marshal_VOID__UCHAR
g_cclosure_marshal_VOID__UINT
g_cclosure_marshal_VOID__UINT_POINTER
g_cclosure_marshal_VOID__ULONG
g_cclosure_marshal_VOID__VOID
g_cclosure_new
g_cclosure_new_object
g_cclosure_new_object_swap
g_cclosure_new_swap
g_closure_add_finalize_notifier
g_closure_add_invalidate_notifier
g_closure_add_marshal_guards
g_closure_get_type
g_closure_invalidate
g_closure_invoke
g_closure_new_object
g_closure_new_simple
g_closure_ref
g_closure_remove_finalize_notifier
g_closure_remove_invalidate_notifier
g_closure_set_marshal
g_closure_set_meta_marshal
g_closure_sink
g_closure_unref
g_date_get_type
g_enum_complete_type_info
g_enum_get_value
g_enum_get_value_by_name
g_enum_get_value_by_nick
g_enum_register_static
g_flags_complete_type_info
g_flags_get_first_value
g_flags_get_value_by_name
g_flags_get_value_by_nick
g_flags_register_static
g_gstring_get_type
g_gtype_get_type
g_hash_table_get_type
g_initially_unowned_get_type
g_io_channel_get_type
g_io_condition_get_type
g_object_add_toggle_ref
g_object_add_weak_pointer
g_object_class_find_property
g_object_class_install_property
g_object_class_list_properties
g_object_class_override_property
g_object_compat_control
g_object_connect
g_object_disconnect
g_object_force_floating
g_object_freeze_notify
g_object_get
g_object_get_data
g_object_get_property
g_object_get_qdata
g_object_get_type
g_object_get_valist
g_object_interface_find_property
g_object_interface_install_property
g_object_interface_list_properties
g_object_is_floating
g_object_new
g_object_new_valist
g_object_newv
g_object_notify
g_object_ref
g_object_ref_sink
g_object_remove_toggle_ref
g_object_remove_weak_pointer
g_object_run_dispose
g_object_set
g_object_set_data
g_object_set_data_full
g_object_set_property
g_object_set_qdata
g_object_set_qdata_full
g_object_set_valist
g_object_steal_data
g_object_steal_qdata
g_object_thaw_notify
g_object_unref
g_object_watch_closure
g_object_weak_ref
g_object_weak_unref
g_param_spec_boolean
g_param_spec_boxed
g_param_spec_char
g_param_spec_double
g_param_spec_enum
g_param_spec_flags
g_param_spec_float
g_param_spec_get_blurb
g_param_spec_get_name
g_param_spec_get_nick
g_param_spec_get_qdata
g_param_spec_get_redirect_target
g_param_spec_gtype
g_param_spec_int
g_param_spec_int64
g_param_spec_internal
g_param_spec_long
g_param_spec_object
g_param_spec_override
g_param_spec_param
g_param_spec_pointer
g_param_spec_pool_insert
g_param_spec_pool_list
g_param_spec_pool_list_owned
g_param_spec_pool_lookup
g_param_spec_pool_new
g_param_spec_pool_remove
g_param_spec_ref
g_param_spec_ref_sink
g_param_spec_set_qdata
g_param_spec_set_qdata_full
g_param_spec_sink
g_param_spec_steal_qdata
g_param_spec_string
g_param_spec_types
g_param_spec_uchar
g_param_spec_uint
g_param_spec_uint64
g_param_spec_ulong
g_param_spec_unichar
g_param_spec_unref
g_param_spec_value_array
g_param_type_register_static
g_param_value_convert
g_param_value_defaults
g_param_value_set_default
g_param_value_validate
g_param_values_cmp
g_pointer_type_register_static
g_ptr_array_get_type
g_regex_get_type
g_signal_accumulator_true_handled
g_signal_add_emission_hook
g_signal_chain_from_overridden
g_signal_chain_from_overridden_handler
g_signal_connect_closure
g_signal_connect_closure_by_id
g_signal_connect_data
g_signal_connect_object
g_signal_emit
g_signal_emit_by_name
g_signal_emit_valist
g_signal_emitv
g_signal_get_invocation_hint
g_signal_handler_block
g_signal_handler_disconnect
g_signal_handler_find
g_signal_handler_is_connected
g_signal_handler_unblock
g_signal_handlers_block_matched
g_signal_handlers_destroy
g_signal_handlers_disconnect_matched
g_signal_handlers_unblock_matched
g_signal_has_handler_pending
g_signal_list_ids
g_signal_lookup
g_signal_name
g_signal_new
g_signal_new_class_handler
g_signal_new_valist
g_signal_newv
g_signal_override_class_closure
g_signal_override_class_handler
g_signal_parse_name
g_signal_query
g_signal_remove_emission_hook
g_signal_stop_emission
g_signal_stop_emission_by_name
g_signal_type_cclosure_new
g_source_set_closure
g_strdup_value_contents
g_strv_get_type
g_type_add_class_cache_func
g_type_add_interface_check
g_type_add_interface_dynamic
g_type_add_interface_static
g_type_check_class_cast
g_type_check_class_is_a
g_type_check_instance
g_type_check_instance_cast
g_type_check_instance_is_a
g_type_check_is_value_type
g_type_check_value
g_type_check_value_holds
g_type_children
g_type_class_add_private
g_type_class_peek
g_type_class_peek_parent
g_type_class_peek_static
g_type_class_ref
g_type_class_unref
g_type_class_unref_uncached
g_type_create_instance
g_type_default_interface_peek
g_type_default_interface_ref
g_type_default_interface_unref
g_type_depth
g_type_free_instance
g_type_from_name
g_type_fundamental
g_type_fundamental_next
g_type_get_plugin
g_type_get_qdata
g_type_init
g_type_init_with_debug_flags
g_type_instance_get_private
g_type_interface_add_prerequisite
g_type_interface_get_plugin
g_type_interface_peek
g_type_interface_peek_parent
g_type_interface_prerequisites
g_type_interfaces
g_type_is_a
g_type_module_add_interface
g_type_module_get_type
g_type_module_register_enum
g_type_module_register_flags
g_type_module_register_type
g_type_module_set_name
g_type_module_unuse
g_type_module_use
g_type_name
g_type_name_from_class
g_type_name_from_instance
g_type_next_base
g_type_parent
g_type_plugin_complete_interface_info
g_type_plugin_complete_type_info
g_type_plugin_get_type
g_type_plugin_unuse
g_type_plugin_use
g_type_qname
g_type_query
g_type_register_dynamic
g_type_register_fundamental
g_type_register_static
g_type_register_static_simple
g_type_remove_class_cache_func
g_type_remove_interface_check
g_type_set_qdata
g_type_test_flags
g_type_value_table_peek
g_value_array_append
g_value_array_copy
g_value_array_free
g_value_array_get_nth
g_value_array_get_type
g_value_array_insert
g_value_array_new
g_value_array_prepend
g_value_array_remove
g_value_array_sort
g_value_array_sort_with_data
g_value_copy
g_value_dup_boxed
g_value_dup_object
g_value_dup_param
g_value_dup_string
g_value_fits_pointer
g_value_get_boolean
g_value_get_boxed
g_value_get_char
g_value_get_double
g_value_get_enum
g_value_get_flags
g_value_get_float
g_value_get_gtype
g_value_get_int
g_value_get_int64
g_value_get_long
g_value_get_object
g_value_get_param
g_value_get_pointer
g_value_get_string
g_value_get_type
g_value_get_uchar
g_value_get_uint
g_value_get_uint64
g_value_get_ulong
g_value_init
g_value_peek_pointer
g_value_register_transform_func
g_value_reset
g_value_set_boolean
g_value_set_boxed
g_value_set_boxed_take_ownership
g_value_set_char
g_value_set_double
g_value_set_enum
g_value_set_flags
g_value_set_float
g_value_set_gtype
g_value_set_instance
g_value_set_int
g_value_set_int64
g_value_set_long
g_value_set_object
g_value_set_object_take_ownership
g_value_set_param
g_value_set_param_take_ownership
g_value_set_pointer
g_value_set_static_boxed
g_value_set_static_string
g_value_set_string
g_value_set_string_take_ownership
g_value_set_uchar
g_value_set_uint
g_value_set_uint64
g_value_set_ulong
g_value_take_boxed
g_value_take_object
g_value_take_param
g_value_take_string
g_value_transform
g_value_type_compatible
g_value_type_transformable
g_value_unset

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 87KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/gthread-2.0.dll
.dll windows:5 windows x86 arch:x86

6ef153c6194b3a069923ede76fb80f28

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/10/2013, 00:00

Not After

15/11/2016, 23:59

Subject

CN=VMware\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

13:08:1b:43:70:03:b2:cb:62:41:76:10:f0:5c:a6:e2:7b:a3:23:52
Signer

Actual PE Digest

13:08:1b:43:70:03:b2:cb:62:41:76:10:f0:5c:a6:e2:7b:a3:23:52

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\toolchain\src\glib-2.22.4-3\glib-2.22.4\build\win32\vs8\Release\bin\gthread-2.0.pdb

Imports

glib-2.0

g_thread_init_glib
g_thread_functions_for_glib_use
g_win32_error_message
g_thread_gettime
g_ptr_array_remove
g_free
g_set_error
g_ptr_array_add
g_thread_use_default_impl
g_ptr_array_free
g_ptr_array_new
g_log
g_get_current_time
g_realloc
g_assertion_message_expr
g_assertion_message
g_ptr_array_set_size
g_ptr_array_remove_index
g_thread_error_quark
g_malloc

kernel32

DuplicateHandle
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
CloseHandle
TlsAlloc
ReleaseMutex
GetCurrentProcessId
DeleteCriticalSection
IsDebuggerPresent
CreateMutexA
GetModuleHandleA
EnterCriticalSection
GetProcAddress
TlsGetValue
GetCurrentProcess
WaitForSingleObject
SetEvent
GetCurrentThread
GetSystemTimeAsFileTime
InitializeCriticalSection
TlsSetValue
Sleep
CreateEventA
LeaveCriticalSection
SetThreadPriority
GetLastError

user32

MessageBoxA

msvcr90

_initterm
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_decode_pointer
abort
sprintf
free
calloc
_endthreadex
_beginthreadex
_encode_pointer
_malloc_crt
_encoded_null
_except_handler4_common

Exports

Exports

g_thread_init
g_thread_init_with_errorcheck_mutexes

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/iconv.dll
.dll windows:5 windows x86 arch:x86

95698eea57208c5535dc182aacc4168c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/10/2013, 00:00

Not After

15/11/2016, 23:59

Subject

CN=VMware\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a4:83:2e:ae:32:31:29:c3:fc:a3:3b:17:fd:a7:d2:7b:a7:93:0c:aa
Signer

Actual PE Digest

a4:83:2e:ae:32:31:29:c3:fc:a3:3b:17:fd:a7:d2:7b:a7:93:0c:aa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\toolchain\src\libiconv-1.9.2\libiconv-1.9.2\windows\vc90\Win32\Release\dll\iconv.pdb

Imports

kernel32

GetACP
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcr90

qsort
strlen
sprintf
strncmp
strrchr
calloc
realloc
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
free
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
memcmp
malloc
_errno
memset
abort
strcmp
strerror
vfprintf
putc
exit
__iob_func
fflush
fprintf
_initterm

Exports

Exports

_libiconv_version
libiconv
libiconv_close
libiconv_open
libiconvctl
libiconvlist
locale_charset

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 962KB - Virtual size: 961KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/intl.dll
.dll windows:5 windows x86 arch:x86

908845b0e12e5e40706810ba4f6246c3

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/10/2013, 00:00

Not After

15/11/2016, 23:59

Subject

CN=VMware\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b1:d2:ce:8a:f2:fe:74:a2:55:14:84:7b:5e:c4:2c:fa:0b:ed:e9:4d
Signer

Actual PE Digest

b1:d2:ce:8a:f2:fe:74:a2:55:14:84:7b:5e:c4:2c:fa:0b:ed:e9:4d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\toolchain\src\gettext-0.14.6-2\gettext-0.14.6\gettext-runtime\windows\vc90\Release\bin\intl.pdb

Imports

iconv

libiconv_close
libiconv_open
libiconv

kernel32

GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetACP
GetThreadLocale
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcessId

msvcr90

raise
isdigit
tolower
isalpha
isalnum
strcspn
strstr
abort
_fstat64i32
sprintf
bsearch
qsort
fclose
isspace
fgets
feof
fopen
isupper
putc
fprintf
strcpy
calloc
strtoul
_snprintf
_open
vfprintf
__iob_func
vsprintf
_vsnprintf
strncmp
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
realloc
_errno
strchr
getenv
strcmp
free
strlen
malloc
memcpy
_getcwd
_read
_close
fputs
fwrite
_strdup

Exports

Exports

bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_gettext
libintl_ngettext
libintl_printf
libintl_snprintf
libintl_sprintf
libintl_textdomain
libintl_vfprintf
libintl_vprintf
libintl_vsnprintf
libintl_vsprintf
ngettext
set_relocation_prefix
textdomain

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/peso.html
001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/vmtools.dll
.dll windows:5 windows x86 arch:x86

500c51aac7958a690c05aca70f30d856

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/10/2013, 00:00

Not After

15/11/2016, 23:59

Subject

CN=VMware\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ed:4b:34:a1:85:4a:bf:cb:d1:ac:e1:08:23:11:02:90:24:b8:09:f8
Signer

Actual PE Digest

ed:4b:34:a1:85:4a:bf:cb:d1:ac:e1:08:23:11:02:90:24:b8:09:f8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\build\ob\bora-4448491\bora-vmsoft\build\release\tools-for-windows\Win32\apps\vmtoolslib\vmtools.pdb

Imports

advapi32

GetUserNameW
GetLengthSid
GetTokenInformation
OpenProcessToken
ReportEventW
DeregisterEventSource
RegisterEventSourceW
AccessCheck
MapGenericMask
GetFileSecurityW
RevertToSelf
ImpersonateSelf
OpenThreadToken
LookupAccountNameW
OpenSCManagerW
OpenServiceW
LookupAccountSidW
FreeSid
AllocateAndInitializeSid
GetExplicitEntriesFromAclW
GetSecurityDescriptorControl
EqualSid
GetNamedSecurityInfoW
SetSecurityDescriptorControl
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
CheckTokenMembership
DuplicateToken
LookupPrivilegeValueA
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegQueryValueExW
RegOpenKeyExW
RegLoadKeyW
RegUnLoadKeyW
RegQueryInfoKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
SetSecurityDescriptorGroup
RegOpenKeyExA
CloseServiceHandle
GetAce
AddAce
GetAclInformation
GetSecurityDescriptorDacl
CopySid
RegQueryValueExA
RegSetValueExA
AddAccessAllowedAceEx
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenCurrentUser
QueryServiceStatus
InitiateSystemShutdownW
CreateProcessAsUserW
DeleteAce

kernel32

GetConsoleWindow
LoadLibraryW
VirtualAlloc
GetSystemInfo
VirtualFree
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
TlsSetValue
TlsGetValue
RaiseException
SetUnhandledExceptionFilter
TlsAlloc
IsBadReadPtr
VirtualQuery
GetCurrentThread
SetLastError
FindClose
FindNextFileW
SetFilePointer
WriteFile
ReadFile
SetEndOfFile
FlushFileBuffers
GetFileInformationByHandle
GetFileAttributesW
DuplicateHandle
GetDiskFreeSpaceExW
MoveFileExW
GetFileTime
SetFileTime
FindFirstFileW
DeleteFileW
CreateDirectoryW
RemoveDirectoryW
GetModuleHandleW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetWindowsDirectoryA
GetDriveTypeW
GetVolumeInformationW
GetModuleHandleA
OpenProcess
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TryEnterCriticalSection
GetTickCount
CreateEventA
ResetEvent
WaitForSingleObject
SetEvent
FreeLibrary
LoadLibraryA
GetModuleFileNameW
GetFullPathNameW
GetTempFileNameW
GetLogicalDriveStringsW
GetComputerNameExW
LoadLibraryExW
SetFileAttributesW
GetDiskFreeSpaceW
QueryDosDeviceW
GetTempPathW
ExpandEnvironmentStringsW
GetTimeFormatW
GetDateFormatW
LocalFree
FormatMessageW
GetShortPathNameW
GetVersionExW
CreateProcessW
GetCompressedFileSizeW
GetOverlappedResult
CancelIo
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringW
GetFileAttributesA
GetSystemTime
GetLocalTime
GetSystemTimeAsFileTime
GetDriveTypeA
Sleep
GetVersionExA
lstrcmpiA
QueryPerformanceCounter
QueryPerformanceFrequency
GetACP
ExpandEnvironmentStringsA
InitializeCriticalSection
InterlockedCompareExchange
TerminateProcess
CreateDirectoryA
UnhandledExceptionFilter
IsDebuggerPresent
TlsFree
GetExitCodeThread
OpenThread
GetProcAddress
AllocConsole
ReadProcessMemory
GetCommandLineW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetExitCodeProcess
GetVolumeInformationA
InterlockedExchange
GetLogicalDrives
GetStdHandle
GetFileType
FreeConsole
OutputDebugStringA
GetCurrentProcess
CreateFileW
DeviceIoControl
CloseHandle
GetLocaleInfoW
GetLastError
GetFileAttributesExW

ole32

CoInitialize
CoSetProxyBlanket
CoTaskMemFree
CoQueryProxyBlanket
CoCreateInstance
CoInitializeEx
CoUninitialize

oleaut32

SafeArrayDestroy
SafeArrayCreate
SafeArrayPutElement
VariantInit
VariantClear
SysAllocString
SysFreeString

shell32

DragQueryFileW
SHGetFolderPathW

user32

GetClassNameW
GetClipboardFormatNameW
MessageBoxW
LoadStringW
SendMessageTimeoutW
DispatchMessageA
CloseDesktop
GetUserObjectInformationW
PeekMessageA
TranslateMessage
OpenInputDesktop
SystemParametersInfoW
PostMessageW
IsWindowVisible
GetForegroundWindow
EnumDesktopWindows
OpenDesktopW
GetUserObjectSecurity
SetUserObjectSecurity
CloseWindowStation
SetProcessWindowStation
OpenWindowStationW
GetProcessWindowStation
MsgWaitForMultipleObjects
CallNextHookEx
GetDesktopWindow
GetWindowInfo
GetParent
SendInput
SetForegroundWindow
SetWindowsHookExW
UnhookWindowsHookEx
ExitWindowsEx

ws2_32

WSACleanup
WSAGetLastError
recv
send
ntohl
closesocket
connect
bind
socket
htonl
WSASetLastError
setsockopt
ioctlsocket
getsockopt
getsockname
accept
WSAStartup

msvcr90

wcsrchr
_beginthreadex
strtok
strlen
strncat
frexp
localeconv
wcrtomb
abort
_ftime64
_getpid
_crt_debugger_hook
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
_wcslwr
wcsstr
scanf
fgets
fflush
fgetc
_snprintf
isalnum
sprintf
getenv
strncpy
mbtowc
_ecvt_s
_fcvt_s
islower
memcpy
free
strchr
memmove
strncmp
strrchr
exit
fprintf
__iob_func
printf
malloc
memset
calloc
isprint
strstr
setvbuf
strerror
_wfreopen
_errno
fputs
memchr
fwrite
realloc
isspace
_stricmp
strtok_s
qsort
sscanf
_strnicmp
fclose
_wfullpath
wcsncmp
_strlwr
tolower
_strdup
strtoul
strtol
_strtoi64
_strtoui64
strtod
_wcsdup
_wgetenv
strcspn
wcsspn
towupper
wcschr
wcscspn
getc
feof
isdigit
_mktime64
_wopen
_wfopen
_wmkdir
_wstat64i32
_wrename
_wunlink
_strupr

glib-2.0

g_ptr_array_new
g_log_set_default_handler
g_ptr_array_free
g_log_remove_handler
g_log_default_handler
g_log
g_key_file_free
g_key_file_has_key
g_static_rec_mutex_init
g_key_file_get_boolean
g_strfreev
g_str_has_suffix
g_key_file_get_keys
g_key_file_new
g_static_rec_mutex_lock
g_static_rec_mutex_unlock
g_ptr_array_foreach
g_key_file_set_string
g_strchomp
g_strjoin
g_strsplit
g_hash_table_insert
g_hash_table_lookup
g_hash_table_new
g_str_hash
g_str_equal
g_hash_table_remove
g_main_context_unref
g_source_unref
g_source_attach
g_source_set_callback
g_timeout_source_new
g_source_set_priority
g_idle_source_new
g_source_destroy
g_hash_table_destroy
g_main_context_ref
g_utf16_to_utf8
g_io_channel_set_encoding
g_rename
g_unlink
g_stat
g_file_test_utf8
g_io_channel_flush
g_io_channel_write_chars
g_filename_from_utf8_utf8
g_malloc
g_locale_from_utf8
g_once_init_enter_impl
g_source_remove
g_slist_free
g_hash_table_size
g_hash_table_replace
g_hash_table_foreach_remove
g_timeout_add
g_slist_prepend
g_slist_find
g_io_add_watch
g_io_channel_win32_new_messages
g_io_channel_win32_new_fd
g_io_channel_win32_new_socket
g_hash_table_find
g_hash_table_steal
g_source_is_destroyed
g_main_current_source
g_hash_table_new_full
g_direct_hash
g_direct_equal
g_once_init_leave
g_log_set_handler
g_snprintf
g_key_file_get_integer
g_key_file_get_string
g_ptr_array_sized_new
g_ptr_array_add
g_ptr_array_remove_index
g_vasprintf
g_source_new
g_static_mutex_free
g_io_channel_new_file_utf8
g_clear_error
g_io_channel_read_line
g_io_channel_unref
g_threads_got_initialized
g_static_mutex_get_mutex_impl
g_thread_functions_for_glib_use
g_utf8_to_utf16
g_strdup_printf
g_key_file_load_from_file
g_strdup
g_once_impl
g_malloc0
g_static_mutex_init
g_free
g_logv
g_array_sized_new
g_key_file_to_data
g_file_error_quark
g_set_error
g_fprintf
g_build_filename
g_key_file_set_boolean
g_key_file_set_integer
g_fopen
g_source_add_poll

Exports

Exports

AtomicUseFence
Backdoor
Backdoor_HbIn
Backdoor_HbOut
Base64_Decode
Base64_DecodedLength
Base64_EasyEncode
Base64_Encode
Base64_EncodedLength
CodeSet_CurrentToUtf8
CodeSet_DontUseIcu
CodeSet_GenericToGeneric
CodeSet_GetAltPathName
CodeSet_GetCurrentCodeSet
CodeSet_Init
CodeSet_Utf16leToUtf8
CodeSet_Utf8ToCurrent
CodeSet_Utf8ToUtf16le
CodeSet_Validate
Config_GetLong
CryptoHash_Compute
CryptoHash_FromString
CryptoHash_GetOutputSize
Debug
DictLL_ReadLine
DictLL_WriteLine
DynArray_AllocCount
DynArray_Destroy
DynArray_Init
DynArray_SetCount
DynBuf_AllocGet
DynBuf_Append
DynBuf_Attach
DynBuf_Copy
DynBuf_Destroy
DynBuf_Detach
DynBuf_Enlarge
DynBuf_Init
DynBuf_SafeInternalAppend
DynBuf_Trim
DynXdr_AllocGet
DynXdr_AppendRaw
DynXdr_Create
DynXdr_Destroy
DynXdr_Get
Err_ErrString
Err_Errno2String
Escape_Do
Escape_DoString
Escape_Undo
FileIO_Access
FileIO_Close
FileIO_ErrorEnglish
FileIO_GetSize
FileIO_Invalidate
FileIO_Open
FileIO_Read
FileIO_Write
File_CreateDirectory
File_CreateDirectoryEx
File_CreateDirectoryHierarchy
File_CreateDirectoryHierarchyEx
File_DeleteDirectoryTree
File_DeleteEmptyDirectory
File_Exists
File_GetFilePermissions
File_GetModTime
File_GetPathName
File_GetSafeTmpDir
File_GetSize
File_GetSizeEx
File_GetTimes
File_IsDirectory
File_IsEmptyDirectory
File_IsFile
File_IsSameFile
File_IsSymLink
File_ListDirectory
File_MakeSafeTemp
File_MakeTempEx
File_MakeTempEx2
File_Move
File_PathJoin
File_SetFilePermissions
File_SetTimes
File_SplitName
File_Unlink
File_UnlinkDelayed
File_UnlinkIfExists
File_UnlinkNoFollow
GuestApp_GetConfPath
GuestApp_GetDefaultScript
GuestApp_GetInstallPath
GuestApp_GetInstallPathW
HashTable_Alloc
HashTable_AllocOnce
HashTable_Clear
HashTable_Delete
HashTable_ForEach
HashTable_Free
HashTable_GetNumElements
HashTable_Insert
HashTable_KeyArray
HashTable_Lookup
HashTable_LookupAndDelete
HashTable_ReplaceOrInsert
HashTable_ToArray
Hostinfo_GetLibraryPath
Hostinfo_GetModulePath
Hostinfo_GetOSDetailType
Hostinfo_GetOSGuestString
Hostinfo_GetOSName
Hostinfo_GetOSType
Hostinfo_GetSystemBitness
Hostinfo_GetTimeOfDay
Hostinfo_OSVersion
Hostinfo_SystemTimerNS
Log
LogV
MXUser_AcquireExclLock
MXUser_AcquireForRead
MXUser_AcquireForWrite
MXUser_AcquireRecLock
MXUser_BroadcastCondVar
MXUser_CreateCondVarExclLock
MXUser_CreateExclLock
MXUser_CreateRWLock
MXUser_CreateRecLock
MXUser_CreateSingletonExclLock
MXUser_CreateSingletonRWLock
MXUser_CreateSingletonRecLock
MXUser_DestroyCondVar
MXUser_DestroyExclLock
MXUser_DestroyRWLock
MXUser_DestroyRecLock
MXUser_IsCurThreadHoldingExclLock
MXUser_IsCurThreadHoldingRWLock
MXUser_IsCurThreadHoldingRecLock
MXUser_ReleaseExclLock
MXUser_ReleaseRWLock
MXUser_ReleaseRecLock
MXUser_SetInPanic
MXUser_SignalCondVar
MXUser_TimedWaitCondVarExclLock
MXUser_TryAcquireExclLock
MXUser_TryAcquireRecLock
MXUser_WaitCondVarExclLock
Message_Close
Message_Open
Message_Receive
Message_Send
NetUtil_GetPrimaryNic
Panic
Posix_Fopen
Posix_Getenv
Posix_Open
Posix_Stat
Preference_GetBool
ProcMgr_ExecAsync
ProcMgr_ExecSync
ProcMgr_Free
ProcMgr_FreeProcList
ProcMgr_GetAsyncProcSelectable
ProcMgr_GetExitCode
ProcMgr_GetImpersonatedUserInfo
ProcMgr_GetPid
ProcMgr_IsAsyncProcRunning
ProcMgr_KillByPid
ProcMgr_ListProcesses
ProductState_GetName
Random_Crypto
Random_Quick
Random_QuickSeed
Registry_GetRootHKey
Registry_KeyExists
Registry_ReadInteger
Registry_ReadMultiString
Registry_ReadString
Registry_SubkeysExist
Registry_WriteInteger
Registry_WriteString
RpcChannel_BuildXdrCommand
RpcChannel_Create
RpcChannel_Destroy
RpcChannel_Dispatch
RpcChannel_Free
RpcChannel_GetType
RpcChannel_New
RpcChannel_RegisterCallback
RpcChannel_Send
RpcChannel_SendOne
RpcChannel_SendOneRaw
RpcChannel_SetBackdoorOnly
RpcChannel_SetRetVals
RpcChannel_SetRetValsF
RpcChannel_Setup
RpcChannel_Shutdown
RpcChannel_Start
RpcChannel_Stop
RpcChannel_UnregisterCallback
RpcOut_Construct
RpcOut_Destruct
RpcOut_SendOneRaw
RpcOut_send
RpcOut_sendOne
RpcOut_start
RpcOut_stop
RpcVMX_ConfigGetString
RpcVMX_Log
StdIO_ReadNextLine
StrUtil_DynBufPrintf
StrUtil_EndsWith
StrUtil_GetNextIntToken
StrUtil_GetNextToken
StrUtil_GetNextUintToken
StrUtil_StartsWith
StrUtil_StrToInt
StrUtil_StrToInt64
StrUtil_StrToUint
Str_Asprintf
Str_Aswprintf
Str_SafeAsprintf
Str_SafeAswprintf
Str_SafeVasprintf
Str_SafeVaswprintf
Str_Snprintf
Str_Snwprintf
Str_Sprintf
Str_Strcat
Str_Strcpy
Str_Strlen
Str_Strncat
Str_Swprintf
Str_Vasprintf
Str_Vaswprintf
Str_Vsnprintf
Str_Wcscat
Str_Wcscpy
SyncDriver_CloseHandle
SyncDriver_Freeze
SyncDriver_Init
SyncDriver_QueryStatus
SyncDriver_Thaw
System_DisableAndKillScreenSaver
System_EnableDesktopComposition
System_GetEnv
System_GetNodeName
System_GetServiceState
System_GetTimeMonotonic
System_IsSecureDesktopActive
System_IsUserAdmin
System_SetEnv
System_SetFocusedWindow
System_SetProcessPrivilege
System_Shutdown
System_Uptime
TimeUtil_DateLowerThan
TimeUtil_DaysAdd
TimeUtil_NtTimeToUnixTime
TimeUtil_PopulateWithCurrent
TimeUtil_UnixTimeToNtTime
UUID_CreateRandom
Unicode_AllocWithLength
Unicode_CompareRange
Unicode_CopyBytes
Unicode_Duplicate
Unicode_EscapeBuffer
Unicode_FindLastSubstrInRange
Unicode_FindSubstrInRange
Unicode_FoldCase
Unicode_Format
Unicode_GetAllocBytes
Unicode_InitW
Unicode_IsBufferValid
Unicode_Join
Unicode_LengthInBytes
Unicode_LengthInCodePoints
Unicode_LengthInCodeUnits
Unicode_ReplaceRange
Unicode_Substr
Unicode_Trim
Unicode_TrimLeft
Unicode_TrimRight
Unicode_UTF16Strdup
Unicode_UTF16Strlen
UtilSafeCalloc0
UtilSafeCalloc1
UtilSafeMalloc0
UtilSafeMalloc1
UtilSafeRealloc0
UtilSafeRealloc1
UtilSafeStrdup0
UtilSafeStrdup1
UtilSafeStrndup0
UtilSafeStrndup1
Util_GetCanonicalPath
Util_GetCurrentThreadId
Util_TokenHasAdminPriv
VMTools_AttachConsole
VMTools_BindTextDomain
VMTools_ChangeLogFilePath
VMTools_ConfigGetBoolean
VMTools_ConfigGetInteger
VMTools_ConfigGetString
VMTools_ConfigLogging
VMTools_CreateTimer
VMTools_GetString
VMTools_GetUtf16String
VMTools_LoadConfig
VMTools_NewHandleSource
VMTools_ResumeLogIO
VMTools_SetGuestSDKMode
VMTools_SuspendLogIO
VMTools_WrapArray
VMTools_WriteConfig
VMW_SHA1Final
VMW_SHA1Init
VMW_SHA1Update
VMW_SHA256_Final
VMW_SHA256_Init
VMW_SHA256_Update
VmCheck_GetVersion
VmCheck_IsVirtualWorld
W32Util_AsciiStrToWideStr
W32Util_CheckGroupMembership
W32Util_GetInstalledFilePath
W32Util_GetModuleByAddress
W32Util_GetVmwareCommonAppDataFilePath
W32Util_OpenProductRegKey
W32Util_ReadFileTimeout
W32Util_WriteFileTimeout
WMI_EnableDHCP
WMI_EnableStatic
WMI_GetWMINicConfiguration
Warning
Win32U_AllocString
Win32U_DragQueryFile
Win32U_EnumKeyExpandBuffer
Win32U_EnumValueExpandBuffer
Win32U_ExpandEnvironmentStrings
Win32U_ExpandEnvironmentStringsEx
Win32U_FindFirstFileW
Win32U_FormatMessage
Win32U_GetClassName
Win32U_GetClipboardFormatName
Win32U_GetComputerName
Win32U_GetComputerNameEx
Win32U_GetDiskFreeSpaceEx
Win32U_GetDriveType
Win32U_GetFileAttributes
Win32U_GetLogicalDriveStrings
Win32U_GetModuleFileName
Win32U_GetModuleHandle
Win32U_GetUserName
Win32U_GetVolumeInformation
Win32U_LoadLibrary
Win32U_LookupAccountSid
Win32U_LookupSidForAccount
Win32U_PathUnExpandEnvStrings
Win32U_RecurseDeleteKeyEx
Win32U_RegCreateKeyEx
Win32U_RegDeleteValue
Win32U_RegEnumKeyEx
Win32U_RegOpenKeyEx
Win32U_RegQueryValueEx
Win32U_RegSetValueEx
Win32U_SHCopyKey
Win32U_SHDeleteKey
Win32U_SHGetFolderPath
Win32U_SHSetFolderPath
Win32U_SetFileAttributes
WinReg_DeleteValue
WinReg_EnumerateSubkeys
WinReg_EnumerateValues
WinReg_GetDWORD
WinReg_GetSZ
WinReg_GetSZEx
WinReg_LoadHiveU
WinReg_SetDWORD
WinReg_SetSZ
WinReg_SetSZEx
WinReg_UnloadHiveU
WiperPartition_Close
WiperPartition_Open
WiperSinglePartition_Close
WiperSinglePartition_GetSpace
Wiper_Cancel
Wiper_Init
Wiper_IsWipeSupported
Wiper_Next
Wiper_Start
XdrUtil_ArrayAppend
XdrUtil_Deserialize
_loglevel_offset_user
getopt
getopt_long
logLevelPtr
optarg
optind
uriComposeQueryCharsRequiredA
uriComposeQueryMallocA
uriDissectQueryMallocA
uriEscapeA
uriFreeQueryListA
uriFreeUriMembersA
uriParseUriA
uriUnescapeInPlaceA
uriUnescapeInPlaceW
uriUriStringToWindowsFilenameA
uriWindowsFilenameToUriStringA
vm_free
xdr_DnsConfigInfo
xdr_GuestNic
xdr_GuestNicList
xdr_GuestNicProto
xdr_NicInfoV3
xdr_VMCFBrokerConfig
xdr_VMCFBrokerRegistration
xdr_array
xdr_bool
xdr_bytes
xdr_char
xdr_double
xdr_enum
xdr_float
xdr_free
xdr_int
xdr_int16_t
xdr_int32_t
xdr_int64_t
xdr_long
xdr_netobj
xdr_opaque
xdr_pointer
xdr_reference
xdr_short
xdr_string
xdr_u_char
xdr_u_int
xdr_u_int16_t
xdr_u_int32_t
xdr_u_int64_t
xdr_u_long
xdr_u_short
xdr_union
xdr_vector
xdr_void
xdr_wrapstring
xdrmem_create

Sections

.text
Size: 367KB - Virtual size: 367KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e149a2ff051703c4fba168a5a92f52d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5dCertificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

7c:20:e0:ef:05:b5:a0:8e:ae:ca:61:f7:2c:29:ed:08:8c:5e:85:5dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

ole32

user32

version

msvcr90

intl

glib-2.0

gmodule-2.0

gobject-2.0

gthread-2.0

vmtools

kernel32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 2KB - Virtual size: 2KB

9bc40fa39ece484543c8e07744cdc3ca

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5dCertificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

a2:ea:f7:86:c4:8f:92:e5:22:db:09:1d:52:e6:71:df:10:61:29:fdSigner

Headers

DLL Characteristics

File Characteristics

Imports

intl

ws2_32

kernel32

user32

advapi32

shell32

ole32

msvcr90

Exports

Exports

Sections

.text Size: 586KB - Virtual size: 585KB

.rdata Size: 251KB - Virtual size: 250KB

.data Size: 173KB - Virtual size: 174KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5d
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

7c:20:e0:ef:05:b5:a0:8e:ae:ca:61:f7:2c:29:ed:08:8c:5e:85:5d
Signer

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 2KB - Virtual size: 2KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5d
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

a2:ea:f7:86:c4:8f:92:e5:22:db:09:1d:52:e6:71:df:10:61:29:fd
Signer

.text
Size: 586KB - Virtual size: 585KB

.rdata
Size: 251KB - Virtual size: 250KB

.data
Size: 173KB - Virtual size: 174KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 29KB - Virtual size: 28KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5d
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

ca:63:0a:02:90:ba:30:2e:25:cb:59:bf:8a:00:43:9f:83:ce:1c:28
Signer

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 810B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

44:51:ad:37:17:cf:a2:23:71:ff:bc:07:df:13:e6:5d
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

01:d7:50:dd:ba:6d:62:62:10:44:04:cf:b0:0f:2d:37:5f:bb:e7:9b
Signer

.text
Size: 156KB - Virtual size: 155KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 87KB - Virtual size: 89KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 11KB - Virtual size: 10KB