SecuriteInfo[.]com[.]Trojan[.]Inject[.]26138[.]9227[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.Inject.26138.9227.exe
Size

1.7MB
MD5

a22c31ad752fbc5320480474b3ac4afa
SHA1

849e22abceb55bccf821f345a2e9bad5634b83ab
SHA256

345218da602c00bf657b67d5b828a3999a8507b85033a87be2dbe24a7f46bac0
SHA512

e7b53c9345b169fe64f63d21401fbee41e9970c8eb332d7d595ad24eaaedf24988bd5f628d4fe68e8c42c7d19c26e27cee2baeec6d7cf009f6a89e2e56cced2d
SSDEEP

49152:pW0i3dSoCY8tagnLqw4jylmyfmnAX/khSyO+nx1Y+:D4dSptmjy8yfmk4xC+

Score

8^/10

macro

Malware Config

Signatures

Suspicious Office macro 1 IoCs

Office document equipped with macros.

macro

resource
static1/unpack001/$DOCUMENTS/MailBee Objects/Samples/VBA/IMAP4 Demo/IMAP4.doc

Unsigned PE 23 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$DOCUMENTS/MailBee Objects/Samples/Delphi/IMAP4 Demo/IMAP4Demo.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/Delphi/POP3 Demo/POP3Demo.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Advanced)/SMTPDemo.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Simple)/SMTPDemo.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/VB6/IMAP4 Demo 1/IMAP4Demo1.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/VB6/IMAP4 Demo 2/IMAP4Demo2.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/Mailer.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/VB6/POP3 Demo 1/POP3Demo1.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/VB6/POP3 Demo 2/POP3Demo2.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/VB6/SMIME Demo/SMIMEDemo.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/VB6/SMTP Demo 1/SMTPDemo1.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/VB6/SMTP Demo 2/SMTPDemo2.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/VB6/SSL Demo/SSLDemo.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/Release/IMAP4 Demo.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/Release/POP3 Demo.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/Release/POP3 Demo.exe
unpack001/$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/Release/SMTP Demo.exe
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/TypeLib.dll
unpack001/$R2/NSIS.Library.RegTool.v3.$_5_.exe
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/TypeLib.dll

NSIS installer 4 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/Uninstall.exe	nsis_installer_1
static1/unpack001/Uninstall.exe	nsis_installer_2

Files

SecuriteInfo.com.Trojan.Inject.26138.9227.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8b:4e:29:d1:6d:0b:7c:f6:14:d9:7c:df:4f:d5:1a:3c
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/10/2017, 00:00

Not After

17/10/2021, 23:59

Subject

CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Ctr,L=Newark,ST=DE,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

60:f2:50:93:1a:bb:ee:7a:be:4a:87:c6:ae:79:70:30:09:6b:24:84
Signer

Actual PE Digest

60:f2:50:93:1a:bb:ee:7a:be:4a:87:c6:ae:79:70:30:09:6b:24:84

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/ASP/IMAP4 Demo 1/default.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/IMAP4 Demo 2/default.asp
$DOCUMENTS/MailBee Objects/Samples/ASP/IMAP4 Demo 2/list_msgs.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/IMAP4 Demo 2/open_attach.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/IMAP4 Demo 2/view_msg.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/POP3 Demo 1/default.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/POP3 Demo 2/default.asp
$DOCUMENTS/MailBee Objects/Samples/ASP/POP3 Demo 2/list_msgs.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/POP3 Demo 2/open_attach.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/POP3 Demo 2/view_msg.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/SMIME Demo/spop3.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/SMIME Demo/ssmtp.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/SMTP Demo 1/default.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/SMTP Demo 2/default.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/SSL Demo/spop3.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/SSL Demo/ssmtp.asp
.vbs
$DOCUMENTS/MailBee Objects/Samples/ASP/readme.html
.html
$DOCUMENTS/MailBee Objects/Samples/ColdFusion/POP3 Demo/pop3.cfm
.js
$DOCUMENTS/MailBee Objects/Samples/ColdFusion/readme.html
.html
$DOCUMENTS/MailBee Objects/Samples/Delphi/IMAP4 Demo/IMAP4Demo.cfg
$DOCUMENTS/MailBee Objects/Samples/Delphi/IMAP4 Demo/IMAP4Demo.dof
$DOCUMENTS/MailBee Objects/Samples/Delphi/IMAP4 Demo/IMAP4Demo.dpr
$DOCUMENTS/MailBee Objects/Samples/Delphi/IMAP4 Demo/IMAP4Demo.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 393KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/Delphi/IMAP4 Demo/IMAP4Demo.res
$DOCUMENTS/MailBee Objects/Samples/Delphi/IMAP4 Demo/Main.dcu
$DOCUMENTS/MailBee Objects/Samples/Delphi/IMAP4 Demo/Main.ddp
$DOCUMENTS/MailBee Objects/Samples/Delphi/IMAP4 Demo/Main.dfm
$DOCUMENTS/MailBee Objects/Samples/Delphi/IMAP4 Demo/Main.pas
$DOCUMENTS/MailBee Objects/Samples/Delphi/POP3 Demo/Main.dcu
$DOCUMENTS/MailBee Objects/Samples/Delphi/POP3 Demo/Main.ddp
$DOCUMENTS/MailBee Objects/Samples/Delphi/POP3 Demo/Main.dfm
$DOCUMENTS/MailBee Objects/Samples/Delphi/POP3 Demo/Main.pas
$DOCUMENTS/MailBee Objects/Samples/Delphi/POP3 Demo/POP3Demo.cfg
$DOCUMENTS/MailBee Objects/Samples/Delphi/POP3 Demo/POP3Demo.dof
$DOCUMENTS/MailBee Objects/Samples/Delphi/POP3 Demo/POP3Demo.dpr
$DOCUMENTS/MailBee Objects/Samples/Delphi/POP3 Demo/POP3Demo.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/Delphi/POP3 Demo/POP3Demo.res
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Advanced)/Main.dcu
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Advanced)/Main.ddp
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Advanced)/Main.dfm
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Advanced)/Main.pas
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Advanced)/SMTPDemo.cfg
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Advanced)/SMTPDemo.dof
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Advanced)/SMTPDemo.dpr
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Advanced)/SMTPDemo.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 415KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Advanced)/SMTPDemo.res
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Simple)/Main.dcu
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Simple)/Main.ddp
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Simple)/Main.dfm
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Simple)/Main.pas
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Simple)/SMTPDemo.cfg
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Simple)/SMTPDemo.dof
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Simple)/SMTPDemo.dpr
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Simple)/SMTPDemo.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/Delphi/SMTP Demo (Simple)/SMTPDemo.res
$DOCUMENTS/MailBee Objects/Samples/Delphi/readme.html
.html
$DOCUMENTS/MailBee Objects/Samples/VB6/IMAP4 Demo 1/IMAP4Demo1.exe
.exe windows:4 windows x86 arch:x86

509ade79ca38fdbdcfa789bce226e93a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaForEachCollAd
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaLateMemSt
ord595
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaBoolVarNull
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
__vbaObjVar
__vbaVarLateMemSt
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaVarNot
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaLateMemCall
__vbaVarDup
__vbaLateMemCallLd
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaNextEachCollAd
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/VB6/IMAP4 Demo 1/IMAP4Demo1.vbp
$DOCUMENTS/MailBee Objects/Samples/VB6/IMAP4 Demo 1/frmMain.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/IMAP4 Demo 1/frmMain.frx
$DOCUMENTS/MailBee Objects/Samples/VB6/IMAP4 Demo 2/IMAP4Demo2.exe
.exe windows:4 windows x86 arch:x86

0abd67feb9e2839c607bf934d30b1a01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaRedimPreserveVar
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaLateIdCall
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaVarIndexStore
__vbaFreeObjList
ord517
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaStrDate
__vbaHresultCheckObj
ord558
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaExitProc
__vbaForEachCollObj
__vbaOnError
ord595
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
ord598
ord305
__vbaRefVarAry
_CIsin
ord631
__vbaNextEachCollObj
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
__vbaI2I4
DllFunctionCall
__vbaVarLateMemSt
__vbaCastObjVar
__vbaLbound
_adj_fpatan
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
EVENT_SINK_Release
__vbaNew
_CIsqrt
__vbaRedimVar
__vbaObjIs
ord311
EVENT_SINK_QueryInterface
ord710
__vbaExceptHandler
ord313
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord607
__vbaFPException
ord319
__vbaUbound
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaInStr
__vbaNew2
__vbaVarLateMemCallLdRf
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
__vbaVarAdd
ord320
__vbaStrToAnsi
__vbaVarDup
ord321
__vbaVarCopy
__vbaVarLateMemCallLd
__vbaUnkVar
ord617
__vbaLateMemCallLd
_CIatan
__vbaStrMove
__vbaCastObj
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/VB6/IMAP4 Demo 2/IMAP4Demo2.vbp
$DOCUMENTS/MailBee Objects/Samples/VB6/IMAP4 Demo 2/IMAP4Demo2.vbw
$DOCUMENTS/MailBee Objects/Samples/VB6/IMAP4 Demo 2/attachment.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/IMAP4 Demo 2/frmMain.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/IMAP4 Demo 2/frmMain.frx
$DOCUMENTS/MailBee Objects/Samples/VB6/IMAP4 Demo 2/frmViewMsg.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/Mailer.exe
.exe windows:4 windows x86 arch:x86

ceface300f237013d22a5c626579dfd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
__vbaVarSub
__vbaVarTstGt
ord690
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaLateIdCall
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
ord558
__vbaLenVar
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaObjSet
__vbaOnError
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaVarIndexLoad
__vbaFpR4
ord520
__vbaBoolVar
__vbaBoolVarNull
__vbaFpR8
__vbaRefVarAry
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaVarTstEq
__vbaR4Str
__vbaI2I4
ord561
__vbaObjVar
DllFunctionCall
__vbaVarLateMemSt
__vbaCastObjVar
__vbaStrR4
_adj_fpatan
__vbaR4Var
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
__vbaRedim
EVENT_SINK_Release
__vbaNew
_CIsqrt
__vbaVarAnd
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
ord319
__vbaStrVarVal
__vbaUbound
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaVarLateMemCallLdRf
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaVarSetObj
__vbaStrCopy
__vbaI4Str
__vbaVarNot
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
__vbaVarCmpEq
ord689
__vbaVarAdd
__vbaLateMemCall
ord320
__vbaStrToAnsi
__vbaVarDup
ord321
__vbaUnkVar
__vbaVarCopy
__vbaVarLateMemCallLd
__vbaLateMemCallLd
_CIatan
__vbaCastObj
__vbaStrMove
__vbaStrVarCopy
_allmul
__vbaVarLateMemCallSt
__vbaLateIdSt
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/Mailer.vbp
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/frmAbout.frm
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/frmAbout.frx
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/frmFileDialog.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/frmLogin.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/frmMain.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/frmMain.frx
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/frmNew.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/frmNew.frx
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/frmRedirect.frm
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/frmSettings.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/frmStatus.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons/attachment.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons/attachment2.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons/big_bee.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons/delete.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons/forward.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons/logout.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons/mailbee.ico
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons/new_mail.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons/redirect.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons/refresh.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons/reply.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons/replyall.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons/send.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons2/ReplyAll.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons2/attach_big.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons2/delete.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons2/forward.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons2/logout.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons2/new_mail.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons2/plain_html.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons2/redirect.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons2/refresh.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons2/reply.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons2/rfc.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/icons2/send.gif
.gif
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/modConsts.bas
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/modMailUtils.bas
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/Mailer Application/readme.html
.html
$DOCUMENTS/MailBee Objects/Samples/VB6/POP3 Demo 1/POP3Demo1.exe
.exe windows:4 windows x86 arch:x86

509ade79ca38fdbdcfa789bce226e93a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaForEachCollAd
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaLateMemSt
ord595
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaBoolVarNull
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
__vbaObjVar
__vbaVarLateMemSt
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaVarNot
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaLateMemCall
__vbaVarDup
__vbaLateMemCallLd
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaNextEachCollAd
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/VB6/POP3 Demo 1/POP3Demo1.vbp
$DOCUMENTS/MailBee Objects/Samples/VB6/POP3 Demo 1/frmMain.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/POP3 Demo 1/frmMain.frx
$DOCUMENTS/MailBee Objects/Samples/VB6/POP3 Demo 2/POP3Demo2.exe
.exe windows:4 windows x86 arch:x86

14887f8151b768a8ecea6fbff2479df0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaForEachCollObj
ord595
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
_CIsin
__vbaNextEachCollObj
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaCastObjVar
_adj_fpatan
Zombie_GetTypeInfoCount
EVENT_SINK_Release
__vbaNew
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord319
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord320
ord321
_CIatan
__vbaStrMove
__vbaCastObj
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/VB6/POP3 Demo 2/POP3Demo2.vbp
$DOCUMENTS/MailBee Objects/Samples/VB6/POP3 Demo 2/frmMain.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/POP3 Demo 2/frmMain.frx
$DOCUMENTS/MailBee Objects/Samples/VB6/SMIME Demo/InputCert.frm
$DOCUMENTS/MailBee Objects/Samples/VB6/SMIME Demo/InputCert.frx
$DOCUMENTS/MailBee Objects/Samples/VB6/SMIME Demo/MainForm.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/SMIME Demo/MainForm.frx
$DOCUMENTS/MailBee Objects/Samples/VB6/SMIME Demo/SMIMEDemo.exe
.exe windows:4 windows x86 arch:x86

f51ff38efb256d34245ff0eff95a6494

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaVarCmpNe
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaLateMemSt
ord300
ord595
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord306
__vbaBoolVarNull
_CIsin
__vbaLateMemStAd
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
__vbaObjVar
__vbaVarOr
__vbaVarLateMemSt
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaVarNot
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaLateMemCall
__vbaVarDup
__vbaLateMemCallLd
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/VB6/SMIME Demo/SMIMEDemo.vbp
$DOCUMENTS/MailBee Objects/Samples/VB6/SMTP Demo 1/SMTPDemo1.exe
.exe windows:4 windows x86 arch:x86

e49f4f2048c7359e7e41ff37d042a200

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLateIdCall
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaLateMemSt
ord595
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaBoolVarNull
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
__vbaObjVar
__vbaVarLateMemSt
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
__vbaVarCat
_CIlog
__vbaVarLateMemCallLdRf
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaLateMemCall
__vbaVarDup
__vbaLateMemCallLd
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/VB6/SMTP Demo 1/SMTPDemo1.vbp
$DOCUMENTS/MailBee Objects/Samples/VB6/SMTP Demo 1/frmMain.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/SMTP Demo 1/frmMain.frx
$DOCUMENTS/MailBee Objects/Samples/VB6/SMTP Demo 2/SMTPDemo2.exe
.exe windows:4 windows x86 arch:x86

00657f2ef6a257e54f33c5f07eac6f49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
__vbaLateIdCall
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
Zombie_GetTypeInfo
ord595
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
_adj_fpatan
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
EVENT_SINK_Release
__vbaNew
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord319
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord320
__vbaVarDup
ord321
__vbaVarLateMemCallLd
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
__vbaLateIdSt
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/VB6/SMTP Demo 2/SMTPDemo2.vbp
$DOCUMENTS/MailBee Objects/Samples/VB6/SMTP Demo 2/frmMain.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/SMTP Demo 2/frmMain.frx
$DOCUMENTS/MailBee Objects/Samples/VB6/SSL Demo/SSLDemo.exe
.exe windows:4 windows x86 arch:x86

3f6c0dfe63698a81861cfa29064185d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLateIdCall
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaLateMemSt
ord595
__vbaObjSet
ord596
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaBoolVarNull
_CIsin
__vbaLateMemStAd
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
__vbaObjVar
__vbaVarLateMemSt
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
__vbaVarNot
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaLateMemCall
__vbaVarDup
__vbaVarLateMemCallLd
__vbaLateMemCallLd
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/VB6/SSL Demo/SSLDemo.vbp
$DOCUMENTS/MailBee Objects/Samples/VB6/SSL Demo/frmMain.frm
.vbs
$DOCUMENTS/MailBee Objects/Samples/VB6/SSL Demo/frmMain.frx
$DOCUMENTS/MailBee Objects/Samples/VB6/readme.html
.html
$DOCUMENTS/MailBee Objects/Samples/VBA/IMAP4 Demo/IMAP4.doc
.doc windows office2003

ThisDocument
$DOCUMENTS/MailBee Objects/Samples/VBA/readme.html
.html
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/DlgProxy.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/DlgProxy.h
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/IMAP4 Demo.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/IMAP4 Demo.dsp
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/IMAP4 Demo.dsw
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/IMAP4 Demo.h
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/IMAP4 Demo.odl
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/IMAP4 Demo.rc
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/IMAP4 Demo.reg
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/IMAP4 DemoDlg.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/IMAP4 DemoDlg.h
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/ReadMe.txt
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/Release/IMAP4 Demo.exe
.exe windows:4 windows x86 arch:x86

6dbdee2e6dd53a3107b2c0db492c2e47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord3147
ord3259
ord4465
ord3136
ord2985
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4424
ord614
ord1168
ord1206
ord2623
ord290
ord825
ord1223
ord4622
ord4226
ord2486
ord4003
ord446
ord743
ord800
ord535
ord4033
ord540
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3262
ord3081
ord3738
ord561
ord815
ord2514
ord5500
ord6354
ord5716
ord5717
ord2621
ord2982
ord1199
ord1205
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord641
ord4234
ord1816
ord1146
ord860
ord2370
ord4160
ord2863
ord2379
ord755
ord470
ord6215
ord5575
ord4224
ord939
ord941
ord858
ord537
ord432
ord2614
ord839
ord433
ord2141
ord6334
ord434
ord1799
ord1134
ord823
ord1576

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
atoi
__CxxFrameHandler
_setmbcp
_itoa
_onexit

kernel32

GetModuleHandleA
GetStartupInfoA

user32

GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
EnableWindow
SendMessageA
LoadIconA
AppendMenuA

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/StdAfx.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/StdAfx.h
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/mailbee.cpp
.js
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/mailbee.h
.js
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/res/IMAP4 Demo.ico
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/res/IMAP4 Demo.rc2
$DOCUMENTS/MailBee Objects/Samples/VC6/IMAP4 Demo/resource.h
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/DlgProxy.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/DlgProxy.h
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/POP3 Demo.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/POP3 Demo.dsp
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/POP3 Demo.dsw
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/POP3 Demo.h
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/POP3 Demo.odl
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/POP3 Demo.rc
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/POP3 Demo.reg
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/POP3 DemoDlg.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/POP3 DemoDlg.h
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/ReadMe.txt
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/Release/POP3 Demo.exe
.exe windows:4 windows x86 arch:x86

a42790c74d5c44bdc44559b67f729297

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord3147
ord3259
ord4465
ord3136
ord2985
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4424
ord614
ord1168
ord1206
ord2623
ord290
ord825
ord1223
ord4622
ord4226
ord2486
ord4003
ord446
ord743
ord800
ord535
ord4033
ord540
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3262
ord3081
ord3738
ord561
ord815
ord2514
ord5500
ord6354
ord5716
ord5717
ord2621
ord1134
ord2982
ord1205
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord641
ord4234
ord1816
ord1146
ord860
ord2370
ord4160
ord2863
ord2379
ord755
ord470
ord6215
ord5575
ord4224
ord939
ord941
ord858
ord537
ord432
ord839
ord433
ord924
ord539
ord2614
ord2141
ord6334
ord434
ord1799
ord1199
ord823
ord1576

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
atoi
__CxxFrameHandler
_onexit
_setmbcp
_itoa

kernel32

GetModuleHandleA
GetStartupInfoA

user32

IsIconic
GetSystemMenu
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
AppendMenuA
SendMessageA
LoadIconA

oleaut32

SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/StdAfx.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/StdAfx.h
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/mailbee.cpp
.js
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/mailbee.h
.js
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/res/POP3 Demo.ico
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/res/POP3 Demo.rc2
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo With UIDs/resource.h
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/DlgProxy.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/DlgProxy.h
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/POP3 Demo.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/POP3 Demo.dsp
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/POP3 Demo.dsw
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/POP3 Demo.h
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/POP3 Demo.odl
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/POP3 Demo.rc
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/POP3 Demo.reg
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/POP3 DemoDlg.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/POP3 DemoDlg.h
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/ReadMe.txt
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/Release/POP3 Demo.exe
.exe windows:4 windows x86 arch:x86

6dbdee2e6dd53a3107b2c0db492c2e47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord3147
ord3259
ord4465
ord3136
ord2985
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4424
ord614
ord1168
ord1206
ord2623
ord290
ord825
ord1223
ord4622
ord4226
ord2486
ord4003
ord446
ord743
ord800
ord535
ord4033
ord540
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3262
ord3081
ord3738
ord561
ord815
ord2514
ord5500
ord6354
ord5716
ord5717
ord2621
ord2982
ord1199
ord1205
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord641
ord4234
ord1816
ord1146
ord860
ord2370
ord4160
ord2863
ord2379
ord755
ord470
ord6215
ord5575
ord4224
ord939
ord941
ord858
ord537
ord432
ord2614
ord839
ord433
ord2141
ord6334
ord434
ord1799
ord1134
ord823
ord1576

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
atoi
__CxxFrameHandler
_setmbcp
_itoa
_onexit

kernel32

GetModuleHandleA
GetStartupInfoA

user32

GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
EnableWindow
SendMessageA
LoadIconA
AppendMenuA

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/StdAfx.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/StdAfx.h
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/mailbee.cpp
.js
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/mailbee.h
.js
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/res/POP3 Demo.ico
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/res/POP3 Demo.rc2
$DOCUMENTS/MailBee Objects/Samples/VC6/POP3 Demo/resource.h
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/DlgProxy.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/DlgProxy.h
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/ReadMe.txt
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/Release/SMTP Demo.exe
.exe windows:4 windows x86 arch:x86

72ebc309eec9bd63f616de6212337975

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord3147
ord3259
ord4465
ord3136
ord2985
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4424
ord614
ord1168
ord1206
ord2623
ord290
ord825
ord1223
ord4622
ord4226
ord2486
ord4003
ord446
ord743
ord800
ord535
ord4033
ord540
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3262
ord3081
ord3738
ord561
ord815
ord2514
ord5500
ord6354
ord5716
ord5717
ord2621
ord1134
ord1205
ord2982
ord1247
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord641
ord4234
ord1816
ord1146
ord860
ord434
ord5575
ord2370
ord6334
ord3092
ord2141
ord4160
ord2863
ord2379
ord755
ord470
ord6215
ord4224
ord939
ord3177
ord941
ord3499
ord2515
ord355
ord2614
ord433
ord858
ord537
ord1799
ord1199
ord823
ord1576

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
atoi
__CxxFrameHandler
_setmbcp
_itoa
_onexit

kernel32

GetModuleHandleA
GetStartupInfoA

user32

GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
EnableWindow
SendMessageA
LoadIconA
AppendMenuA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/SMTP Demo.aps
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/SMTP Demo.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/SMTP Demo.dsp
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/SMTP Demo.dsw
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/SMTP Demo.h
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/SMTP Demo.odl
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/SMTP Demo.rc
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/SMTP Demo.reg
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/SMTP DemoDlg.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/SMTP DemoDlg.h
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/StdAfx.cpp
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/StdAfx.h
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/mailbee.cpp
.js
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/mailbee.h
.js
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/res/SMTP Demo.ico
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/res/SMTP Demo.rc2
$DOCUMENTS/MailBee Objects/Samples/VC6/SMTP Demo/resource.h
$PLUGINSDIR/GetTrial.ini
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/TypeLib.dll
.dll windows:4 windows x86 arch:x86

eb1a2c7475dd540716bf042f99de49fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc
MultiByteToWideChar

user32

wsprintfA

oleaut32

LoadTypeLibEx
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi

Exports

Exports

GetLibVersion
Register
UnRegister

Sections

.text
Size: 1024B - Virtual size: 674B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/WarnAboutNet.ini
$R0
.dll regsvr32 windows:5 windows x64 arch:x64

a89a2df4c25157c01fccb0783ff2e653

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8b:4e:29:d1:6d:0b:7c:f6:14:d9:7c:df:4f:d5:1a:3c
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/10/2017, 00:00

Not After

17/10/2021, 23:59

Subject

CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Ctr,L=Newark,ST=DE,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8b:4e:29:d1:6d:0b:7c:f6:14:d9:7c:df:4f:d5:1a:3c
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/10/2017, 00:00

Not After

17/10/2021, 23:59

Subject

CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Ctr,L=Newark,ST=DE,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f3:44:de:e1:1c:65:72:4b:3e:9e:bc:26:57:f8:e5:64:53:8c:78:56:b1:eb:bb:80:6a:80:3a:bc:e6:2b:b2:0e
Signer

Actual PE Digest

f3:44:de:e1:1c:65:72:4b:3e:9e:bc:26:57:f8:e5:64:53:8c:78:56:b1:eb:bb:80:6a:80:3a:bc:e6:2b:b2:0e

Digest Algorithm

sha256

PE Digest Matches

true

11:1f:e9:2d:e1:b7:f5:b9:97:c8:ae:a7:28:8f:c5:00:53:91:6f:2c
Signer

Actual PE Digest

11:1f:e9:2d:e1:b7:f5:b9:97:c8:ae:a7:28:8f:c5:00:53:91:6f:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ws2_32

select
recvfrom
WSAGetLastError
gethostname
inet_addr
WSAEventSelect
closesocket
recv
send
shutdown
getaddrinfo
WSACreateEvent
gethostbyaddr
connect
WSAEnumNetworkEvents
freeaddrinfo
WSACloseEvent
WSAStartup
WSACleanup
ntohs
inet_ntoa
htons
getservbyname
gethostbyname
socket
sendto

kernel32

GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
SetStdHandle
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetStringTypeW
WideCharToMultiByte
MultiByteToWideChar
LocalFree
LocalAlloc
CloseHandle
ReadFile
GetFileSize
GetLastError
CreateFileA
lstrlenW
EnterCriticalSection
LeaveCriticalSection
lstrlenA
GetModuleFileNameA
FindClose
FindFirstFileW
CreateFileW
RemoveDirectoryW
FindNextFileW
WriteConsoleW
WriteFile
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
GetModuleHandleA
lstrcmpiA
DisableThreadLibraryCalls
GetModuleHandleW
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetTimeZoneInformation
CreateDirectoryW
GetTempPathW
SearchPathW
SystemTimeToFileTime
GetLocalTime
FileTimeToLocalFileTime
Sleep
SetEvent
CreateEventA
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetACP
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
HeapDestroy
GetCPInfo
DeleteFileW
HeapSize
GetStdHandle
ExitProcess
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
HeapCreate
HeapSetInformation
GetConsoleMode
GetConsoleCP
FlsAlloc
SetLastError
FlsFree
FlsGetValue
DecodePointer
EncodePointer
GetCommandLineA
FlsSetValue
CreateThread
GetCurrentThreadId
ExitThread
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapFree
GetProcessHeap
RtlLookupFunctionEntry
RtlUnwindEx
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
RtlPcToFileHeader
HeapAlloc
VirtualProtect

user32

CharNextA
CharNextW
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
wsprintfW

advapi32

CryptAcquireContextA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
CryptReleaseContext

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoCreateGuid

oleaut32

VarBstrCat
SafeArrayGetUBound
SafeArrayGetLBound
SystemTimeToVariantTime
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
SafeArrayCreate
SysAllocString
VariantCopy
VariantChangeType
VariantClear
LoadTypeLi
LoadRegTypeLi
SysAllocStringLen
SysStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantInit
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
stringprep
stringprep_4i
stringprep_4zi
stringprep_check_version
stringprep_convert
stringprep_iscsi
stringprep_kerberos5
stringprep_locale_charset
stringprep_locale_to_utf8
stringprep_nameprep
stringprep_plain
stringprep_profile
stringprep_profiles
stringprep_rfc3454_A_1
stringprep_rfc3454_B_1
stringprep_rfc3454_B_2
stringprep_rfc3454_B_3
stringprep_rfc3454_C_1_1
stringprep_rfc3454_C_1_2
stringprep_rfc3454_C_2_1
stringprep_rfc3454_C_2_2
stringprep_rfc3454_C_3
stringprep_rfc3454_C_4
stringprep_rfc3454_C_5
stringprep_rfc3454_C_6
stringprep_rfc3454_C_7
stringprep_rfc3454_C_8
stringprep_rfc3454_C_9
stringprep_rfc3454_D_1
stringprep_rfc3454_D_2
stringprep_saslprep
stringprep_strerror
stringprep_trace
stringprep_ucs4_nfkc_normalize
stringprep_ucs4_to_utf8
stringprep_unichar_to_utf8
stringprep_utf8_nfkc_normalize
stringprep_utf8_to_locale
stringprep_utf8_to_ucs4
stringprep_utf8_to_unichar
stringprep_xmpp_nodeprep
stringprep_xmpp_nodeprep_prohibit
stringprep_xmpp_resourceprep

Sections

.text
Size: 507KB - Virtual size: 506KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 343KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R2/NSIS.Library.RegTool.v3.$_5_.exe
.exe windows:4 windows x86 arch:x86

a56a9c58ddb2b2da8fde66551747ce70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CloseHandle
CreateProcessA
GetSystemDirectoryA
FreeLibrary
LoadLibraryExA
MultiByteToWideChar
lstrcmpiA
lstrlenA
SetEndOfFile
GetProcAddress
UnmapViewOfFile
lstrcpyA
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetShortPathNameA
GetCommandLineA
ExitProcess
GetModuleHandleA
GetModuleFileNameA
SetFilePointer
SetErrorMode

oleaut32

LoadTypeLi
RegisterTypeLi

advapi32

RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegCloseKey

user32

wsprintfA
CharNextA

ole32

OleInitialize
OleUninitialize

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Documentation.chm
.chm
MailBee.dll
.dll regsvr32 windows:5 windows x86 arch:x86

f353d5a7731f56ae2bf981f5df94d9e4

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8b:4e:29:d1:6d:0b:7c:f6:14:d9:7c:df:4f:d5:1a:3c
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/10/2017, 00:00

Not After

17/10/2021, 23:59

Subject

CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Ctr,L=Newark,ST=DE,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8b:4e:29:d1:6d:0b:7c:f6:14:d9:7c:df:4f:d5:1a:3c
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/10/2017, 00:00

Not After

17/10/2021, 23:59

Subject

CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Ctr,L=Newark,ST=DE,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:56:b1:b2:ea:35:73:48:f0:5f:97:6e:91:74:22:73:9b:ff:a0:6b:54:04:e1:3b:dc:62:3b:1e:ce:b8:cc:65
Signer

Actual PE Digest

61:56:b1:b2:ea:35:73:48:f0:5f:97:6e:91:74:22:73:9b:ff:a0:6b:54:04:e1:3b:dc:62:3b:1e:ce:b8:cc:65

Digest Algorithm

sha256

PE Digest Matches

true

5d:01:e0:36:35:54:7d:ca:e5:1b:5b:bd:cb:a3:16:75:fe:0b:76:2d
Signer

Actual PE Digest

5d:01:e0:36:35:54:7d:ca:e5:1b:5b:bd:cb:a3:16:75:fe:0b:76:2d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

recv
send
shutdown
WSACreateEvent
WSAEventSelect
connect
WSAEnumNetworkEvents
WSACloseEvent
WSAStartup
gethostbyaddr
WSASetLastError
getservbyport
htonl
ntohs
inet_ntoa
htons
getservbyname
gethostbyname
socket
sendto
closesocket
select
recvfrom
WSAGetLastError
gethostname
inet_addr
WSACleanup

kernel32

GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
WideCharToMultiByte
MultiByteToWideChar
LocalFree
LocalAlloc
CloseHandle
ReadFile
GetFileSize
GetLastError
CreateFileA
lstrlenW
EnterCriticalSection
LeaveCriticalSection
lstrlenA
GetModuleFileNameA
FindClose
FindFirstFileW
CreateFileW
RemoveDirectoryW
FindNextFileW
DeleteFileW
WriteFile
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
GetModuleHandleA
lstrcmpiA
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
DisableThreadLibraryCalls
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetTimeZoneInformation
CreateDirectoryW
GetTempPathW
SearchPathW
SystemTimeToFileTime
GetLocalTime
FileTimeToLocalFileTime
LoadLibraryA
GetSystemDirectoryA
Sleep
SetEvent
CreateEventA
GetStdHandle
ExitProcess
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetTickCount
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetLocaleInfoW
RaiseException
VirtualFree
HeapDestroy
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapCreate
GetConsoleMode
GetConsoleCP
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCommandLineA
CreateThread
GetCurrentThreadId
ExitThread
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
HeapFree
GetProcessHeap
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

user32

MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
CharNextW
CharNextA
wsprintfW

advapi32

CryptReleaseContext
CryptAcquireContextA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

ole32

StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoCreateGuid
CoTaskMemAlloc

oleaut32

VarBstrCat
SafeArrayGetUBound
SafeArrayGetLBound
SystemTimeToVariantTime
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
SafeArrayCreate
SysAllocString
VariantCopy
VariantChangeType
VariantClear
LoadTypeLi
LoadRegTypeLi
SysAllocStringLen
SysStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantInit
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
stringprep
stringprep_4i
stringprep_4zi
stringprep_check_version
stringprep_convert
stringprep_iscsi
stringprep_kerberos5
stringprep_locale_charset
stringprep_locale_to_utf8
stringprep_nameprep
stringprep_plain
stringprep_profile
stringprep_profiles
stringprep_rfc3454_A_1
stringprep_rfc3454_B_1
stringprep_rfc3454_B_2
stringprep_rfc3454_B_3
stringprep_rfc3454_C_1_1
stringprep_rfc3454_C_1_2
stringprep_rfc3454_C_2_1
stringprep_rfc3454_C_2_2
stringprep_rfc3454_C_3
stringprep_rfc3454_C_4
stringprep_rfc3454_C_5
stringprep_rfc3454_C_6
stringprep_rfc3454_C_7
stringprep_rfc3454_C_8
stringprep_rfc3454_C_9
stringprep_rfc3454_D_1
stringprep_rfc3454_D_2
stringprep_saslprep
stringprep_strerror
stringprep_trace
stringprep_ucs4_nfkc_normalize
stringprep_ucs4_to_utf8
stringprep_unichar_to_utf8
stringprep_utf8_nfkc_normalize
stringprep_utf8_to_locale
stringprep_utf8_to_ucs4
stringprep_utf8_to_unichar
stringprep_xmpp_nodeprep
stringprep_xmpp_nodeprep_prohibit
stringprep_xmpp_resourceprep

Sections

.text
Size: 444KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MailBee64.dll
.dll regsvr32 windows:5 windows x64 arch:x64

a89a2df4c25157c01fccb0783ff2e653

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8b:4e:29:d1:6d:0b:7c:f6:14:d9:7c:df:4f:d5:1a:3c
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/10/2017, 00:00

Not After

17/10/2021, 23:59

Subject

CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Ctr,L=Newark,ST=DE,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8b:4e:29:d1:6d:0b:7c:f6:14:d9:7c:df:4f:d5:1a:3c
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/10/2017, 00:00

Not After

17/10/2021, 23:59

Subject

CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Ctr,L=Newark,ST=DE,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f3:44:de:e1:1c:65:72:4b:3e:9e:bc:26:57:f8:e5:64:53:8c:78:56:b1:eb:bb:80:6a:80:3a:bc:e6:2b:b2:0e
Signer

Actual PE Digest

f3:44:de:e1:1c:65:72:4b:3e:9e:bc:26:57:f8:e5:64:53:8c:78:56:b1:eb:bb:80:6a:80:3a:bc:e6:2b:b2:0e

Digest Algorithm

sha256

PE Digest Matches

true

11:1f:e9:2d:e1:b7:f5:b9:97:c8:ae:a7:28:8f:c5:00:53:91:6f:2c
Signer

Actual PE Digest

11:1f:e9:2d:e1:b7:f5:b9:97:c8:ae:a7:28:8f:c5:00:53:91:6f:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ws2_32

select
recvfrom
WSAGetLastError
gethostname
inet_addr
WSAEventSelect
closesocket
recv
send
shutdown
getaddrinfo
WSACreateEvent
gethostbyaddr
connect
WSAEnumNetworkEvents
freeaddrinfo
WSACloseEvent
WSAStartup
WSACleanup
ntohs
inet_ntoa
htons
getservbyname
gethostbyname
socket
sendto

kernel32

GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
SetStdHandle
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetStringTypeW
WideCharToMultiByte
MultiByteToWideChar
LocalFree
LocalAlloc
CloseHandle
ReadFile
GetFileSize
GetLastError
CreateFileA
lstrlenW
EnterCriticalSection
LeaveCriticalSection
lstrlenA
GetModuleFileNameA
FindClose
FindFirstFileW
CreateFileW
RemoveDirectoryW
FindNextFileW
WriteConsoleW
WriteFile
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
GetModuleHandleA
lstrcmpiA
DisableThreadLibraryCalls
GetModuleHandleW
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetTimeZoneInformation
CreateDirectoryW
GetTempPathW
SearchPathW
SystemTimeToFileTime
GetLocalTime
FileTimeToLocalFileTime
Sleep
SetEvent
CreateEventA
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetACP
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
HeapDestroy
GetCPInfo
DeleteFileW
HeapSize
GetStdHandle
ExitProcess
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
HeapCreate
HeapSetInformation
GetConsoleMode
GetConsoleCP
FlsAlloc
SetLastError
FlsFree
FlsGetValue
DecodePointer
EncodePointer
GetCommandLineA
FlsSetValue
CreateThread
GetCurrentThreadId
ExitThread
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapFree
GetProcessHeap
RtlLookupFunctionEntry
RtlUnwindEx
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
RtlPcToFileHeader
HeapAlloc
VirtualProtect

user32

CharNextA
CharNextW
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
wsprintfW

advapi32

CryptAcquireContextA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
CryptReleaseContext

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoCreateGuid

oleaut32

VarBstrCat
SafeArrayGetUBound
SafeArrayGetLBound
SystemTimeToVariantTime
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
SafeArrayCreate
SysAllocString
VariantCopy
VariantChangeType
VariantClear
LoadTypeLi
LoadRegTypeLi
SysAllocStringLen
SysStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantInit
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
stringprep
stringprep_4i
stringprep_4zi
stringprep_check_version
stringprep_convert
stringprep_iscsi
stringprep_kerberos5
stringprep_locale_charset
stringprep_locale_to_utf8
stringprep_nameprep
stringprep_plain
stringprep_profile
stringprep_profiles
stringprep_rfc3454_A_1
stringprep_rfc3454_B_1
stringprep_rfc3454_B_2
stringprep_rfc3454_B_3
stringprep_rfc3454_C_1_1
stringprep_rfc3454_C_1_2
stringprep_rfc3454_C_2_1
stringprep_rfc3454_C_2_2
stringprep_rfc3454_C_3
stringprep_rfc3454_C_4
stringprep_rfc3454_C_5
stringprep_rfc3454_C_6
stringprep_rfc3454_C_7
stringprep_rfc3454_C_8
stringprep_rfc3454_C_9
stringprep_rfc3454_D_1
stringprep_rfc3454_D_2
stringprep_saslprep
stringprep_strerror
stringprep_trace
stringprep_ucs4_nfkc_normalize
stringprep_ucs4_to_utf8
stringprep_unichar_to_utf8
stringprep_utf8_nfkc_normalize
stringprep_utf8_to_locale
stringprep_utf8_to_ucs4
stringprep_utf8_to_unichar
stringprep_xmpp_nodeprep
stringprep_xmpp_nodeprep_prohibit
stringprep_xmpp_resourceprep

Sections

.text
Size: 507KB - Virtual size: 506KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 343KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MailBeeFolderOpener.exe
.exe windows:4 windows x86 arch:x86

54e0079691529009a3561bd00e922670

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b9:f7:98:83:23:48:25:3c:37:ba:45:7b:a8:1f:2a:a6
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/11/2014, 00:00

Not After

16/11/2017, 23:59

Subject

CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Center,L=Newark,ST=DE,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b8:a5:fc:3f:36:eb:dd:de:f4:06:a3:1b:03:8b:00:e8:a8:6f:5a:39
Signer

Actual PE Digest

b8:a5:fc:3f:36:eb:dd:de:f4:06:a3:1b:03:8b:00:e8:a8:6f:5a:39

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Open Samples Folder.exe
.exe windows:4 windows x86 arch:x86

50a6089f56c8f5c6e9f796d7dd1a5639

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b9:f7:98:83:23:48:25:3c:37:ba:45:7b:a8:1f:2a:a6
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/11/2014, 00:00

Not After

16/11/2017, 23:59

Subject

CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Center,L=Newark,ST=DE,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

40:bc:07:da:00:4c:63:c9:47:b5:9a:5f:61:3d:63:15:8d:03:da:a6
Signer

Actual PE Digest

40:bc:07:da:00:4c:63:c9:47:b5:9a:5f:61:3d:63:15:8d:03:da:a6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord537
_CIlog
__vbaErrorOverflow
__vbaInStr
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
ord616
_CIatan
__vbaStrMove
ord618
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SaveKey ReadMe.html
.html
SaveKey.exe
.exe windows:4 windows x86 arch:x86

446ebf44c1b183ae29497394426a17b4

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b9:f7:98:83:23:48:25:3c:37:ba:45:7b:a8:1f:2a:a6
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/11/2014, 00:00

Not After

16/11/2017, 23:59

Subject

CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Center,L=Newark,ST=DE,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d5:c1:55:99:66:ae:c8:06:9d:80:cf:83:e7:8d:94:79:2e:c9:7c:75
Signer

Actual PE Digest

d5:c1:55:99:66:ae:c8:06:9d:80:cf:83:e7:8d:94:79:2e:c9:7c:75

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord3597
ord324
ord825
ord641
ord4234
ord4673
ord4274
ord6375
ord5163
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord4424
ord3738
ord561
ord815
ord800
ord2621
ord1134
ord1146
ord1168
ord860
ord540
ord2370
ord4160
ord2863
ord2379
ord755
ord470
ord535
ord5981
ord3092
ord4224
ord6334
ord2915
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4710
ord4998
ord4853
ord4376
ord4486
ord5265
ord1576

msvcrt

__set_app_type
_except_handler3
_controlfp
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_setmbcp
__CxxFrameHandler
_mbscmp
__dllonexit
__p__fmode
_onexit
_exit
_XcptFilter
exit

kernel32

GetStartupInfoA
GetModuleHandleA
GetLastError
LocalFree
FormatMessageA

user32

MessageBoxA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
AppendMenuA
SendMessageA
LoadIconA
EnableWindow
GetSystemMenu

advapi32

RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SaveKey32.exe
.exe windows:5 windows x86 arch:x86

5fd418f4883280f594f601f8acbbeb4c

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b9:f7:98:83:23:48:25:3c:37:ba:45:7b:a8:1f:2a:a6
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/11/2014, 00:00

Not After

16/11/2017, 23:59

Subject

CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Center,L=Newark,ST=DE,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:64:d7:47:e7:9a:6b:64:33:88:86:0c:26:33:ae:fc:3a:96:c3:e7
Signer

Actual PE Digest

bc:64:d7:47:e7:9a:6b:64:33:88:86:0c:26:33:ae:fc:3a:96:c3:e7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc90

ord4331
ord1752
ord1755
ord6388
ord3344
ord1678
ord1809
ord1810
ord2208
ord4993
ord5309
ord5152
ord4617
ord5615
ord639
ord3987
ord4029
ord4952
ord589
ord3659
ord4667
ord4890
ord3110
ord6001
ord5646
ord5663
ord4981
ord4333
ord2447
ord5659
ord5657
ord3209
ord2087
ord4199
ord5813
ord6721
ord1729
ord1046
ord4165
ord6018
ord2206
ord2251
ord4733
ord6781
ord4159
ord6783
ord4409
ord4434
ord793
ord601
ord1098
ord2691
ord3178
ord1603
ord1137
ord2591
ord2069
ord1108
ord820
ord316
ord1496
ord910
ord4311
ord4431
ord5167
ord744
ord524
ord300
ord6291
ord2899
ord4502
ord6740
ord6446
ord5668
ord5666
ord958
ord963
ord967
ord965
ord969
ord2610
ord2630
ord2614
ord2620
ord2618
ord2616
ord2633
ord2628
ord2612
ord2635
ord2623
ord2605
ord2607
ord2625
ord2375
ord2368
ord1644
ord6784
ord4160
ord6782
ord3671
ord5389
ord6356
ord3218
ord1446
ord5608
ord2139
ord1792
ord1791
ord1728
ord5633
ord2766
ord2978
ord3107
ord4714
ord2961
ord3135
ord2769
ord2888
ord2759
ord4066
ord4650
ord5585
ord2074
ord5497
ord6780
ord4589
ord5636
ord3732
ord5139
ord2057
ord4688
ord4067
ord4057
ord2886
ord4334
ord4895
ord4668
ord3506
ord374
ord5533
ord800
ord1276

msvcr90

_setmbcp
memset
_controlfp_s
_invoke_watson
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3

kernel32

GetTickCount
FormatMessageA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
LocalFree
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetLastError

user32

LoadIconA
GetClientRect
IsIconic
GetSystemMenu
SendMessageA
AppendMenuA
DrawIcon
MessageBoxA
EnableWindow
GetSystemMetrics

advapi32

RegDeleteValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumValueA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SaveKey64.exe
.exe windows:5 windows x64 arch:x64

8779a13a400395d82e0bb4f9326f3179

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b9:f7:98:83:23:48:25:3c:37:ba:45:7b:a8:1f:2a:a6
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/11/2014, 00:00

Not After

16/11/2017, 23:59

Subject

CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Center,L=Newark,ST=DE,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:a5:03:fb:aa:52:36:8e:0b:9d:63:9e:5d:9c:7f:77:df:da:6e:27
Signer

Actual PE Digest

77:a5:03:fb:aa:52:36:8e:0b:9d:63:9e:5d:9c:7f:77:df:da:6e:27

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mfc90

ord4346
ord1433
ord4039
ord1659
ord1662
ord6038
ord3131
ord1585
ord1713
ord1714
ord2067
ord4689
ord5003
ord4846
ord4313
ord5302
ord617
ord3732
ord3774
ord4648
ord577
ord3418
ord4363
ord4586
ord2907
ord5684
ord5333
ord5350
ord4677
ord4041
ord2303
ord5346
ord5344
ord3002
ord1966
ord3923
ord5499
ord5355
ord5220
ord1023
ord3897
ord5701
ord2065
ord2110
ord4429
ord6407
ord3892
ord6409
ord4112
ord4136
ord771
ord589
ord1071
ord2533
ord2973
ord1516
ord1103
ord2436
ord1949
ord1080
ord5272
ord316
ord1938
ord888
ord4027
ord4133
ord4861
ord722
ord512
ord300
ord5951
ord2722
ord4202
ord6366
ord5353
ord936
ord941
ord945
ord943
ord947
ord2455
ord2475
ord2459
ord2465
ord2463
ord2461
ord2478
ord2473
ord2457
ord2480
ord2468
ord2450
ord2452
ord2470
ord2233
ord2226
ord1556
ord6410
ord3893
ord6408
ord3430
ord5083
ord6012
ord3011
ord1393
ord5295
ord2010
ord1699
ord1698
ord1635
ord5320
ord2602
ord2797
ord2904
ord4410
ord2780
ord2932
ord2605
ord2711
ord2598
ord3809
ord1954
ord5191
ord6406
ord4285
ord5323
ord3488
ord4833
ord4384
ord1636
ord798
ord6086
ord3810
ord3800
ord2709
ord4042
ord4591
ord4364
ord3265
ord362
ord6348
ord778
ord1237

msvcr90

_setmbcp
memset
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__C_specific_handler
__CxxFrameHandler3

kernel32

QueryPerformanceCounter
FormatMessageA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
LocalFree
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
Sleep
GetLastError

user32

LoadIconA
GetClientRect
IsIconic
GetSystemMenu
SendMessageA
AppendMenuA
DrawIcon
MessageBoxA
EnableWindow
GetSystemMetrics

advapi32

RegDeleteValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumValueA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Uninstall.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8b:4e:29:d1:6d:0b:7c:f6:14:d9:7c:df:4f:d5:1a:3c
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

17/10/2017, 00:00

Not After

17/10/2021, 23:59

Subject

CN=AfterLogic Corporation,O=AfterLogic Corporation,POSTALCODE=19711,STREET=113 Barksdale Professional Ctr,L=Newark,ST=DE,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

47:d9:ba:c3:18:7d:bd:0c:4d:4f:2f:5f:67:16:86:7c:47:a0:be:37
Signer

Actual PE Digest

47:d9:ba:c3:18:7d:bd:0c:4d:4f:2f:5f:67:16:86:7c:47:a0:be:37

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/TypeLib.dll
.dll windows:4 windows x86 arch:x86

eb1a2c7475dd540716bf042f99de49fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc
MultiByteToWideChar

user32

wsprintfA

oleaut32

LoadTypeLibEx
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi

Exports

Exports

GetLibVersion
Register
UnRegister

Sections

.text
Size: 1024B - Virtual size: 674B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
license.txt

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

8b:4e:29:d1:6d:0b:7c:f6:14:d9:7c:df:4f:d5:1a:3cCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

60:f2:50:93:1a:bb:ee:7a:be:4a:87:c6:ae:79:70:30:09:6b:24:84Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 40KB

.rsrc Size: 4KB - Virtual size: 4KB

Headers

File Characteristics

Sections

CODE Size: 393KB - Virtual size: 392KB

DATA Size: 5KB - Virtual size: 4KB

BSS Size: - Virtual size: 3KB

.idata Size: 9KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 29KB - Virtual size: 28KB

.rsrc Size: 25KB - Virtual size: 25KB

Headers

File Characteristics

Sections

CODE Size: 392KB - Virtual size: 392KB

DATA Size: 5KB - Virtual size: 4KB

BSS Size: - Virtual size: 3KB

.idata Size: 9KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 29KB - Virtual size: 28KB

.rsrc Size: 25KB - Virtual size: 25KB

Headers

File Characteristics

Sections

CODE Size: 415KB - Virtual size: 414KB

DATA Size: 5KB - Virtual size: 4KB

BSS Size: - Virtual size: 3KB

.idata Size: 9KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 30KB - Virtual size: 30KB

.rsrc Size: 28KB - Virtual size: 28KB

Headers

File Characteristics

Sections

CODE Size: 406KB - Virtual size: 406KB

DATA Size: 5KB - Virtual size: 4KB

BSS Size: - Virtual size: 3KB

.idata Size: 9KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 30KB - Virtual size: 29KB

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

8b:4e:29:d1:6d:0b:7c:f6:14:d9:7c:df:4f:d5:1a:3c
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

60:f2:50:93:1a:bb:ee:7a:be:4a:87:c6:ae:79:70:30:09:6b:24:84
Signer

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 40KB

.rsrc
Size: 4KB - Virtual size: 4KB

CODE
Size: 393KB - Virtual size: 392KB

DATA
Size: 5KB - Virtual size: 4KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 29KB - Virtual size: 28KB

.rsrc
Size: 25KB - Virtual size: 25KB

CODE
Size: 392KB - Virtual size: 392KB

DATA
Size: 5KB - Virtual size: 4KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 29KB - Virtual size: 28KB

.rsrc
Size: 25KB - Virtual size: 25KB

CODE
Size: 415KB - Virtual size: 414KB

DATA
Size: 5KB - Virtual size: 4KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 30KB - Virtual size: 30KB

.rsrc
Size: 28KB - Virtual size: 28KB

CODE
Size: 406KB - Virtual size: 406KB

DATA
Size: 5KB - Virtual size: 4KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 30KB - Virtual size: 29KB

.rsrc
Size: 27KB - Virtual size: 27KB

.text
Size: 16KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 40KB - Virtual size: 36KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 128KB - Virtual size: 126KB

.data
Size: 4KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 16KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 24KB - Virtual size: 20KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 40KB - Virtual size: 36KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 17KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB