Bindu Software 1[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Bindu Software 1.zip
Size

177.2MB
MD5

b0f02229d10170aaf05f1a39ba107632
SHA1

00bdf5b6584fb09a9fbe9121e6cb25a520082153
SHA256

fa33a79cef198b9720dcd8c28a345e5532a6bc8c9b79db6640a2a5f6ad56ef82
SHA512

b124fa18b251bc6d297866bbd65584b49f5b75d834700a99d188e70a81b0dd4a62a031f9711fb6d7e214aeec34303bd477ffd1b1a0b59ebe507171e57b8bbf25
SSDEEP

3145728:Kd/l8WVHC8B7nfM3ALahgdEgjpsBiKGgIC59D1Ou2OfM3AL8hgdEgjpsBiKGIICA:K5l8sHCd3AOhERoGzC3D1/Y3AghERoGZ

Score

3^/10

pdf link

Malware Config

Signatures

One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
pdf link

Unsigned PE 54 IoCs

Checks for missing Authenticode signature.

resource
unpack002/ASYCFILT.DLL
unpack002/COMCAT.DLL
unpack002/EXCEL9.OLB
unpack002/GBcommon.dll
unpack002/GSW32.EXE
unpack002/HASPVB32.DLL
unpack002/MFC40.DLL
unpack002/MSSTDFMT.DLL
unpack002/MSVBVM60.DLL
unpack002/MSVCRT40.DLL
unpack002/OLEAUT32.DLL
unpack002/OLEPRO32.DLL
unpack002/RICHED32.DLL
unpack002/SETUP1.EXE
unpack002/ST6UNST.EXE
unpack002/STDOLE2.TLB
unpack002/TKSD10.dll
unpack002/VB6STKIT.DLL
unpack002/dao360.dll
unpack001/Bindu Software/Colorlab/CDRVDL32.DLL
unpack001/Bindu Software/Colorlab/CDRVHF32.DLL
unpack001/Bindu Software/Colorlab/CQOLLib.dll
unpack001/Bindu Software/Colorlab/CmsQ.exe
unpack001/Bindu Software/Colorlab/Colorlab.exe
unpack001/Bindu Software/Colorlab/CommPort.dll
unpack001/Bindu Software/Colorlab/DAO3032.DLL
unpack001/Bindu Software/Colorlab/DAO350.DLL
unpack001/Bindu Software/Colorlab/GBcommon.dll
unpack001/Bindu Software/Colorlab/Hive.dll
unpack001/Bindu Software/Colorlab/Lib1.exe
unpack001/Bindu Software/Colorlab/Locator.dll
unpack001/Bindu Software/Colorlab/MIO32.DLL
unpack001/Bindu Software/Colorlab/Measure.exe
unpack001/Bindu Software/Colorlab/Nrclient.dll
unpack001/Bindu Software/Colorlab/OGBcommon.dll
unpack001/Bindu Software/Colorlab/Qc.exe
unpack001/Bindu Software/Colorlab/ScanS.exe
unpack001/Bindu Software/Colorlab/Spectro.exe
unpack001/Bindu Software/Colorlab/WSC32.DLL
unpack001/Bindu Software/Colorlab/X5VBDriver.dll
unpack001/Bindu Software/Colorlab/XYDRV32.DLL
unpack001/Bindu Software/Colorlab/comms.dll
unpack001/Bindu Software/Colorlab/dao360.dll
unpack001/Bindu Software/Colorlab/haspclnt.dll
unpack001/Bindu Software/Colorlab/haspdev.dll
unpack001/Bindu Software/Colorlab/haspvb32.dll
unpack001/Bindu Software/Colorlab/msxml2.dll
unpack001/Bindu Software/Colorlab/parser.dll
unpack001/Bindu Software/Colorlab/regression_dll.dll
unpack001/Bindu Software/Colorlab/regsvr32.exe
unpack001/Bindu Software/Colorlab/usbiocom2.dll
unpack001/Bindu Software/Colorlab/utility.dll
unpack001/Bindu Software/Colorlab/x2d200.dll
unpack001/Bindu Software/setup.exe

Files

Bindu Software 1.zip
.zip
Bindu Software/Colorlab.CAB
.cab
ASYCFILT.DLL
.dll windows:4 windows x86 arch:x86

28b659576236be75a4bbcbfa9113e470

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ole32

ReleaseStgMedium

user32

UnionRect

gdi32

CreateSolidBrush
SetDIBits
SetMapMode
DeleteObject
PatBlt
GetCurrentObject
SelectObject
SetStretchBltMode
GetObjectA
GetNearestPaletteIndex
SetDIBColorTable
GetNearestColor
SelectPalette
SetDIBitsToDevice
StretchDIBits

kernel32

SetLastError
GetCPInfo
GetACP
GetStartupInfoA
InterlockedIncrement
InitializeCriticalSection
InterlockedDecrement
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
lstrlenA
GlobalDeleteAtom
GlobalAddAtomA
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapFree
GetModuleFileNameA
RtlUnwind
HeapAlloc
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetLocaleInfoA
GetLocaleInfoW
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
LoadLibraryA
FlushFileBuffers
SetFilePointer
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CloseHandle
ReadFile

Exports

Exports

DllCanUnloadNow
FilterCreateInstance

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
COMCAT.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

5316dd1ba7417f578451f902c4b4f845

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ole32

StringFromCLSID
StringFromGUID2
CoTaskMemAlloc
CLSIDFromString
CoTaskMemFree

kernel32

GetModuleFileNameA
lstrlenA
GlobalAlloc
lstrlenW
GetModuleHandleA
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
GetUserDefaultLCID
IsBadWritePtr
GlobalFree

user32

wsprintfA

advapi32

RegCreateKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyW
RegEnumKeyA
RegOpenKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueExW
RegSetValueExA
RegCreateKeyExW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
COMCT232.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

de62eb0090e2f591c9cb423686b9da71

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

comctl32

ord17

kernel32

GlobalSize
GetProcAddress
LoadResource
lstrcmpA
FindResourceA
HeapReAlloc
LockResource
GetLastError
GetLocaleInfoA
InterlockedDecrement
InterlockedIncrement
lstrcpyA
LoadLibraryA
GetWindowsDirectoryA
lstrcatA
MultiByteToWideChar
GetModuleFileNameA
GetProcessHeap
lstrcpynA
GetVersion
lstrlenA
DisableThreadLibraryCalls
CreateFileA
GetFileSize
lstrcmpiA
OpenFile
ReadFile
GlobalAlloc
GlobalLock
GlobalFree
LeaveCriticalSection
HeapFree
WideCharToMultiByte
HeapAlloc
lstrlenW
GlobalUnlock
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
CloseHandle

user32

FillRect
ShowWindow
DestroyIcon
GetDlgItemInt
SetDlgItemInt
SetFocus
EqualRect
LoadIconA
DrawIconEx
GetClipboardFormatNameA
SetWindowLongA
SetWindowPos
GetActiveWindow
CharNextA
DestroyWindow
UnregisterClassA
IsDlgButtonChecked
GetFocus
GetClientRect
SetWindowRgn
ScreenToClient
CreateWindowExA
GetCursorPos
SetCursorPos
RegisterClipboardFormatA
CreateDialogIndirectParamA
IsWindowEnabled
GetNextDlgTabItem
IsChild
IsDialogMessageA
WinHelpA
ScrollWindowEx
InvalidateRect
IntersectRect
SetCapture
ReleaseCapture
PtInRect
GetWindow
MoveWindow
PostMessageA
BeginPaint
EndPaint
SetParent
IsWindowVisible
OffsetRect
ClientToScreen
GetWindowLongA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
EnableWindow
DialogBoxParamA
GetKeyState
CallWindowProcA
GetSysColor
SetRect
DrawEdge
GetSystemMetrics
GetClassInfoA
RegisterClassA
GetDC
ReleaseDC
CharUpperA
EndDialog
MessageBeep
MessageBoxA
SendMessageA
GetDlgItem
IsWindow
GetWindowRect
GetParent
MapWindowPoints
LoadStringA
wsprintfA
DefWindowProcA
GetCapture

ole32

CreateOleAdviseHolder
ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemFree

advapi32

RegDeleteKeyA
RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

oleaut32

SysFreeString
SysAllocStringLen
SafeArrayCopy
SafeArrayRedim
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
OleCreatePictureIndirect
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantCopyInd
VariantCopy
CreateErrorInfo
SetErrorInfo
OleCreatePropertyFrame
LoadTypeLibEx
UnRegisterTypeLi
LoadTypeLi
RegisterTypeLi
VariantChangeType
OleTranslateColor
VariantChangeTypeEx
VariantInit
GetErrorInfo
SysStringLen
SysAllocString
LoadRegTypeLi
VariantClear

gdi32

LPtoDP
SetWindowExtEx
GetWindowExtEx
SetViewportExtEx
GetNearestColor
CreatePalette
CreateDIBitmap
RealizePalette
GetBitmapBits
GetPaletteEntries
CopyMetaFileA
SelectPalette
DeleteDC
GetDeviceCaps
CopyEnhMetaFileA
DeleteObject
SelectObject
CreateICA
CreateCompatibleBitmap
CreateCompatibleDC
StretchBlt
PatBlt
Polyline
CreateSolidBrush
StretchDIBits
GetDIBits
CreatePen
GetObjectA
CreateBitmap
GetSystemPaletteEntries
GetViewportExtEx
SetWindowOrgEx
SetViewportOrgEx
SetBkColor
CreateDCA
SetMapMode
CreateRectRgnIndirect
GetStockObject

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
COMCTL32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

c8cebbf034d8c6304701e5ec3fae70a4

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

16/11/1999, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

04/04/2000, 00:00

Not After

17/04/2001, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

comctl32

ImageList_SetOverlayImage
ImageList_DrawEx
ImageList_GetIconSize
ImageList_SetBkColor
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Add
ImageList_AddMasked
ord16
ord17
ImageList_Draw
ImageList_Create
ImageList_Destroy
ImageList_Remove

kernel32

lstrcmpA
GetProcAddress
GlobalSize
CloseHandle
GetFileSize
ReadFile
lstrcmpiA
IsDBCSLeadByte
lstrcmpiW
LockResource
FindResourceA
LoadResource
GetWindowsDirectoryA
GetLastError
GetLocaleInfoA
OpenFile
MultiByteToWideChar
lstrcatA
DisableThreadLibraryCalls
GetVersion
GetProcessHeap
GetDateFormatA
GetLocalTime
GetTimeFormatA
GetModuleFileNameA
GetCurrentThreadId
LoadLibraryA
GlobalUnlock
GlobalAlloc
GlobalLock
CompareStringA
GlobalFree
GetVersionExA
lstrlenA
lstrcpyA
IsBadReadPtr
HeapReAlloc
lstrcpynA
IsBadWritePtr
InterlockedDecrement
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
InterlockedIncrement
HeapAlloc
lstrlenW
LeaveCriticalSection
EnterCriticalSection

user32

IsWindowVisible
EndPaint
BeginPaint
MoveWindow
CharUpperA
IntersectRect
MessageBeep
SetCursor
EndDialog
RedrawWindow
GetMessagePos
CreateAcceleratorTableA
VkKeyScanA
PeekMessageA
PeekMessageW
SetWindowRgn
RegisterWindowMessageA
RegisterClipboardFormatA
SetCursorPos
OffsetRect
EqualRect
IsChild
GetWindowTextA
SetCapture
GetCursorPos
ScreenToClient
PostMessageA
DrawEdge
GetSysColor
wsprintfA
FillRect
InflateRect
DrawTextA
GetWindowRect
MapVirtualKeyA
DestroyWindow
CreateWindowExA
GetSysColorBrush
GetParent
GetAsyncKeyState
SetWindowLongA
TranslateMessage
DispatchMessageA
IsWindowEnabled
GetActiveWindow
CreateDialogIndirectParamA
IsDialogMessageA
GetNextDlgTabItem
GetWindow
CharNextA
SetParent
InvalidateRect
UpdateWindow
UnregisterClassA
MessageBoxA
SetWindowsHookExA
SetTimer
KillTimer
CheckRadioButton
CallNextHookEx
SetActiveWindow
DestroyIcon
SetFocus
DrawIcon
UnionRect
DialogBoxParamA
PtInRect
LoadCursorA
GetWindowDC
SetRect
IsRectEmpty
GetDC
ReleaseDC
GetClipboardFormatNameA
ClientToScreen
PostMessageW
FrameRect
GetClientRect
CallWindowProcA
GetKeyState
GetCapture
ReleaseCapture
GetClassInfoA
RegisterClassA
LoadIconA
GetSystemMetrics
CopyImage
MapDialogRect
GetWindowLongA
SetWindowPos
GetFocus
EnableWindow
GetDlgItemTextA
SetDlgItemTextA
GetDlgItem
SetDlgItemInt
GetDlgItemInt
IsDlgButtonChecked
SendDlgItemMessageA
CheckDlgButton
LoadStringA
DefWindowProcA
SendMessageA
ShowWindow
WinHelpA
UnhookWindowsHookEx

ole32

CreateStreamOnHGlobal
RevokeDragDrop
CreateOleAdviseHolder
RegisterDragDrop
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
DoDragDrop
ReleaseStgMedium
OleLoadFromStream
OleSaveToStream

advapi32

RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueA
RegEnumKeyExA
RegCloseKey

oleaut32

SafeArrayPutElement
SafeArrayGetElement
SafeArrayRedim
SafeArrayGetUBound
SafeArrayCreate
SafeArrayGetLBound
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayAccessData
VariantCopy
GetErrorInfo
OleCreateFontIndirect
CreateErrorInfo
SetErrorInfo
OleCreatePropertyFrame
LoadTypeLibEx
UnRegisterTypeLi
LoadRegTypeLi
RegisterTypeLi
OleLoadPicture
LoadTypeLi
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
OleCreatePictureIndirect
VariantCopyInd
OleTranslateColor
VariantChangeType
SysFreeString
SysStringLen
VariantClear
SysAllocString
VariantInit
SafeArrayCopy

comdlg32

GetOpenFileNameA

gdi32

GetNearestColor
CreatePalette
LPtoDP
GetWindowExtEx
GetBitmapBits
TextOutA
CreateDIBitmap
RealizePalette
GetViewportExtEx
SelectPalette
GetPaletteEntries
GetDIBits
CopyEnhMetaFileA
CreateICA
CopyMetaFileA
StretchBlt
Rectangle
GetObjectA
SetBkColor
CreateDCA
CreateRectRgn
SetViewportOrgEx
SetWindowOrgEx
DeleteObject
SetWindowExtEx
SetMapMode
SetViewportExtEx
CreateSolidBrush
GetDeviceCaps
SelectObject
ExcludeClipRect
GetClipRgn
SelectClipRgn
GetClipBox
DeleteDC
CreateRectRgnIndirect
CreateCompatibleDC
PatBlt
CreateCompatibleBitmap
SetBkMode
SetTextColor
CreateBitmap
GetStockObject
GetTextExtentPoint32A

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
COMDLG32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

988f29c1eb8054253091352741683c76

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

16/11/1999, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

04/04/2000, 00:00

Not After

17/04/2001, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

HeapReAlloc
GetLastError
LockResource
GetWindowsDirectoryA
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
CompareStringA
CompareStringW
lstrcmpA
GetLocaleInfoA
GetVersion
GetModuleFileNameA
GetFileAttributesA
IsBadWritePtr
DisableThreadLibraryCalls
GlobalAlloc
lstrcmpiA
LoadLibraryA
GetProcAddress
lstrcatA
lstrlenA
lstrcpyA
WriteProfileStringA
GlobalLock
GlobalUnlock
LoadResource
FindResourceA
lstrcpynA
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
GetProfileStringA
EnterCriticalSection
GetProcessHeap
GetCurrentThreadId
MultiByteToWideChar
InitializeCriticalSection
GlobalFree

user32

SetWindowRgn
IntersectRect
EqualRect
PtInRect
IsDialogMessageA
IsChild
GetKeyState
CreateDialogIndirectParamA
MessageBeep
PostMessageA
ClientToScreen
wsprintfA
SendMessageTimeoutA
CharNextA
GetActiveWindow
GetWindowThreadProcessId
LoadCursorA
MessageBoxA
GetWindowLongA
GetWindowRect
CreateWindowExA
SetWindowLongA
ShowWindow
DialogBoxParamA
EnableWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
OffsetRect
GetParent
GetDlgItem
SendMessageA
SetFocus
SetParent
SetDlgItemInt
EndPaint
SetActiveWindow
IsWindowVisible
WinHelpA
GetDlgItemInt
EndDialog
GetDlgItemTextA
DestroyWindow
SetDlgItemTextA
GetWindowTextA
GetNextDlgTabItem
SendDlgItemMessageA
RegisterClassA
GetDC
ReleaseDC
LoadIconA
DrawIcon
DestroyIcon
GetSystemMetrics
RegisterWindowMessageA
LoadStringA
DefWindowProcA
UnregisterClassA
GetClientRect
BeginPaint
RegisterClipboardFormatA
SetWindowPos
MoveWindow

ole32

CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

LoadRegTypeLi
OleCreatePropertyFrame
SetErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
OleLoadPicture
VariantChangeType
RegisterTypeLi
VariantInit
GetErrorInfo
VariantClear
SysStringLen
SysAllocStringLen
OleTranslateColor
SysFreeString
SysAllocString
CreateErrorInfo

comdlg32

CommDlgExtendedError
PrintDlgA
ChooseFontA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA

gdi32

GetDIBits
CreateCompatibleDC
CreateBitmap
GetSystemPaletteEntries
StretchDIBits
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
LPtoDP
SetViewportExtEx
GetViewportExtEx
CreateRectRgnIndirect
GetWindowExtEx
CreateDCA
GetObjectA
EnumFontFamiliesA
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EXCEL9.OLB
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 616KB - Virtual size: 615KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GAUGE32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

e310a2c4c76b0c725022d0e6746fb660

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

mfc40

ord5630
ord1075
ord1035
ord1085
ord1097
ord731
ord5352
ord2815
ord5301
ord2801
ord5200
ord2548
ord5279
ord2728
ord4863
ord729
ord1633
ord265
ord3738
ord2176
ord2358
ord5637
ord3952
ord2860
ord2916
ord3202
ord651
ord403
ord1043
ord1071
ord1084
ord2135
ord1464
ord4973
ord881
ord3827
ord4154
ord4113
ord5023
ord1873
ord4314
ord4375
ord5001
ord3611
ord4133
ord4132
ord4230
ord4124
ord4360
ord4024
ord3997
ord4070
ord4441
ord4380
ord4385
ord4390
ord4122
ord4156
ord4473
ord4127
ord4117
ord4241
ord4123
ord4111
ord4110
ord4505
ord4060
ord3854
ord3844
ord3840
ord4202
ord4204
ord4201
ord3892
ord4079
ord4459
ord3898
ord4444
ord4432
ord2177
ord2963
ord5363
ord3578
ord1540
ord3890
ord4657
ord2086
ord4608
ord5643
ord3837
ord4704
ord3314
ord4296
ord3922
ord2323
ord1785
ord5649
ord3268
ord4510
ord1494
ord2140
ord1850
ord4691
ord2618
ord2755
ord2844
ord3946
ord2851
ord2621
ord2695
ord3458
ord2234
ord5053
ord632
ord665
ord1868
ord3452
ord2312
ord426
ord721
ord504
ord3110
ord3158
ord569
ord2106
ord2115
ord5121
ord5124
ord3630
ord3784
ord423
ord1426
ord1425
ord2635
ord314
ord4737
ord267
ord4740
ord5648
ord2223
ord2378
ord1359
ord4403
ord2199
ord570
ord706
ord4677
ord5341
ord1456
ord3530
ord2451
ord3049
ord3335
ord1400
ord5389
ord3112
ord3214
ord5123
ord5420
ord4999
ord5568
ord5241
ord1394
ord4435
ord4681
ord3859
ord4312
ord4450
ord5360
ord1539
ord5647
ord4694
ord4101
ord3907
ord3134
ord762
ord486
ord315
ord1996
ord2072
ord3724
ord5275
ord4173
ord662
ord1014
ord421
ord3956
ord1647
ord2894
ord5638
ord1073
ord4046
ord4141
ord4302
ord4462
ord4176
ord5644
ord4700
ord3919
ord2861
ord4099
ord654
ord406
ord1986
ord2004
ord1989
ord2007
ord1975
ord2001
ord2064
ord3714
ord1366
ord974
ord5370
ord3656
ord3028
ord615
ord362
ord810
ord4952
ord483
ord3684
ord5550
ord978
ord979
ord4703
ord4719
ord4165
ord3579
ord2389
ord4715
ord4713
ord2909
ord2097
ord4627
ord965
ord3431
ord5070
ord2197
ord3192
ord3906
ord4096
ord3580
ord2694
ord3340
ord3346
ord3345
ord2960
ord2696
ord2620
ord2845
ord2744
ord3945
ord2843
ord2754
ord2617
ord381
ord3185
ord4098
ord3963
ord5160
ord3581
ord4724
ord1042
ord999
ord1000
ord711
ord671
ord733
ord269
ord1370
ord988
ord5681
ord1367
ord1046
ord328
ord1105
ord1369

msvcrt40

_onexit
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
__dllonexit
_EH_prolog
_mbsrev
wcslen
_adj_fdivr_m64
_ftol
__CxxFrameHandler

kernel32

GetVersion
Sleep
LocalAlloc
LocalFree
MulDiv
lstrlenA
lstrcmpA
FindResourceA
LoadResource
LockResource
SizeofResource
GetPrivateProfileStringA
lstrcmpiA
GetModuleFileNameA
lstrcpyA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree

user32

DestroyMenu
FillRect
GetCursorPos
SetCursor
LoadCursorA
SendMessageA
LoadMenuA
WinHelpA
CopyRect
ReleaseDC
EnableWindow
LoadBitmapA
GetSysColor
GetDC

gdi32

CreateBitmap
CreateDCA
CreateSolidBrush
StretchDIBits
GetDIBits
GetSystemPaletteEntries
GetObjectA
Rectangle
RoundRect
CreatePen
GetDeviceCaps
RealizePalette
SelectPalette
BitBlt
CreateICA
EnumFontFamiliesA
CreateCompatibleDC

advapi32

RegOpenKeyA
RegQueryValueA
RegCloseKey

ole32

CoTaskMemFree

oleaut32

LoadTypeLi
SysFreeString
SysAllocString
LoadRegTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GBcommon.dll
.dll regsvr32 windows:4 windows x86 arch:x86

5e42e017f89e5dd14e14e0cda8f854c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord519
ord553
ord660
ord662
ord663
ord557
ord592
ord593
ord594
ord595
ord303
ord705
ord520
ord309
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord560
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord605
ord712
ord606
ord713
ord607
ord608
ord715
ord716
ProcCallEngine
ord536
ord644
ord537
ord648
ord573
ord681
ord685
ord101
ord102
ord103
ord104
ord610
ord105
ord612
ord613
ord616
ord617
ord619
ord542
ord650
ord652
ord545
ord546
ord581

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GRAPH32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

94a0b1763e7f6dc0739c885b66d28583

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gswdll32

ord21
ord85
ord86
ord83
ord124
ord84
ord11
ord15
ord14
ord160
ord161
ord162
ord97
ord92
ord93
ord94
ord19
ord20
ord96
ord95
ord91
ord99
ord100
ord131
ord130
ord127
ord128
ord129
ord132
ord136
ord135
ord137
ord198
ord196
ord197
ord199
ord169
ord22
ord89
ord138
ord201
ord157
ord125
ord107
ord8
ord163
ord159
ord102
ord2
ord1
ord4
ord5
ord133
ord134

mfc40

ord3919
ord4296
ord3314
ord4700
ord2323
ord3268
ord4510
ord1785
ord4677
ord2140
ord5649
ord1494
ord2861
ord4099
ord3907
ord1986
ord706
ord1850
ord3080
ord486
ord5405
ord2636
ord5411
ord760
ord4691
ord3086
ord2064
ord2060
ord3560
ord2001
ord1115
ord267
ord312
ord1359
ord5610
ord1555
ord3762
ord2255
ord3427
ord1540
ord3879
ord5647
ord4704
ord3922
ord2845
ord2961
ord4101
ord3113
ord3185
ord3110
ord3158
ord542
ord1543
ord5363
ord2115
ord569
ord4642
ord5332
ord5121
ord1426
ord1425
ord314
ord2145
ord1116
ord1121
ord1014
ord1587
ord3145
ord582
ord2317
ord2081
ord2515
ord2704
ord2112
ord1752
ord3709
ord2258
ord3881
ord3120
ord724
ord548
ord701
ord2008
ord2007
ord3620
ord3656
ord1122
ord5492
ord2710
ord5296
ord5273
ord4593
ord5648
ord3963
ord2234
ord2197
ord5070
ord3431
ord965
ord4627
ord2097
ord2909
ord4713
ord4715
ord2389
ord3579
ord4165
ord4719
ord509
ord3242
ord3458
ord2960
ord3192
ord721
ord504
ord532
ord5630
ord1075
ord1097
ord1085
ord2072
ord1996
ord2004
ord3714
ord3084
ord5409
ord2068
ord834
ord836
ord762
ord2426
ord3764
ord3626
ord1366
ord974
ord1118
ord1387
ord4739
ord4740
ord4731
ord4732
ord4742
ord4741
ord481
ord835
ord5190
ord651
ord819
ord483
ord392
ord654
ord2155
ord3537
ord1436
ord3012
ord4933
ord2069
ord5352
ord2815
ord5211
ord4608
ord3837
ord2728
ord4863
ord2176
ord2358
ord1043
ord1071
ord2135
ord1464
ord4973
ord881
ord3827
ord4154
ord4113
ord5023
ord1873
ord4314
ord4375
ord5001
ord3611
ord4230
ord4024
ord3997
ord4070
ord4441
ord4380
ord4385
ord4390
ord4122
ord4156
ord4473
ord4127
ord4117
ord4241
ord4123
ord4111
ord4110
ord4505
ord4060
ord3854
ord3844
ord3840
ord4202
ord4204
ord4201
ord3892
ord4079
ord4459
ord3898
ord4432
ord2177
ord2963
ord5643
ord2618
ord2755
ord2844
ord3946
ord2851
ord2621
ord2695
ord3581
ord4098
ord5160
ord665
ord1868
ord5317
ord3452
ord426
ord3227
ord5122
ord3112
ord5568
ord1390
ord3819
ord4360
ord4444
ord1400
ord4747
ord3523
ord2223
ord2378
ord4403
ord1394
ord4124
ord4133
ord4132
ord570
ord1456
ord3530
ord618
ord3049
ord1882
ord2635
ord368
ord5389
ord2236
ord5341
ord3010
ord662
ord421
ord3724
ord4173
ord4694
ord3134
ord315
ord5031
ord1449
ord2327
ord2579
ord3153
ord1633
ord3738
ord3076
ord2741
ord3838
ord4015
ord4010
ord632
ord381
ord2293
ord2557
ord4931
ord3313
ord2510
ord2126
ord1647
ord406
ord5370
ord3028
ord4462
ord615
ord362
ord810
ord4952
ord3684
ord5550
ord978
ord979
ord3202
ord3906
ord4096
ord3580
ord2694
ord3340
ord3346
ord3345
ord2916
ord2696
ord2620
ord2860
ord2744
ord3945
ord2843
ord2754
ord2617
ord3952
ord5638
ord2894
ord5637
ord265
ord729
ord5644
ord3890
ord2086
ord4657
ord5360
ord1539
ord3578
ord4450
ord2199
ord4176
ord4681
ord4312
ord3859
ord1084
ord4302
ord4046
ord731
ord1035
ord1073
ord2556
ord403
ord5279
ord4703
ord5053
ord5193
ord269
ord1370
ord1105
ord999
ord1000
ord711
ord671
ord733
ord1042
ord1369
ord988
ord5681
ord1367
ord1046
ord328

msvcrt40

malloc
_adjust_fdiv
strncat
memmove
_CxxThrowException
_purecall
_splitpath
_fullpath
_fcvt
__CxxFrameHandler
_initterm
free
??1type_info@@UAE@XZ
_onexit
__dllonexit
_EH_prolog
_mbsrev
rand
_itoa
_makepath
_ftol
_mbscmp
atof
atoi
sprintf
wcslen

kernel32

LocalFree
GetPrivateProfileStringA
lstrcmpiA
lstrcmpA
MulDiv
GetTempPathA
lstrcpyA
DeleteFileA
GetProfileStringA
GetTempFileNameA
FindResourceA
LoadResource
GetModuleFileNameA
SizeofResource
GlobalAlloc
LockResource
GlobalHandle
GlobalUnlock
GlobalLock
Sleep
GetVersion
GlobalFree
lstrlenA
LocalAlloc

user32

GetDC
BeginPaint
InflateRect
ReleaseDC
WinHelpA
EndPaint
GetSystemMetrics
GetFocus
DrawFocusRect
GetSysColor
LoadCursorA
SetCursor
IsWindowVisible
GetClientRect
GetKeyState
FillRect
wsprintfA
GetParent
SendMessageA
CopyRect
EnableWindow

gdi32

EnumFontFamiliesA
CreateICA
CreateFontA
GetBkColor
GetDeviceCaps
CreateMetaFileA
CloseMetaFile
CreateSolidBrush
GetMetaFileA
CreateRectRgn
EnumMetaFile
PlayMetaFileRecord
SetMetaFileBitsEx
BitBlt
DeleteMetaFile
CreateCompatibleDC
CreateCompatibleBitmap
PatBlt

advapi32

RegOpenKeyA
RegQueryValueA
RegCloseKey

shell32

ShellExecuteA

ole32

CoTaskMemFree

oleaut32

LoadRegTypeLi
LoadTypeLi
SysAllocString
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GRID32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

aa397ae0ecb120f6eee8e755b51de435

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc40

ord721
ord504
ord731
ord5630
ord1075
ord3192
ord1035
ord1085
ord1097
ord5352
ord5299
ord2792
ord5279
ord2728
ord5301
ord2801
ord5200
ord2548
ord4863
ord729
ord1633
ord265
ord3738
ord2176
ord2358
ord5637
ord3952
ord2860
ord2916
ord3202
ord651
ord403
ord1043
ord1071
ord1084
ord2135
ord1464
ord4973
ord881
ord3827
ord4154
ord4113
ord5023
ord1873
ord4314
ord4375
ord5001
ord3611
ord4133
ord4132
ord4230
ord4360
ord4024
ord3997
ord4070
ord4441
ord4380
ord4385
ord4390
ord4122
ord4096
ord3906
ord4473
ord4117
ord4241
ord4123
ord4111
ord4110
ord4505
ord4060
ord3854
ord3844
ord3840
ord4202
ord3892
ord4079
ord4459
ord3898
ord4444
ord4432
ord2177
ord2963
ord5363
ord3578
ord1540
ord3890
ord4657
ord2086
ord4608
ord5643
ord3837
ord3314
ord4296
ord3922
ord2323
ord1785
ord5649
ord3268
ord4510
ord1494
ord2140
ord1850
ord4691
ord2618
ord2755
ord2844
ord3946
ord2851
ord2621
ord2695
ord3581
ord4098
ord5160
ord632
ord665
ord1868
ord3452
ord426
ord381
ord974
ord3112
ord3158
ord4719
ord4156
ord4127
ord4999
ord3527
ord3340
ord3580
ord2795
ord1426
ord5568
ord5207
ord3523
ord5465
ord2794
ord4738
ord4740
ord4724
ord4739
ord4747
ord2223
ord2378
ord4403
ord1456
ord5341
ord4435
ord3049
ord3335
ord1400
ord5389
ord570
ord2199
ord2389
ord2515
ord4677
ord3010
ord4161
ord4593
ord4223
ord4228
ord4206
ord4448
ord4248
ord3862
ord4504
ord4503
ord1394
ord2815
ord4855
ord2451
ord3530
ord5296
ord569
ord1425
ord314
ord3098
ord2894
ord5638
ord1073
ord4046
ord4302
ord4681
ord3859
ord4312
ord4450
ord4176
ord5360
ord1539
ord5644
ord4700
ord3919
ord2861
ord4099
ord3907
ord654
ord1986
ord2064
ord1989
ord5405
ord2004
ord3080
ord2007
ord1975
ord679
ord5192
ord1366
ord450
ord706
ord834
ord817
ord483
ord485
ord762
ord2707
ord486
ord5427
ord5428
ord5105
ord1647
ord5748
ord406
ord3714
ord5370
ord3028
ord4462
ord615
ord362
ord810
ord4952
ord3684
ord5550
ord481
ord1105
ord1369
ord1042
ord328
ord1046
ord1367
ord5681
ord988
ord1370
ord269
ord733
ord671
ord711
ord2234
ord3963
ord5648
ord3458
ord4165
ord3579
ord4715
ord4713
ord2909
ord2097
ord4627
ord965
ord2694
ord2960
ord3346
ord3345
ord2845
ord2696
ord2620
ord2843
ord2744
ord3945
ord5053
ord2754
ord2617
ord2511
ord4703
ord5129
ord3431
ord5070
ord2197
ord5123
ord3185
ord2115
ord315
ord1000
ord999

msvcrt40

_mbsrev
wcslen
free
__CxxFrameHandler
_ltoa
__dllonexit
_onexit
_EH_prolog
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ

kernel32

Sleep
LocalAlloc
GetVersion
MulDiv
lstrlenA
LocalFree
FindResourceA
LoadResource
lstrcmpA
SizeofResource
GetPrivateProfileStringA
LockResource
lstrcpyA
GetModuleFileNameA
lstrcmpiA
GlobalAlloc
GlobalFree
IsDBCSLeadByte

user32

ReleaseCapture
InvalidateRect
WinHelpA
HideCaret
SetCapture
ClientToScreen
SendMessageA
GetSysColor
GetSystemMetrics
DrawFocusRect
SetCaretPos
CreateCaret
GetAsyncKeyState
UnionRect
EnableWindow
GetCapture
GetActiveWindow
ScreenToClient
LoadCursorA
CharNextA
EqualRect
SetCursor
GetCursorPos
GetCaretBlinkTime
SetCaretBlinkTime
ShowCaret
FillRect
ClipCursor
InflateRect
ReleaseDC
GetDC
GetFocus

gdi32

PatBlt
DeleteObject
GetStockObject
GetObjectA
SelectObject
GetTextExtentPointA
GetTextMetricsA
CreateSolidBrush
CreateICA
GetDeviceCaps
EnumFontFamiliesA

ole32

CoInitialize
CoGetMalloc
CoUninitialize

oleaut32

VariantInit
VariantChangeType
SysFreeString
SysAllocString
LoadRegTypeLi
LoadTypeLi

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GSW32.EXE
.exe windows:1 windows x86 arch:x86

050ed1121bef8133eb26bab7ee682868

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gswdll32

ord77
ord22
ord21
ord79
ord80
ord85
ord16
ord15
ord11
ord45
ord164
ord165
ord61
ord63
ord166
ord78
ord54
ord53
ord59
ord81
ord64
ord140
ord148
ord143
ord75
ord58
ord65
ord67
ord66
ord68
ord57
ord69
ord167
ord50
ord46
ord56
ord83
ord48
ord55
ord32
ord34
ord90
ord25
ord44
ord42
ord84
ord43
ord41
ord86
ord24
ord23
ord2
ord1
ord76

kernel32

lstrcatA
lstrcpyA
lstrlenA
GlobalLock
GlobalAlloc
GlobalFree
GlobalHandle
GlobalUnlock
GlobalReAlloc
CreateMutexA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
MulDiv
_lwrite
_llseek
_lread
LocalFree
LocalAlloc
LocalHandle
_lclose
OpenFile
_hread
_hwrite
LocalLock
LocalUnlock
FreeLibrary
GetCurrentThreadId
TlsSetValue
TlsGetValue
SetLastError
GetLastError
FindResourceA
lstrcmpiA
lstrcmpA
GetVersion
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
GlobalAddAtomA
FreeResource
LockResource
LoadResource
WideCharToMultiByte
MultiByteToWideChar
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetModuleFileNameA
RtlUnwind
RaiseException
GetStartupInfoA
GetEnvironmentStrings
GetCommandLineA
LoadLibraryA
ExitProcess
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
GetStdHandle
GetFileType
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetStdHandle

user32

GetDlgItem
GetTopWindow
AdjustWindowRectEx
GetSystemMenu
GetMenuItemCount
GetMenuItemID
DeleteMenu
LoadStringA
AppendMenuA
GetWindowLongA
DefWindowProcA
GetDlgCtrlID
GetCapture
WinHelpA
GetMenu
GetSubMenu
CallWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SystemParametersInfoA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
EnableWindow
GetLastActivePopup
SetWindowPos
IsWindowEnabled
GetFocus
GetParent
SendMessageA
GetClassNameA
GrayStringA
DrawTextA
TabbedTextOutA
UnhookWindowsHookEx
SetClipboardData
EmptyClipboard
OpenClipboard
EnumClipboardFormats
GetClipboardData
CloseClipboard
PeekMessageA
IsDialogMessageA
CreateDialogParamA
GetWindowRect
OffsetRect
MoveWindow
GetWindowTextA
GetCursorPos
WindowFromPoint
GetSystemMetrics
SetRect
GetSysColor
InvalidateRect
GetScrollRange
ReleaseDC
DialogBoxParamA
PostQuitMessage
DestroyWindow
MessageBoxA
LoadCursorA
RegisterClassA
LoadIconA
RegisterWindowMessageA
CreateWindowExA
EnableMenuItem
ShowWindow
GetMessageA
DispatchMessageA
TranslateMessage
EndDialog
SetWindowTextA
SetDlgItemTextA
IsWindow
PostMessageA
MessageBeep
ScrollWindow
SetScrollPos
GetUpdateRect
ValidateRect
SetFocus
SetCursor
BeginPaint
EndPaint
SetScrollRange
GetClassLongA
SetWindowLongA
GetClientRect
GetDC
DestroyMenu
UpdateWindow
PostThreadMessageA
PtInRect

gdi32

GetViewportExtEx
SelectObject
PatBlt
DeleteObject
SetPolyFillMode
CombineRgn
CreateSolidBrush
DeleteDC
PlayMetaFile
GetStockObject
CreateCompatibleDC
CreateMetaFileA
CloseMetaFile
SaveDC
GetDeviceCaps
RestoreDC
LPtoDP
CreatePolygonRgn
CreateCompatibleBitmap
CreateICA
Rectangle
GetObjectA
LineTo
MoveToEx
CreatePen
Pie
CreateRectRgn
Arc
Polygon
Ellipse
FloodFill
SetBkMode
Polyline
CreateHatchBrush
GetTextMetricsA
CreatePatternBrush
TextOutA
SetTextColor
CreateFontIndirectA
GetTextExtentPointA
SetBkColor
SetTextAlign
DeleteMetaFile
PlayMetaFileRecord
SetROP2
GetMetaFileBitsEx
EnumMetaFile
PtInRegion
ExtTextOutA
RectVisible
PtVisible
GetClipBox
ScaleWindowExtEx
EndDoc
ScaleViewportExtEx
OffsetViewportOrgEx
SelectPalette
DPtoLP
CreateBitmap
SetBitmapDimensionEx
GetViewportOrgEx
IntersectClipRect
StretchDIBits
GetWindowExtEx
GetMapMode
BitBlt
EndPage
StartPage
SetWindowExtEx
SetAbortProc
StartDocA
CreateDCA
Escape
SelectClipRgn
SetMapMode
SetViewportExtEx
SetViewportOrgEx
SetWindowOrgEx
GetPaletteEntries
CreatePalette
RealizePalette
GetDIBits

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Exports

Exports

DrawingWndProc
PrintAbortProc
PrintDialogProc
ServerWndProc

Sections

.text
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GSWDLL32.DLL
.dll windows:1 windows x86 arch:x86

5842ad791770d92ddce27ff73422faf6

Code Sign

66:a1:32:08:60:00:aa:a4:11:d1:f0:1d:ca:33:f9:a3
Certificate

Issuer

CN=Root Agency

Not Before

20/05/1998, 20:04

Not After

31/12/2039, 23:59

Subject

CN=Microsoft

13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 07:00

Not After

31/12/1999, 07:00

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

bd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 07:00

Not After

31/12/1999, 07:00

Subject

OU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalUnlock
LocalLock
LocalAlloc
LocalFree
CloseHandle
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
OpenMutexA
lstrcpyA
WinExec
GetCurrentProcessId
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalHandle
ReleaseMutex
GlobalSize
WaitForSingleObject
GlobalReAlloc
lstrlenA
TlsAlloc
GetLogicalDrives
TlsFree
GetCurrentDirectoryA
GetFullPathNameA
GetModuleHandleA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
GetEnvironmentStrings
GetCommandLineA
GetVersion
GetProcAddress
LoadLibraryA
ExitProcess
GetCurrentThreadId
TlsSetValue
GetCPInfo
GetOEMCP
TlsGetValue
LeaveCriticalSection
VirtualFree
VirtualAlloc
GetModuleFileNameA
GetACP
EnterCriticalSection
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
InitializeCriticalSection
DeleteCriticalSection

user32

SendMessageA
LoadStringA
RegisterWindowMessageA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

CommDlgExtendedError
PrintDlgA

Exports

Exports

AGAmp
AGAux
AGClose
AGClr
AGCurveStyle
AGDist
AGFontStyle
AGHot
AGInfo
AGInfo_
AGLabels
AGLegend
AGLegendStyle
AGOpen
AGPatt
AGReset
AGShow
AGSym
AGTitleG
AGTitleX
AGTitleY
AGXAxisStyle
AGYAxisStyle
DllEntryPoint
GSArc
GSArea
GSArea3D
GSArrow
GSAxis
GSBar2D
GSBar3D
GSBox2D
GSBox3D
GSBubbleChart
GSCage3D
GSCircle
GSClearView
GSClipRead
GSClipWrite
GSClosePrn
GSCloseServer
GSCloseView
GSCloseWin
GSCurveFit
GSDataAmp
GSDataAux
GSDataClr
GSDataDim
GSDataDist
GSDataGetAmp
GSDataGetAmp_
GSDataGetAux
GSDataGetClr
GSDataGetDist
GSDataGetDist_
GSDataGetPatt
GSDataGetSym
GSDataPatt
GSDataRange
GSDataReset
GSDataScale
GSDataStoreAmp
GSDataStoreAux
GSDataStoreClr
GSDataStoreDist
GSDataStorePatt
GSDataStoreSym
GSDataSym
GSDataTrans
GSDefPatt
GSEllipse
GSFixPos
GSGantt
GSGetACos
GSGetACos_
GSGetALog10
GSGetALog10_
GSGetALogE
GSGetALogE_
GSGetASin
GSGetASin_
GSGetATan
GSGetATan_
GSGetAXExt
GSGetAXExt_
GSGetAYExt
GSGetAYExt_
GSGetBG
GSGetCC
GSGetCC_
GSGetCos
GSGetCos_
GSGetCurX
GSGetCurX_
GSGetCurY
GSGetCurY_
GSGetCurveCoeff
GSGetCurveCoeff_
GSGetE
GSGetE_
GSGetLog10
GSGetLog10_
GSGetLogE
GSGetLogE_
GSGetMF
GSGetMax
GSGetMax_
GSGetMean
GSGetMean_
GSGetMin
GSGetMin_
GSGetPi
GSGetPi_
GSGetPrnHt
GSGetPrnHt_
GSGetPrnWid
GSGetPrnWid_
GSGetRTextHt
GSGetRTextHt_
GSGetRTextWid
GSGetRTextWid_
GSGetSD
GSGetSD_
GSGetSFHt
GSGetSFHt_
GSGetSFWid
GSGetSFWid_
GSGetSXExt
GSGetSXExt_
GSGetSYExt
GSGetSYExt_
GSGetSin
GSGetSin_
GSGetTan
GSGetTan_
GSGetVXExt
GSGetVXExt_
GSGetVYExt
GSGetVYExt_
GSGetVer
GSGetWXExt
GSGetWXExt_
GSGetWYExt
GSGetWYExt_
GSGrid
GSHLC
GSHotGraph
GSLabelPie
GSLabelX
GSLabelY
GSLabelnPie
GSLabelnX
GSLabelnY
GSLegend
GSLineAbs
GSLineFit
GSLineRel
GSLoadRFont
GSLoadVFont
GSLogAxis
GSLogGrid
GSLogLin
GSLogLog
GSMClrRgn
GSMGetX
GSMGetX_
GSMGetY
GSMGetY_
GSMMotion
GSMNotify
GSMPtrOff
GSMPtrOn
GSMPtrType
GSMSetRgn
GSMStatus
GSMean
GSMinMax
GSMovePos
GSOffView
GSOnView
GSOpenChildWin
GSOpenPrn
GSOpenServer
GSOpenView
GSOpenWin
GSPicRead
GSPicWrite
GSPie2D
GSPie3D
GSPolar
GSPolarAxes
GSPolyFill
GSPolyVec
GSPrnOut
GSPrnSetup
GSRText
GSSD
GSScatter
GSSetBG
GSSetPal
GSSetRFontFace
GSSetROP
GSSetVFontFace
GSShade
GSSizeSymbol
GSStatsArr
GSStatsWin
GSSymbol
GSTapeGraph
GSUseView
GSVText
GSWinHandle
GSWinNotify
GSWinPaint
GSXYGraph

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI1_
Size: 1024B - Virtual size: 869B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI2_
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI3_
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI4_
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI5_
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI6_
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI7_
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI8_
Size: 1024B - Virtual size: 1005B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GDLAPI9_
Size: 1024B - Virtual size: 773B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HASPVB32.DLL
.dll windows:4 windows x86 arch:x86

69b1061ca0527a41b0830cabda65410b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
DeviceIoControl
GetCurrentProcessId
GetModuleHandleA
GetLastError
GetTickCount
SetErrorMode
LocalAlloc
LocalFree
ReadFile
FreeLibrary
CreateFileA
CloseHandle
GetEnvironmentVariableA
SearchPathA
Sleep
WaitForSingleObject
CreateSemaphoreA
OpenSemaphoreA
ReleaseSemaphore

Exports

Exports

GetEncDecBlock
ReadHaspBlock
SetEncDecBlock
WriteHaspBlock
hasp

Sections

.text
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CONST
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MDAC_TYP.EXE
.exe windows:5 windows x86 arch:x86

b83464d8132ecd9f810820e192566e15

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

16/11/1999, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

55:0d:88:f5:3f:64:16:d7:0c:73:00:d8:45:92:16:34
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

19/03/1999, 00:00

Not After

16/04/2000, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

lstrcatA
GetFileAttributesA
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentProcess
lstrlenA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
FreeLibrary
LocalAlloc
GetLastError
GetSystemDirectoryA
LoadLibraryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
GetWindowsDirectoryA
GetProcAddress
RemoveDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
CloseHandle
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
GetVersionExA
LocalFree
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDiskFreeSpaceA
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetCommandLineA
CreateDirectoryA
GlobalFree
FormatMessageA
IsDBCSLeadByte

gdi32

GetDeviceCaps

user32

EndDialog
wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
GetDesktopWindow
SetWindowLongA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
EnableWindow
GetDlgItemTextA
SendMessageA
DispatchMessageA
LoadStringA
PeekMessageA
MessageBoxA
CharPrevA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
MsgWaitForMultipleObjects

comctl32

ord17

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MFC40.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

ef3d32741141a9ffde06721c65ea07b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt40

_purecall
strftime
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
??1type_info@@UAE@XZ
_mbsnbicmp
_itoa
_mbsicmp
_mbsnbcpy
_ltoa
_ultoa
fabs
floor
modf
labs
_ftol
swprintf
wcscpy
_mbsnbcmp
_strdup
__p___argv
__p___argc
_beginthreadex
_EH_prolog
_endthreadex
_mbsdec
__p___mb_cur_max
_isctype
__p__pctype
_expand
strcpy
strtod
sprintf
strtol
strtoul
abs
memcmp
calloc
_msize
__CxxFrameHandler
__p__mbctype
localtime
gmtime
time
mktime
_ismbcspace
atoi
_ismbcdigit
_mbclen
vsprintf
_mbsstr
_mbsrchr
_mbscspn
_mbsspn
_mbsrev
_mbspbrk
_mbschr
wcslen
_mbscmp
realloc
fclose
fflush
fseek
ftell
fgets
fputs
fwrite
fread
clearerr
_open_osfhandle
_fdopen
__doserrno
_get_osfhandle
memset
_mbsinc
strlen
abort
free
malloc
memmove
memcpy
_CxxThrowException

kernel32

GlobalFlags
GetProcAddress
FreeLibrary
FindClose
MoveFileA
DeleteFileA
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
GetShortPathNameA
GetModuleFileNameA
GlobalSize
GlobalLock
GlobalAlloc
GlobalReAlloc
GlobalUnlock
GlobalFree
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileAttributesA
SetFileTime
GetFileAttributesA
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
LocalFree
FormatMessageA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCPInfo
GetOEMCP
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
UnlockFile
SetEndOfFile
LockFile
GetVersion
WaitForSingleObject
CreateSemaphoreA
ReleaseSemaphore
CreateMutexA
ReleaseMutex
CreateEventA
WaitForMultipleObjects
GetCurrentThreadId
lstrcatA
LockResource
LoadResource
FindResourceA
GlobalAddAtomA
GlobalGetAtomNameA
MulDiv
GetProfileIntA
VirtualProtect
SizeofResource
GetProcessVersion
IsBadWritePtr
GetTempFileNameA
GetDiskFreeSpaceA
LocalUnlock
LocalLock
GetTempPathA
SearchPathA
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
GetCurrentThread
GlobalDeleteAtom
SetErrorMode
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
GetTickCount
GetUserDefaultLCID
IsDBCSLeadByte
GetModuleHandleA
DisableThreadLibraryCalls
GetSystemDirectoryA
Sleep
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
lstrcmpA
OutputDebugStringA
lstrlenA
IsBadStringPtrW
lstrcpynA
IsBadStringPtrA
SetLastError
TlsGetValue
GetLastError
LoadLibraryA
lstrcpyA
TlsSetValue
IsBadReadPtr
LocalReAlloc

gdi32

MoveToEx
CreateSolidBrush
DeleteDC
StretchDIBits
CreateCompatibleBitmap
GetStockObject
SaveDC
RestoreDC
GetNearestColor
GetBkColor
GetTextColor
GetBkMode
GetROP2
DeleteObject
GetViewportExtEx
GetWindowExtEx
GetTextFaceA
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ExtTextOutA
GetTextExtentPointA
GetCharWidthA
GetCurrentPositionEx
Escape
GetDeviceCaps
SetWindowOrgEx
GetWindowOrgEx
GetViewportOrgEx
IntersectClipRect
PtVisible
RectVisible
DeleteMetaFile
CloseMetaFile
TextOutA
CreatePen
CreatePatternBrush
CreateBitmap
PatBlt
Rectangle
UnrealizeObject
CreateRectRgnIndirect
CreateDCA
StartDocA
CreateFontIndirectA
ScaleWindowExtEx
CreateCompatibleDC
SetROP2
SetStretchBltMode
OffsetWindowOrgEx
SelectClipRgn
ExcludeClipRect
OffsetClipRgn
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
GetObjectType
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
GetMapMode
CombineRgn
SetRectRgn
DPtoLP
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
LPtoDP
SetBrushOrgEx
CopyMetaFileA
CreateMetaFileA
RealizePalette
GetPaletteEntries
CreatePalette
GetPixel
EnumFontFamiliesA
GetPolyFillMode
GetClipBox
BitBlt
GetObjectA
GetTextMetricsA
SelectObject
GetTextAlign
SetBkColor
SetTextColor
SelectPalette
GetStretchBltMode
SetBkMode
SetPolyFillMode

user32

IsIconic
BringWindowToTop
CharUpperA
GetSystemMetrics
CharLowerA
CharToOemA
OemToCharA
UnhookWindowsHookEx
MsgWaitForMultipleObjects
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindowLongA
GetWindowRect
GetWindow
GetMessagePos
GetMessageTime
CallWindowProcA
RemovePropA
GetPropA
SendMessageA
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
SetPropA
SetWindowsHookExA
CallNextHookEx
CreateWindowExA
DestroyWindow
DefWindowProcA
GetKeyState
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
GetDlgItem
GetWindowPlacement
SetWindowPlacement
TrackPopupMenu
GetMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetScrollInfo
GetParent
IsChild
EnableWindow
IsWindowEnabled
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
ScrollWindow
ScreenToClient
IsWindowVisible
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
AdjustWindowRectEx
SetFocus
IsWindow
SetActiveWindow
GetFocus
PeekMessageA
DispatchMessageA
GetSysColor
MapWindowPoints
SystemParametersInfoA
SendDlgItemMessageA
UpdateWindow
PostMessageA
LoadIconA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
SetCursor
GetDesktopWindow
ShowWindow
GetActiveWindow
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
LoadStringA
wsprintfA
IntersectRect
LoadCursorA
SetCapture
WaitMessage
GetCursorPos
GetWindowThreadProcessId
WindowFromPoint
TranslateMessage
GetMessageA
ClientToScreen
DefFrameProcA
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
RedrawWindow
LoadBitmapA
InflateRect
PtInRect
ReleaseDC
InvertRect
GetWindowDC
OffsetRect
FillRect
SetTimer
KillTimer
SetRect
GetDC
IsZoomed
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
GetDCEx
LockWindowUpdate
GetTabbedTextExtentA
DrawTextA
GrayStringA
DrawFocusRect
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
wvsprintfA
GetAsyncKeyState
MapDialogRect
GetDialogBaseUnits
BeginPaint
EndPaint
TabbedTextOutA
GetClassNameA
SetWindowTextA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
MoveWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
DestroyIcon
SetCursorPos
DestroyCursor
IsClipboardFormatAvailable
MessageBeep
RemoveMenu
SetMessageQueue
ValidateRect
PostQuitMessage
UnregisterClassA
ShowOwnedPopups
MessageBoxA
InsertMenuA
GetMenuStringA
RegisterClipboardFormatA
ClipCursor
CopyAcceleratorTableA
InSendMessage
PostThreadMessageA
CreateMenu
CountClipboardFormats
CharNextA
GetNextDlgGroupItem
DrawEdge
EnumChildWindows
FrameRect

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 596KB - Virtual size: 595KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSCOMCT2.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

71e4dc10f7cc0c7bb2b43714bb9f46c1

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:0e:7d:a7:00:00:00:00:00:48
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/10/2003, 05:59

Not After

25/01/2005, 06:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f3:8a:eb:ca:d3:84:50:9f:6f:92:6a:b6:cb:f7:e6:bb:9c:34:2a:93
Signer

Actual PE Digest

f3:8a:eb:ca:d3:84:50:9f:6f:92:6a:b6:cb:f7:e6:bb:9c:34:2a:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
VirtualFree
GetCPInfo
GetOEMCP
VirtualAlloc
FlushFileBuffers
SetStdHandle
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentProcess
TerminateProcess
ExitProcess
RtlUnwind
GetCommandLineA
IsBadReadPtr
GlobalReAlloc
UnmapViewOfFile
GetFileSize
CreateFileMappingA
MapViewOfFile
GetSystemDefaultLCID
GetCurrentThreadId
GetCurrentProcessId
HeapCreate
HeapDestroy
FreeResource
LocalSize
RtlMoveMemory
CreateThread
Sleep
WaitForSingleObject
GetTimeFormatA
GlobalHandle
lstrcmpA
GetThreadLocale
MulDiv
LocalAlloc
GetProfileIntA
LocalReAlloc
LocalFree
GetTickCount
GetModuleHandleA
GlobalAddAtomA
GetACP
CompareStringW
CompareStringA
GlobalSize
GetVersionExA
IsDBCSLeadByte
lstrcpynA
GetFileAttributesA
GetVersion
DisableThreadLibraryCalls
FindResourceA
LoadResource
LockResource
GetLastError
lstrcmpiA
HeapReAlloc
InterlockedDecrement
InterlockedIncrement
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
lstrcatA
GetModuleFileNameA
MultiByteToWideChar
IsBadWritePtr
GetDateFormatA
lstrcpyA
GetLocaleInfoA
GetLocalTime
CreateFileA
CloseHandle
GlobalAlloc
WriteFile
GlobalLock
HeapAlloc
DeleteCriticalSection
WideCharToMultiByte
lstrlenW
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapFree
FreeLibrary
lstrlenA
GetProcessHeap
GlobalFree
GlobalUnlock

user32

GrayStringA
HideCaret
DestroyCaret
CreateCaret
GetAsyncKeyState
SetCaretPos
DrawTextExA
SetRectEmpty
GetShellWindow
SetKeyboardState
GetKeyboardState
MapVirtualKeyA
ShowCaret
GetUpdateRgn
DestroyCursor
GetWindowRgn
ValidateRect
GetDCEx
LockWindowUpdate
CharNextExA
GetIconInfo
GetCursor
GetForegroundWindow
InvalidateRgn
GetKeyboardLayout
GetUpdateRect
DeferWindowPos
BeginDeferWindowPos
FindWindowA
TrackPopupMenu
GetKeyNameTextA
RemovePropA
SendNotifyMessageA
FrameRect
ChildWindowFromPoint
DrawIcon
TranslateMessage
DispatchMessageA
MessageBeep
UnregisterClassA
CreateDialogIndirectParamA
IsChild
GetNextDlgTabItem
IsDialogMessageA
WinHelpA
ScrollWindowEx
InvalidateRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetClipboardFormatNameA
RegisterClipboardFormatA
RegisterWindowMessageA
PeekMessageA
ScreenToClient
PostMessageW
PeekMessageW
RedrawWindow
InflateRect
AdjustWindowRectEx
CreatePopupMenu
DestroyMenu
DrawTextA
DrawFocusRect
AppendMenuA
AdjustWindowRect
IsZoomed
EnumChildWindows
GetDesktopWindow
ShowScrollBar
SetScrollRange
SetScrollPos
GetMessageA
GetScrollPos
IsRectEmpty
CallMsgFilterA
GetMessagePos
GetDoubleClickTime
InvertRect
GetSysColorBrush
SetCursor
GetWindowDC
UnionRect
SetTimer
SetScrollInfo
EnableScrollBar
UpdateWindow
KillTimer
LoadCursorA
GetMessageTime
GetDlgCtrlID
GetWindowThreadProcessId
WindowFromPoint
EndDeferWindowPos
EndDialog
ReleaseCapture
PtInRect
SetWindowRgn
IntersectRect
EqualRect
OffsetRect
GetParent
ClientToScreen
GetWindowRect
GetActiveWindow
GetWindow
MoveWindow
BeginPaint
EndPaint
SetParent
IsWindowVisible
CreateWindowExA
DestroyWindow
CharNextA
GetPropA
GetCursorPos
SetCursorPos
MapWindowPoints
DefWindowProcA
SetPropA
IsWindow
SetDlgItemTextA
CheckDlgButton
IsWindowEnabled
GetDlgItemTextA
GetDC
ReleaseDC
SetWindowPos
SetWindowLongA
GetWindowLongA
SendDlgItemMessageA
IsDlgButtonChecked
GetClientRect
GetFocus
LoadIconA
FillRect
DrawIconEx
ShowWindow
DestroyIcon
SetDlgItemInt
GetDlgItemInt
MessageBoxA
SetFocus
GetWindowTextLengthA
SetWindowTextA
GetWindowTextA
EnableWindow
SendMessageA
DialogBoxParamA
GetKeyState
SetCapture
GetCapture
CallWindowProcA
PostMessageA
GetSysColor
SetRect
DrawEdge
GetSystemMetrics
GetClassInfoA
RegisterClassA
GetDlgItem
LoadStringA
wsprintfA
GetScrollInfo
GetClassNameA
DrawFrameControl
CopyRect

ole32

OleLoadFromStream
ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
OleSaveToStream
CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree

advapi32

RegEnumKeyExA
RegCreateKeyA
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

SafeArrayCopy
SafeArrayGetElement
SafeArrayCreate
SafeArrayPutElement
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayGetLBound
VariantCopy
SafeArrayUnaccessData
OleCreateFontIndirect
GetErrorInfo
OleCreatePictureIndirect
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLibEx
SetErrorInfo
LoadTypeLi
CreateErrorInfo
VariantCopyInd
SafeArrayCreateVector
OleCreatePropertyFrame
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
OleTranslateColor
VariantChangeTypeEx
VariantChangeType
SysAllocStringLen
VariantInit
SysStringLen
SysAllocString
LoadRegTypeLi
VariantClear
SafeArrayRedim
SysFreeString

gdi32

ExcludeClipRect
SetBrushOrgEx
GetClipRgn
OffsetRgn
GetDIBColorTable
SetDIBColorTable
CreateDIBSection
OffsetWindowOrgEx
ExtTextOutW
GetTextExtentPointW
CreateHalftonePalette
GetTextAlign
SetTextAlign
DeleteObject
GetDeviceCaps
SelectObject
CreateSolidBrush
PatBlt
Polyline
CreatePen
StretchDIBits
GetDIBits
GetSystemPaletteEntries
GetObjectA
CreateBitmap
DeleteDC
CreateCompatibleDC
CreateDCA
SetBkColor
GetStockObject
GetTextExtentPoint32A
CreateFontIndirectA
GetCurrentObject
GetTextMetricsA
SetViewportOrgEx
SetWindowOrgEx
CreateRectRgnIndirect
GetViewportExtEx
GetWindowExtEx
LPtoDP
SetMapMode
SetViewportExtEx
SetWindowExtEx
SetTextColor
SelectClipRgn
CreateRectRgn
Rectangle
StretchBlt
CreateICA
CopyMetaFileA
CopyEnhMetaFileA
GetPaletteEntries
RealizePalette
SelectPalette
CreateDIBitmap
GetBitmapBits
CreatePalette
GetNearestColor
GetClipBox
TextOutA
SetBkMode
CreateFontA
CreatePatternBrush
ExtTextOutA
RestoreDC
IntersectClipRect
SaveDC
GetBkColor
GetCharWidthA
GetTextExtentPointA
Arc
RectVisible
Ellipse
LineTo
MoveToEx
GetPixel
CreateCompatibleBitmap
BitBlt
CombineRgn
GetTextColor

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 468KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSCOMCTL.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

50ccb1d881ea89a41a10cced45c79649

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

16/11/1999, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

04/04/2000, 00:00

Not After

17/04/2001, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
LocalReAlloc
GetProfileIntA
RtlMoveMemory
LocalSize
FreeResource
GetCurrentProcessId
MulDiv
GetTickCount
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GlobalReAlloc
IsBadReadPtr
Sleep
WaitForSingleObject
GlobalHandle
GetThreadLocale
LocalFree
LocalAlloc
GlobalAddAtomA
SetFilePointer
SetStdHandle
FlushFileBuffers
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentProcess
TerminateProcess
ExitProcess
RtlUnwind
GetCommandLineA
CompareStringW
GlobalSize
CreateFileA
GetFileSize
GlobalUnlock
GlobalLock
ReadFile
CloseHandle
GlobalFree
IsDBCSLeadByte
GetModuleHandleA
FindResourceA
LoadResource
LockResource
GetLastError
GetFileAttributesA
GetVersion
DisableThreadLibraryCalls
GetProcAddress
GetLocaleInfoA
LoadLibraryA
GetWindowsDirectoryA
lstrcatA
GetModuleFileNameA
IsBadWritePtr
lstrcmpiA
GetLocalTime
GetTimeFormatA
GetDateFormatA
lstrcmpA
GlobalAlloc
GetVersionExA
GetCurrentThreadId
MultiByteToWideChar
CompareStringA
lstrcpyA
InterlockedExchange
lstrlenA
GetSystemDefaultLCID
lstrcpynA
HeapAlloc
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
HeapReAlloc

user32

DrawFocusRect
AdjustWindowRect
DrawFrameControl
TrackPopupMenu
GetMessageA
AdjustWindowRectEx
CopyRect
GetKeyNameTextA
ShowCaret
SetCaretPos
GrayStringA
HideCaret
DestroyCaret
CreateCaret
SetWindowTextA
SetScrollInfo
DrawTextExA
InvertRect
SetRectEmpty
GetShellWindow
SetKeyboardState
GetKeyboardState
GetScrollInfo
GetKeyboardLayout
DestroyCursor
GetUpdateRgn
GetUpdateRect
GetWindowRgn
ValidateRect
CallMsgFilterA
LockWindowUpdate
IsZoomed
GetDesktopWindow
GetIconInfo
GetCursor
GetForegroundWindow
InvalidateRgn
EndDeferWindowPos
EnumChildWindows
GetDoubleClickTime
FindWindowA
GetMessageTime
GetWindowThreadProcessId
RemovePropA
SendNotifyMessageA
SetScrollPos
SetScrollRange
GetWindowTextLengthA
EnableScrollBar
ChildWindowFromPoint
GetDlgItemInt
EndDialog
GetActiveWindow
GetWindow
GetPropA
GetCursorPos
WindowFromPoint
GetClassNameA
GetDlgCtrlID
IsWindow
SetPropA
IsWindowEnabled
IsWindowVisible
UnregisterClassA
CharNextA
MessageBoxA
SetActiveWindow
CheckRadioButton
SetFocus
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
CheckDlgButton
GetDlgItem
GetDCEx
DrawIconEx
CreateIconIndirect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetClipboardFormatNameA
SetCursorPos
RegisterClipboardFormatA
MessageBeep
RegisterWindowMessageA
PeekMessageA
PostMessageW
PeekMessageW
VkKeyScanA
SetParent
CharUpperA
GetDlgItemTextA
SetCursor
CreateDialogIndirectParamA
GetNextDlgTabItem
IsDialogMessageA
ScrollWindowEx
SendDlgItemMessageA
SetWindowRgn
IntersectRect
EqualRect
MoveWindow
BeginPaint
EndPaint
DeferWindowPos
BeginDeferWindowPos
CharNextExA
SetTimer
KillTimer
DrawIcon
DestroyIcon
MapWindowPoints
CreatePopupMenu
AppendMenuA
TrackPopupMenuEx
DestroyMenu
WinHelpA
PtInRect
DefWindowProcA
GetWindowDC
SetRect
LoadCursorA
IsRectEmpty
ClientToScreen
GetWindowRect
MapVirtualKeyA
DestroyWindow
CreateWindowExA
GetSysColorBrush
GetAsyncKeyState
EnableWindow
PostMessageA
TranslateMessage
DispatchMessageA
wsprintfA
DialogBoxParamA
UpdateWindow
GetWindowLongA
SetWindowLongA
GetDC
ReleaseDC
GetParent
OffsetRect
UnionRect
GetFocus
IsChild
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetMessagePos
ScreenToClient
SetWindowPos
SetCapture
GetWindowTextA
WindowFromDC
GetClientRect
CallWindowProcA
DrawEdge
GetSysColor
FrameRect
InflateRect
FillRect
DrawTextA
GetKeyState
GetCapture
ReleaseCapture
GetClassInfoA
RegisterClassA
InvalidateRect
LoadIconA
GetSystemMetrics
CopyImage
SendMessageA
LoadStringA
RedrawWindow
ShowWindow
CreateAcceleratorTableA

ole32

ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CreateStreamOnHGlobal
OleLoadFromStream
OleSaveToStream
CreateOleAdviseHolder
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

advapi32

RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegCreateKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA

oleaut32

SafeArrayRedim
SafeArrayPutElement
SafeArrayGetElement
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
GetErrorInfo
OleCreateFontIndirect
OleCreatePropertyFrame
LoadTypeLibEx
UnRegisterTypeLi
RegisterTypeLi
CreateErrorInfo
SetErrorInfo
LoadRegTypeLi
LoadTypeLi
VariantChangeTypeEx
SysStringByteLen
SysAllocStringByteLen
OleLoadPicture
SysAllocStringLen
VariantCopy
OleTranslateColor
VariantChangeType
OleCreatePictureIndirect
VariantCopyInd
SysStringLen
SysFreeString
VariantInit
VariantClear
SysAllocString
SafeArrayCopy

comdlg32

GetOpenFileNameA

gdi32

Arc
GetTextExtentPointA
GetCharWidthA
OffsetWindowOrgEx
ExtTextOutW
GetTextExtentPointW
Polyline
GetTextAlign
SetTextAlign
OffsetRgn
GetTextColor
CombineRgn
GetTextMetricsA
MoveToEx
LineTo
Ellipse
DeleteObject
SelectObject
CreateSolidBrush
SetViewportOrgEx
SetWindowOrgEx
SetViewportExtEx
SetWindowExtEx
SetMapMode
GetDeviceCaps
CreateFontIndirectA
GetObjectA
SelectClipRgn
ExcludeClipRect
RectVisible
GetClipBox
IntersectClipRect
GetClipRgn
CreateRectRgnIndirect
RealizePalette
SelectPalette
PatBlt
CreateCompatibleBitmap
CreateBitmap
CreateCompatibleDC
GetTextExtentPoint32A
TextOutA
SetBkColor
SetTextColor
SetBkMode
Rectangle
CreatePen
GetStockObject
GetViewportExtEx
GetWindowExtEx
LPtoDP
DeleteDC
CreateDCA
CreateRectRgn
StretchBlt
CreateICA
CopyMetaFileA
CopyEnhMetaFileA
GetPaletteEntries
GetDIBits
CreateDIBitmap
GetBitmapBits
CreatePalette
GetNearestColor
CreatePatternBrush
CreateDIBSection
CreateHalftonePalette
BitBlt
SetDIBColorTable
GetDIBColorTable
GetPixel
StretchDIBits
SetBrushOrgEx
GetBkColor
ExtTextOutA
RestoreDC
SaveDC
CreateFontA

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 687KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSCOMM32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

981c4b05d92d1681a5f459ad4e52b1b8

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetCommModemStatus
WriteFile
GetCommProperties
ResetEvent
GetOverlappedResult
IsBadWritePtr
MultiByteToWideChar
Sleep
ReadFile
SetCommState
GetCommState
ClearCommError
lstrcpynA
lstrlenA
CreateThread
WaitCommEvent
GlobalUnlock
GlobalLock
GlobalAlloc
ClearCommBreak
SetCommBreak
GetVersion
GetFileAttributesA
lstrcatA
GetModuleFileNameA
GetWindowsDirectoryA
LoadLibraryA
GetLocaleInfoA
GetProcAddress
InterlockedIncrement
InterlockedDecrement
HeapReAlloc
lstrcmpiA
LockResource
LoadResource
FindResourceA
CompareStringA
CompareStringW
lstrcmpA
CreateEventA
CreateFileA
GetLastError
SetupComm
SetCommTimeouts
SetCommMask
WaitForSingleObject
DisableThreadLibraryCalls
GlobalFree
IsDBCSLeadByte
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
GetProcessHeap
CloseHandle
lstrcpyA
EscapeCommFunction
PurgeComm

user32

ShowWindow
SetWindowRgn
PtInRect
IsDialogMessageA
GetWindowLongA
IsWindowEnabled
IsChild
GetKeyState
OffsetRect
IntersectRect
DrawIcon
LoadCursorA
RegisterClassA
DestroyIcon
DestroyWindow
GetSystemMetrics
GetDlgItemInt
GetDlgItemTextA
GetDlgItem
SendMessageA
SetDlgItemInt
SetDlgItemTextA
DialogBoxParamA
wsprintfA
CreateWindowExA
SetWindowLongA
DefWindowProcA
EqualRect
GetWindowRect
GetParent
ClientToScreen
MoveWindow
GetActiveWindow
GetWindow
GetClientRect
SetFocus
BeginPaint
IsWindowVisible
EndPaint
SetParent
CheckDlgButton
SetWindowPos
CharNextA
EndDialog
LoadIconA
DrawEdge
CreateDialogIndirectParamA
PostMessageA
WinHelpA
GetNextDlgTabItem
LoadStringA
UnregisterClassA
ReleaseDC
GetDC
IsDlgButtonChecked
MessageBoxA
RegisterClipboardFormatA

ole32

CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

OleCreatePropertyFrame
VariantChangeType
SetErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
OleLoadPicture
GetErrorInfo
RegisterTypeLi
SafeArrayCreate
SafeArrayPutElement
LoadRegTypeLi
SafeArrayGetDim
SysStringLen
SysAllocStringLen
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayGetLBound
VariantClear
SysFreeString
VariantInit
SysAllocString
CreateErrorInfo

gdi32

DeleteDC
GetWindowExtEx
GetViewportExtEx
LPtoDP
SetMapMode
CreateDCA
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
GetDeviceCaps
CreateRectRgnIndirect

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSFLXGRD.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

138f160cfefa07306f399d9bfa41ad11

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

16/11/1999, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

04/04/2000, 00:00

Not After

17/04/2001, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
GetStringTypeA
GetStringTypeW
GlobalFree
LCMapStringA
LCMapStringW
GlobalLock
GlobalSize
GetVersionExA
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
GetFileAttributesA
GetVersion
DisableThreadLibraryCalls
FindResourceA
LoadResource
LockResource
GetLastError
GetProcAddress
GetLocaleInfoA
LoadLibraryA
GetWindowsDirectoryA
HeapReAlloc
GetModuleFileNameA
InterlockedDecrement
MultiByteToWideChar
GetProfileStringA
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
lstrcmpiA
lstrcpynA
InterlockedIncrement
GlobalUnlock
GlobalAlloc
lstrcmpA
HeapAlloc
lstrcatA
HeapFree
WideCharToMultiByte
lstrlenW
lstrcpyA
lstrlenA
MulDiv
GetProcessHeap
LeaveCriticalSection
EnterCriticalSection
lstrcpyW
IsDBCSLeadByte
InterlockedExchange

user32

GetDlgItemInt
IsDlgButtonChecked
RegisterWindowMessageA
PeekMessageA
SetFocus
GetFocus
GetSysColor
GetSystemMetrics
FillRect
PeekMessageW
PostMessageW
SetWindowPos
GetDlgItem
SendDlgItemMessageA
InvalidateRect
GetActiveWindow
DialogBoxParamA
EndDialog
GetWindowRect
SetDlgItemInt
MoveWindow
SetDlgItemTextA
GetDlgItemTextA
GetClipboardFormatNameA
MapWindowPoints
SetCursorPos
RegisterClipboardFormatA
UnregisterClassA
CreateDialogIndirectParamA
IsChild
IsWindowEnabled
GetNextDlgTabItem
IsDialogMessageA
WinHelpA
ShowWindow
SetWindowRgn
IntersectRect
EqualRect
GetParent
ClientToScreen
GetWindow
BeginPaint
EndPaint
SendMessageA
MessageBeep
wsprintfA
DestroyWindow
GetWindowLongA
SetWindowLongA
DrawTextA
DrawTextExA
CheckDlgButton
ReleaseCapture
KillTimer
DrawFocusRect
SetTimer
SetCapture
SetCursor
DefWindowProcA
EnableWindow
GetCursorPos
ScreenToClient
PtInRect
PostMessageA
DrawEdge
FrameRect
InflateRect
LoadCursorA
RegisterClassA
GetDC
ReleaseDC
CharNextA
GetKeyState
SetRect
UpdateWindow
IsWindow
GetScrollRange
ScrollWindow
OffsetRect
SetScrollRange
GetClientRect
SetScrollPos
CreateWindowExA
IsWindowVisible
LoadStringA
MessageBoxA
SetParent

ole32

CreateOleAdviseHolder
ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CoCreateInstance
OleLoadFromStream
OleSaveToStream
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopyInd
VariantCopy
LoadTypeLibEx
UnRegisterTypeLi
RegisterTypeLi
CreateErrorInfo
SetErrorInfo
LoadTypeLi
LoadRegTypeLi
OleCreatePropertyFrame
VariantClear
SysAllocString
GetErrorInfo
SysAllocStringLen
SysStringLen
VariantInit
VariantChangeType
OleCreatePictureIndirect
SysFreeString
OleTranslateColor
SafeArrayRedim
OleCreateFontIndirect

gdi32

SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
LPtoDP
SetWindowOrgEx
GetNearestColor
CreatePalette
GetBitmapBits
CreateDIBitmap
SelectPalette
RealizePalette
GetDIBits
GetPaletteEntries
CopyEnhMetaFileA
CopyMetaFileA
CreateDCA
CreatePen
DeleteObject
CreateSolidBrush
SelectObject
GetObjectA
DeleteDC
StretchBlt
GetStockObject
CreateCompatibleBitmap
CreateCompatibleDC
GetTextMetricsA
RestoreDC
ExcludeClipRect
SaveDC
LineTo
MoveToEx
SetTextColor
SetBkMode
GetCurrentPositionEx
SetViewportExtEx
SetWindowExtEx
DPtoLP
SetMapMode
GetTextColor
CreateBitmap
EnumFontFamiliesExA
GetDeviceCaps
GetTextExtentPoint32A
CreateFontIndirectA
CreateRectRgnIndirect

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSHFLXGD.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

56ac46dcc88f67428b0149d3d554a99b

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

16/11/1999, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

04/04/2000, 00:00

Not After

17/04/2001, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

olepro32

ord253
ord254
ord252
ord250

comctl32

ImageList_Destroy
ImageList_LoadImageA

kernel32

Sleep
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
HeapSize
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
SetLastError
GetCurrentThread
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
TlsGetValue
VirtualAlloc
IsBadCodePtr
GetStdHandle
GetFileType
WriteFile
IsValidLocale
IsValidCodePage
GetUserDefaultLCID
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
FlushFileBuffers
GetTimeZoneInformation
CloseHandle
SetStdHandle
SetFilePointer
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsDBCSLeadByte
GetVersionExA
GlobalFree
TlsSetValue
GlobalUnlock
GlobalLock
GlobalSize
lstrcmpA
TlsFree
TlsAlloc
ExitProcess
GetCurrentThreadId
FatalAppExitA
RaiseException
GetModuleHandleA
GetCommandLineA
GetVersion
RtlUnwind
GetFileAttributesA
LoadResource
DisableThreadLibraryCalls
FindResourceA
lstrcmpiA
LockResource
GetLastError
GetLocaleInfoA
HeapReAlloc
GetProcAddress
GetModuleFileNameA
LoadLibraryA
GetWindowsDirectoryA
lstrcmpiW
IsBadReadPtr
GetProfileStringA
MulDiv
lstrcpynA
FormatMessageA
FreeLibrary
lstrcpyA
MultiByteToWideChar
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
InterlockedIncrement
UnhandledExceptionFilter
lstrlenA
lstrlenW
lstrcmpW
lstrcatA
LCMapStringA
LCMapStringW
GlobalAlloc
WideCharToMultiByte
GetProcessHeap
HeapAlloc
HeapFree
InterlockedDecrement
LocalFree
IsBadWritePtr

user32

SetCursorPos
GetSysColor
PostMessageW
PeekMessageW
UnregisterClassA
CreateDialogIndirectParamA
IsChild
IsWindowEnabled
GetNextDlgTabItem
MapWindowPoints
GetClipboardFormatNameA
ScrollWindowEx
GetCapture
CallWindowProcA
ShowWindow
SetWindowRgn
IntersectRect
EqualRect
ClientToScreen
CharNextA
GetWindow
RegisterClipboardFormatA
WinHelpA
IsDialogMessageA
EndDialog
BeginPaint
EndPaint
SetParent
IsWindowVisible
CreateWindowExA
DestroyWindow
LoadBitmapA
SetDlgItemInt
CheckDlgButton
GetDlgItem
GetDlgItemInt
IsDlgButtonChecked
SetFocus
InvalidateRect
GetActiveWindow
DialogBoxParamA
PeekMessageA
GetWindowRect
MoveWindow
SendMessageA
MessageBeep
SendDlgItemMessageA
DrawTextExW
DrawTextExA
GetParent
GetSystemMetrics
FillRect
GetWindowLongA
SetWindowPos
DrawFocusRect
SetTimer
ReleaseCapture
SetCapture
SetCursor
DefWindowProcA
EnableWindow
GetCursorPos
ScreenToClient
PtInRect
PostMessageA
DrawEdge
FrameRect
InflateRect
SetWindowLongA
LoadCursorA
RegisterClassA
RegisterWindowMessageA
SetRect
UpdateWindow
GetKeyState
IsWindow
GetScrollRange
ScrollWindow
OffsetRect
SetScrollRange
GetClientRect
SetScrollPos
ShowScrollBar
LoadStringA
MessageBoxA
GetDC
ReleaseDC
KillTimer
wsprintfA
GetFocus

ole32

CoCreateInstance
ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CreateOleAdviseHolder
OleLoadFromStream
OleSaveToStream
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA

oleaut32

LoadTypeLi
SysStringByteLen
GetErrorInfo
VariantChangeType
LoadRegTypeLi
CreateErrorInfo
SetErrorInfo
VariantInit
SysStringLen
SysFreeString
SysAllocString
VariantCopyInd
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLibEx
VariantCopy
SysAllocStringLen
SysAllocStringByteLen
VariantClear
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayDestroy
SafeArrayCreate
SafeArrayGetElement
SafeArrayPutElement
SafeArrayRedim
SafeArrayCopy

gdi32

GetWindowExtEx
SetWindowOrgEx
CreateDCA
SetViewportOrgEx
GetPaletteEntries
GetDIBits
CopyEnhMetaFileA
GetBitmapBits
CreatePalette
CreateDIBitmap
GetViewportExtEx
GetNearestColor
LPtoDP
DeleteObject
CreatePen
GetTextMetricsA
GetTextExtentPoint32W
CreateFontIndirectA
CreateSolidBrush
GetStockObject
SelectObject
StretchBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
ExcludeClipRect
SaveDC
RestoreDC
LineTo
MoveToEx
GetObjectA
Rectangle
SetBkMode
SetTextColor
SelectPalette
GetCurrentPositionEx
RealizePalette
SetWindowExtEx
DPtoLP
SetViewportExtEx
GetTextColor
CreateBitmap
SetMapMode
GetDeviceCaps
CreateRectRgnIndirect
CopyMetaFileA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSINET.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

d940cf5b3d0dfb340396c0608ef1a0c5

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

16/11/1999, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

04/04/2000, 00:00

Not After

17/04/2001, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

wininet

FtpSetCurrentDirectoryA
FtpCreateDirectoryA
InternetCrackUrlA
InternetSetOptionA
InternetCreateUrlA
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
InternetFindNextFileA
FtpDeleteFileA
FtpGetFileA
FtpPutFileA
FtpRenameFileA
InternetReadFile
InternetConnectA
FtpGetCurrentDirectoryA
FtpRemoveDirectoryA
FtpFindFirstFileA
HttpQueryInfoA
HttpOpenRequestA
HttpSendRequestA
InternetOpenUrlA

kernel32

LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
GetProcessHeap
CloseHandle
LocalFree
FormatMessageA
SetEvent
CreateEventA
GetLastError
MultiByteToWideChar
lstrcatA
lstrcpyA
lstrlenA
ResetEvent
SetLastError
lstrcpynA
WaitForSingleObject
WaitForMultipleObjects
GetTickCount
IsBadWritePtr
DisableThreadLibraryCalls
GetVersion
GetProcAddress
GetFileAttributesA
GetModuleFileNameA
GetWindowsDirectoryA
LoadLibraryA
GetLocaleInfoA
InterlockedIncrement
InterlockedDecrement
HeapReAlloc
lstrcmpiA
LockResource
LoadResource
FindResourceA
lstrcmpA

user32

SetDlgItemInt
SendDlgItemMessageA
GetMessageA
PostQuitMessage
GetDlgItemInt
GetDlgItemTextA
SendMessageA
ReleaseDC
GetDC
CharNextA
SetDlgItemTextA
SetWindowPos
SetWindowLongA
SetParent
EndPaint
GetClientRect
BeginPaint
GetWindowLongA
SetFocus
GetDlgItem
MoveWindow
GetWindow
GetActiveWindow
IsWindowVisible
TranslateMessage
GetParent
OffsetRect
EqualRect
DispatchMessageA
GetWindowThreadProcessId
ShowWindow
PtInRect
WinHelpA
IsDialogMessageA
GetNextDlgTabItem
IsWindowEnabled
IsChild
GetKeyState
CreateDialogIndirectParamA
MessageBoxA
MessageBeep
SetTimer
PeekMessageA
MsgWaitForMultipleObjects
PostMessageA
ClientToScreen
GetWindowRect
CreateWindowExA
EndDialog
LoadIconA
DrawEdge
DrawIcon
LoadCursorA
RegisterClassA
DestroyIcon
KillTimer
DestroyWindow
GetSystemMetrics
LoadStringA
wsprintfA
DialogBoxParamA
IntersectRect
SetWindowRgn
DefWindowProcA
PostThreadMessageA
UnregisterClassA

ole32

CoUninitialize
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoCreateInstance
CreateOleAdviseHolder

advapi32

RegEnumKeyExA
RegQueryValueExA
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA

oleaut32

OleCreatePropertyFrame
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi
LoadTypeLibEx
SafeArrayCreate
SetErrorInfo
CreateErrorInfo
GetErrorInfo
LoadRegTypeLi
SysStringLen
SysAllocStringLen
SysFreeString
VariantInit
VariantClear
VariantChangeType
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayRedim
SafeArrayDestroy
VariantChangeTypeEx
SysAllocString

gdi32

GetWindowExtEx
SetViewportOrgEx
LPtoDP
DeleteDC
SetWindowExtEx
SetMapMode
SetViewportExtEx
GetViewportExtEx
SetWindowOrgEx
CreateDCA
GetDeviceCaps
CreateRectRgnIndirect

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSMAPI32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

39c0caf76678c314404f857483758f24

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
GetModuleFileNameA
GetWindowsDirectoryA
GetLocaleInfoA
InterlockedIncrement
IsBadWritePtr
GetFileAttributesA
GetVersion
GetLastError
LockResource
LoadResource
FindResourceA
CompareStringA
CompareStringW
DisableThreadLibraryCalls
GetProcessHeap
HeapReAlloc
lstrcmpA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
InterlockedDecrement
lstrcmpiA
lstrlenA
LoadLibraryA
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
InitializeCriticalSection
SetErrorMode
GetProcAddress
lstrcpynA
lstrcpyA
IsDBCSLeadByte
MultiByteToWideChar

user32

ReleaseDC
PostMessageA
ClientToScreen
CharNextA
GetDC
GetActiveWindow
EqualRect
GetWindowRect
GetParent
ShowWindow
PtInRect
OffsetRect
IntersectRect
LoadStringA
WinHelpA
SetWindowRgn
GetClientRect
IsWindowEnabled
IsChild
GetKeyState
CreateDialogIndirectParamA
LoadIconA
DrawEdge
DrawIcon
LoadCursorA
RegisterClassA
GetSystemMetrics
SendMessageA
GetDlgItem
SetDlgItemTextA
GetDlgItemTextA
MessageBeep
MessageBoxA
GetDlgItemInt
IsDlgButtonChecked
CheckDlgButton
SetDlgItemInt
SendDlgItemMessageA
GetWindowTextA
BeginPaint
SetParent
DialogBoxParamA
EndDialog
SetWindowPos
IsWindowVisible
CreateWindowExA
DestroyWindow
SetWindowLongA
UnregisterClassA
IsDialogMessageA
GetWindow
GetNextDlgTabItem
wsprintfA
RegisterClipboardFormatA
SetFocus
MoveWindow
DefWindowProcA
EndPaint
GetWindowLongA

ole32

CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

OleCreatePropertyFrame
VariantClear
SetErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
LoadRegTypeLi
GetErrorInfo
RegisterTypeLi
VariantInit
SysFreeString
SysAllocStringLen
SysAllocString
VariantChangeType
CreateErrorInfo

gdi32

DeleteDC
GetWindowExtEx
GetViewportExtEx
SetMapMode
LPtoDP
SetWindowOrgEx
SetViewportOrgEx
CreateDCA
SetViewportExtEx
GetDeviceCaps
SetWindowExtEx
CreateRectRgnIndirect

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSSTDFMT.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

813db3b6c9a1b45c2a363924917c26d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoW
FreeLibrary
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
GetVersion
GetProcAddress
GetFileAttributesA
lstrcatA
IsDBCSLeadByte
MultiByteToWideChar
InterlockedDecrement
GetWindowsDirectoryA
LoadLibraryA
GetLastError
LockResource
LoadResource
FindResourceA
GetModuleHandleA
CompareStringW
LeaveCriticalSection
EnterCriticalSection
EnumSystemLocalesA
lstrcpynA
EnumDateFormatsA
CompareStringA
lstrcmpA
EnumTimeFormatsA
lstrlenA
GetModuleFileNameA
InterlockedIncrement
HeapAlloc
GetLocaleInfoA
GetProcessHeap
GetThreadLocale
HeapFree
HeapReAlloc
lstrcpyA
GetSystemTime
lstrcmpiA
WideCharToMultiByte
lstrlenW

user32

ReleaseCapture
SetCapture
CallWindowProcA
PtInRect
GetFocus
InvalidateRect
MessageBoxA
GetDlgItemTextA
GetCapture
EqualRect
ShowWindow
SetDlgItemTextA
GetWindowRect
SetParent
SetWindowLongA
CharNextA
GetDC
ReleaseDC
UnregisterClassA
DestroyWindow
GetSystemMetrics
SetWindowRgn
IntersectRect
GetActiveWindow
OffsetRect
ClientToScreen
BeginPaint
MoveWindow
SetFocus
SetWindowPos
GetClientRect
EndPaint
CreateWindowExA
GetDlgItemInt
RegisterClassA
GetWindowLongA
CreateDialogIndirectParamA
IsDlgButtonChecked
IsWindowEnabled
GetKeyState
IsChild
IsDialogMessageA
GetNextDlgTabItem
GetWindow
LoadStringA
WinHelpA
SetDlgItemInt
ScrollWindowEx
wsprintfA
SendMessageA
SendDlgItemMessageA
GetDlgItem
EnableWindow
IsWindowVisible
GetParent
DefWindowProcA

ole32

CreateOleAdviseHolder
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc

advapi32

RegDeleteKeyA
RegQueryValueExA
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

SetErrorInfo
LoadRegTypeLi
CreateErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
SystemTimeToVariantTime
OleLoadPicture
RegisterTypeLi
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetDim
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreateVector
VariantChangeType
VariantChangeTypeEx
SafeArrayDestroy
SysAllocStringLen
VariantInit
SysReAllocStringLen
SysAllocString
SysStringLen
VariantCopy
SysFreeString
VariantClear
OleCreatePropertyFrame

gdi32

SetMapMode
LPtoDP
DeleteDC
SetWindowOrgEx
SetViewportOrgEx
CreateDCA
SetViewportExtEx
GetDeviceCaps
SetWindowExtEx
GetViewportExtEx
GetWindowExtEx
CreateRectRgnIndirect

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSVBVM60.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

52aa5ee856953e49635e554af5207319

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
ExitThread
FlushFileBuffers
CreateDirectoryA
GetTimeZoneInformation
RemoveDirectoryA
MoveFileA
LockFile
UnlockFile
TerminateProcess
RaiseException
SetEnvironmentVariableA
lstrlenA
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
GetStringTypeW
lstrcpynA
FreeLibrary
GetLocaleInfoA
lstrcmpiA
GetLastError
GetModuleHandleA
GetSystemDefaultLangID
FormatMessageA
HeapCreate
GetWindowsDirectoryA
GetPrivateProfileStringA
lstrcatA
CreateFileA
ReadFile
CloseHandle
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
IsBadReadPtr
TlsGetValue
lstrcpyA
DeleteFileA
lstrcmpA
GetCurrentThreadId
GetVersionExA
HeapAlloc
HeapFree
LCMapStringW
GetStringTypeA
GetModuleFileNameW
GetUserDefaultLangID
GetComputerNameA
SetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
SetFileTime
GetLocalTime
SetLocalTime
RtlUnwind
CreateProcessW
IsValidCodePage
FormatMessageW
GetStartupInfoA
UnhandledExceptionFilter
ExitProcess
SetCurrentDirectoryA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindNextFileA
FindClose
VirtualFree
GetSystemInfo
VirtualAlloc
VirtualProtect
FlushInstructionCache
FindResourceExA
GetShortPathNameA
WinExec
lstrlenW
lstrcpyW
WriteFile
SetEndOfFile
SetFilePointer
GetSystemTime
SystemTimeToFileTime
WaitForMultipleObjects
ReleaseMutex
CreateMutexA
GetCurrentProcess
DuplicateHandle
ResumeThread
GetCommandLineA
TlsSetValue
TlsFree
TlsAlloc
GetVersion
CompareStringW
lstrcmpiW
MulDiv
CreateProcessA
GetExitCodeProcess
LoadLibraryExA
WaitForSingleObject
ResetEvent
SetEvent
CreateEventA
GetCurrentProcessId
GetTickCount
GetEnvironmentVariableA
FreeResource
GetSystemDefaultLCID
GetPrivateProfileIntA
IsBadCodePtr
GetUserDefaultLCID
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
Sleep
GlobalDeleteAtom
HeapDestroy
SetErrorMode
GlobalAddAtomA
ReleaseSemaphore
LCMapStringA
CreateSemaphoreA
VirtualQuery
MultiByteToWideChar
GetProfileStringA
WideCharToMultiByte
HeapReAlloc
GetDriveTypeA
CompareStringA
GetFileAttributesA
GetCurrentDirectoryA
GetModuleFileNameA
SetLastError
GetFullPathNameA
SearchPathA
GetFileType
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
SizeofResource
GlobalAlloc
GlobalSize
GlobalHandle
GlobalReAlloc
GlobalLock
_lwrite
_lread
LockResource
GetTempPathA
GetTempFileNameA
_lclose
_llseek
HeapSize
GetCPInfo

user32

DdeGetLastError
DdeCreateDataHandle
DdeCmpStringHandles
DdeGetData
SetCursorPos
EnumClipboardFormats
DestroyCursor
GetAsyncKeyState
WaitForInputIdle
GetForegroundWindow
VkKeyScanW
SetWindowsHookExW
keybd_event
CharUpperBuffW
CharUpperBuffA
CharLowerBuffW
FindWindowW
FindWindowA
MessageBoxIndirectA
DialogBoxParamA
EnumThreadWindows
GetLastActivePopup
SetActiveWindow
GetClassInfoExA
LoadIconA
LoadImageA
FrameRect
CreateDialogParamA
IsDialogMessageA
EnableMenuItem
ShowCursor
OemToCharA
CharToOemBuffA
GetWindowTextA
EndDialog
DrawTextA
SendDlgItemMessageA
SetDlgItemTextA
GetWindowPlacement
GetSystemMetrics
LoadBitmapA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
WaitMessage
PostQuitMessage
UnhookWindowsHookEx
RegisterClipboardFormatA
CreateCursor
CreateIcon
PostMessageW
PeekMessageW
GetPropA
RemovePropA
SetPropA
SetForegroundWindow
ClipCursor
CallWindowProcA
DefFrameProcA
GetKeyState
GetDlgItem
IsWindow
UnregisterClassA
RegisterClassA
AdjustWindowRect
GetTabbedTextExtentA
TabbedTextOutA
FillRect
CharToOemA
MessageBoxA
wsprintfA
WinHelpA
GetDesktopWindow
SetRect
GetWindowDC
DestroyIcon
GetClassInfoA
AdjustWindowRectEx
GetMenuItemCount
RemoveMenu
GetMenuStringA
GetMenuState
DdePostAdvise
DdeAbandonTransaction
CharPrevA
CharNextA
GetUpdateRgn
GetUpdateRect
PtInRect
ChildWindowFromPointEx
ReleaseCapture
SetCapture
InflateRect
GetWindowRect
ClientToScreen
MoveWindow
IsWindowEnabled
IsChild
SetParent
IsIconic
IsZoomed
DefMDIChildProcA
MessageBeep
PeekMessageA
PostMessageA
LoadStringA
AppendMenuA
DestroyMenu
CreatePopupMenu
GetMessageTime
GetMessagePos
DrawFocusRect
CopyAcceleratorTableA
GetWindowRgn
CharUpperA
TranslateMDISysAccel
SubtractRect
IsRectEmpty
InvalidateRgn
InvalidateRect
CopyRect
GetDCEx
IntersectRect
LoadAcceleratorsA
BringWindowToTop
GetWindowThreadProcessId
AttachThreadInput
EqualRect
EnableWindow
SetFocus
SendMessageA
SetWindowsHookExA
GetClassNameA
LoadCursorA
SetCursor
SetWindowLongA
GetWindow
GetFocus
GetKeyboardLayout
GetSystemMenu
CallNextHookEx
GetParent
DestroyWindow
SetWindowTextA
SetWindowPos
UpdateWindow
CreateWindowExA
SystemParametersInfoA
GetCapture
WindowFromPoint
ScreenToClient
SetTimer
IsWindowVisible
ShowWindow
KillTimer
GetDC
ReleaseDC
MapWindowPoints
GetCursorPos
GetCursor
OffsetRect
GetIconInfo
DefWindowProcA
BeginPaint
GetClientRect
EndPaint
GetSysColor
GetActiveWindow
GetWindowLongA
DdeClientTransaction
DdeSetUserHandle
DdeDisconnect
DdeConnect
DdeUninitialize
DdeNameService
DdeCreateStringHandleA
DdeQueryConvInfo
DdeInitializeA
DdeFreeStringHandle
SetScrollRange
DdeQueryStringA
DdeFreeDataHandle
LockWindowUpdate
SetScrollPos
DrawFrameControl
SetClipboardData
CharLowerBuffA
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
OpenClipboard
SetCaretPos
CloseClipboard
GetCaretBlinkTime
ShowCaret
GetWindowTextLengthA
CreateCaret
GetScrollPos
HideCaret
DestroyCaret
SetWindowRgn
GetClipboardFormatNameA
DrawTextExA
DestroyAcceleratorTable
ToAscii
CreateAcceleratorTableA
SetScrollInfo
ShowScrollBar
SetKeyboardState
GetMenuItemInfoA
SetMenuItemInfoA
GetDoubleClickTime
GetKeyboardState
GetQueueStatus
SetMenuDefaultItem
SetWindowContextHelpId
TrackPopupMenu
InsertMenuA
DrawMenuBar
DeleteMenu
GetMenu
GetSubMenu
GetMenuItemID
ModifyMenuA
SetMenu
CreateMenu
EndDeferWindowPos
CheckMenuItem
BeginDeferWindowPos
VkKeyScanA
DeferWindowPos
PostThreadMessageA
DrawIcon
CharLowerA
IsCharAlphaA
GetCaretPos
RegisterClassExA
GetScrollInfo

gdi32

UnrealizeObject
CreatePen
SetBkColor
SetTextColor
CreatePatternBrush
DeleteObject
CreateBitmap
ExtTextOutA
SelectObject
SetBkMode
GetBitmapBits
GetObjectA
GetTextExtentPointA
CreateFontIndirectA
CombineRgn
SetRectRgn
CreateRectRgn
CreateRectRgnIndirect
ExtSelectClipRgn
OffsetRgn
PtInRegion
CreatePalette
SelectPalette
SelectClipRgn
OffsetWindowOrgEx
IntersectClipRect
DeleteDC
BitBlt
SetViewportOrgEx
CreateCompatibleDC
CreateCompatibleBitmap
RestoreDC
RealizePalette
SetROP2
SaveDC
GetClipBox
SetWindowOrgEx
ExcludeClipRect
CreateHalftonePalette
GetTextMetricsA
PatBlt
EnumFontsA
TranslateCharsetInfo
GetROP2
SetBrushOrgEx
GetDeviceCaps
GetObjectType
CreatePenIndirect
CreateBrushIndirect
Rectangle
GetStockObject
Arc
LineTo
MoveToEx
Pie
Ellipse
SetStretchBltMode
GetPixel
GetTextExtentPoint32A
SetPixelV
StretchDIBits
GetCurrentObject
TextOutA
GetBkColor
StretchBlt
CreateDIBitmap
CloseMetaFile
SetWindowExtEx
CreateMetaFileA
EndDoc
AbortDoc
StartPage
EndPage
StartDocA
CreateDCA
ResetDCA
Escape
ScaleViewportExtEx
SetViewportExtEx
SetMapMode
DeleteMetaFile
PlayMetaFile
SetAbortProc
DeleteEnhMetaFile
PlayEnhMetaFile
CreateICA
GetEnhMetaFileHeader
ScaleWindowExtEx
GetWindowOrgEx
GetPaletteEntries
CreateDIBSection
CloseEnhMetaFile
CreateEnhMetaFileA
LPtoDP
EqualRgn
ExtCreateRegion
GetDIBits
SetTextAlign
GetWindowExtEx
GetViewportExtEx
CopyMetaFileA
CopyEnhMetaFileA
PathToRegion
EndPath
BeginPath
WidenPath
GetTextColor
GetMapMode
SetDIBColorTable
RoundRect
CreateEllipticRgnIndirect
CreateRoundRectRgn
GetSystemPaletteEntries
GetNearestColor
CreateHatchBrush
CreateSolidBrush

advapi32

ReportEventA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegOpenKeyA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegSetValueExA
RegCreateKeyA
RegSetValueA
RegDeleteValueA
RegisterEventSourceA
DeregisterEventSource
RegQueryInfoKeyA
RegEnumKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExW
RegOpenKeyW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegEnumValueA
RegQueryValueExW
RegCreateKeyW

ole32

OleCreateLinkToFile
CoTaskMemFree
BindMoniker
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
DoDragDrop
CreateILockBytesOnHGlobal
OleFlushClipboard
OleIsCurrentClipboard
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
CreateDataAdviseHolder
CreateOleAdviseHolder
CoRegisterClassObject
CoRevokeClassObject
CLSIDFromString
OleDoAutoConvert
OleRegGetUserType
OleSaveToStream
ReadClassStg
ReadClassStm
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorage
StgIsStorageILockBytes
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleCreateFromData
OleCreateLinkFromData
OleGetIconOfClass
OleGetClipboard
OleSetClipboard
OleCreateLink
CoTaskMemAlloc
OleGetAutoConvert
OleCreateFromFile
CoMarshalInterface
CoUnmarshalInterface
CreateStreamOnHGlobal
StringFromCLSID
StringFromGUID2
CLSIDFromProgID
ProgIDFromCLSID
CoGetClassObject
CoCreateInstance
MkParseDisplayName
CoIsOle1Class
OleQueryLinkFromData
OleQueryCreateFromData
GetClassFile
CreateBindCtx
OleDuplicateData
ReleaseStgMedium
OleSetMenuDescriptor
CoRegisterMessageFilter
OleUninitialize
OleInitialize
CoGetMalloc
OleRegGetMiscStatus
CoCreateGuid
IIDFromString
CoFreeUnusedLibraries
CoDisconnectObject
IsAccelerator
OleIsRunning
OleRun
OleLockRunning
StgCreateDocfile
WriteClassStg
OleSave
StgOpenStorage
OleLoad

oleaut32

SysStringLen
OleTranslateColor
VariantInit
VariantClear
OleCreatePropertyFrame
SysFreeString
OleCreateFontIndirect
SysAllocString
SysAllocStringByteLen
OaBuildVersion
OleCreatePictureIndirect
VariantChangeType
SetErrorInfo
SysAllocStringLen
GetErrorInfo
DispGetParam
CreateErrorInfo
SysStringByteLen
LoadRegTypeLi
LoadTypeLi
LoadTypeLibEx
UnRegisterTypeLi
RegisterTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
LHashValOfNameSys
SafeArrayGetDim
SafeArrayCreate
SafeArrayGetElemsize
SafeArrayDestroy
VariantCopy
OleLoadPicture
SafeArrayDestroyData
VariantChangeTypeEx
VariantCopyInd
DispGetIDsOfNames
DispInvoke
CreateDispTypeInfo
SafeArrayGetLBound
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayRedim
SafeArrayCopy
SafeArrayPutElement
RevokeActiveObject
SafeArrayAllocDescriptor
OleIconToCursor
SafeArrayAllocData
SafeArrayLock
SafeArrayDestroyDescriptor
VarDateFromStr
SysReAllocStringLen
SafeArrayUnlock
VarR8FromStr
VarCyFromI4
GetActiveObject
VarBstrFromI2
VarBstrFromI4
VarBstrFromR8
VarBstrFromDate
VarBstrFromR4
VarI2FromStr
VarI4FromStr
VarBstrFromCy
VarR4FromStr
VarCyFromStr
VarI4FromR8
SysReAllocString
LHashValOfNameSysA

Exports

Exports

BASIC_CLASS_AddRef
BASIC_CLASS_GetIDsOfNames
BASIC_CLASS_Invoke
BASIC_CLASS_QueryInterface
BASIC_CLASS_Release
BASIC_DISPINTERFACE_GetTICount
BASIC_DISPINTERFACE_GetTypeInfo
CopyRecord
CreateIExprSrvObj
DLLGetDocumentation
DllCanUnloadNow
DllFunctionCall
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EVENT_SINK2_AddRef
EVENT_SINK2_Release
EVENT_SINK_AddRef
EVENT_SINK_GetIDsOfNames
EVENT_SINK_Invoke
EVENT_SINK_QueryInterface
EVENT_SINK_Release
EbCreateContext
EbDestroyContext
EbGetErrorInfo
EbGetHandleOfExecutingProject
EbGetObjConnectionCounts
EbGetVBAObject
EbIsProjectOnStack
EbLibraryLoad
EbLibraryUnload
EbLoadRunTime
EbResetProject
EbResetProjectNormal
EbSetContextWorkerThread
GetMem1
GetMem2
GetMem4
GetMem8
GetMemEvent
GetMemNewObj
GetMemObj
GetMemStr
GetMemVar
IID_IVbaHost
MethCallEngine
ProcCallEngine
PutMem1
PutMem2
PutMem4
PutMem8
PutMemEvent
PutMemNewObj
PutMemObj
PutMemStr
PutMemVar
SetMemEvent
SetMemNewObj
SetMemObj
SetMemVar
ThunRTMain
TipCreateInstanceEx
TipCreateInstanceProject2
TipGetAddressOfPredeclaredInstance
TipInvokeMethod
TipInvokeMethod2
TipSetOption
TipUnloadInstance
TipUnloadProject
UserDllMain
VBDllCanUnloadNow
VBDllGetClassObject
VBDllRegisterServer
VBDllUnRegisterServer
VarPtr
Zombie_AddRef
Zombie_GetIDsOfNames
Zombie_GetTypeInfo
Zombie_GetTypeInfoCount
Zombie_Invoke
Zombie_QueryInterface
Zombie_Release
_CIatan
_CIcos
_CIexp
_CIlog
_CIsin
_CIsqrt
_CItan
__vbaAptOffset
__vbaAryConstruct
__vbaAryConstruct2
__vbaAryCopy
__vbaAryDestruct
__vbaAryLock
__vbaAryMove
__vbaAryRebase1Var
__vbaAryRecCopy
__vbaAryRecMove
__vbaAryUnlock
__vbaAryVar
__vbaAryVarVarg
__vbaBoolErrVar
__vbaBoolStr
__vbaBoolVar
__vbaBoolVarNull
__vbaCVarAryUdt
__vbaCastObj
__vbaCastObjVar
__vbaCheckType
__vbaCheckTypeVar
__vbaChkstk
__vbaCopyBytes
__vbaCopyBytesZero
__vbaCyAbs
__vbaCyAdd
__vbaCyErrVar
__vbaCyFix
__vbaCyForInit
__vbaCyForNext
__vbaCyI2
__vbaCyI4
__vbaCyInt
__vbaCyMul
__vbaCyMulI2
__vbaCySgn
__vbaCyStr
__vbaCySub
__vbaCyUI1
__vbaCyVar
__vbaDateR4
__vbaDateR8
__vbaDateStr
__vbaDateVar
__vbaDerefAry
__vbaDerefAry1
__vbaEnd
__vbaErase
__vbaEraseKeepData
__vbaEraseNoPop
__vbaError
__vbaErrorOverflow
__vbaExceptHandler
__vbaExitEachAry
__vbaExitEachColl
__vbaExitEachVar
__vbaExitProc
__vbaFPException
__vbaFPFix
__vbaFPInt
__vbaFailedFriend
__vbaFileClose
__vbaFileCloseAll
__vbaFileLock
__vbaFileOpen
__vbaFileSeek
__vbaFixstrConstruct
__vbaForEachAry
__vbaForEachCollAd
__vbaForEachCollObj
__vbaForEachCollVar
__vbaForEachVar
__vbaFpCDblR4
__vbaFpCDblR8
__vbaFpCSngR4
__vbaFpCSngR8
__vbaFpCmpCy
__vbaFpCy
__vbaFpI2
__vbaFpI4
__vbaFpR4
__vbaFpR8
__vbaFpUI1
__vbaFreeObj
__vbaFreeObjList
__vbaFreeStr
__vbaFreeStrList
__vbaFreeVar
__vbaFreeVarList
__vbaFreeVarg
__vbaGenerateBoundsError
__vbaGet3
__vbaGet4
__vbaGetFxStr3
__vbaGetFxStr4
__vbaGetOwner3
__vbaGetOwner4
__vbaGosub
__vbaGosubFree
__vbaGosubReturn
__vbaHresultCheck
__vbaHresultCheckNonvirt
__vbaHresultCheckObj
__vbaI2Abs
__vbaI2Cy
__vbaI2ErrVar
__vbaI2ForNextCheck
__vbaI2I4
__vbaI2Sgn
__vbaI2Str
__vbaI2Var
__vbaI4Abs
__vbaI4Cy
__vbaI4ErrVar
__vbaI4ForNextCheck
__vbaI4Sgn
__vbaI4Str
__vbaI4Var
__vbaInStr
__vbaInStrB
__vbaInStrVar
__vbaInStrVarB
__vbaInputFile
__vbaLateIdCall
__vbaLateIdCallLd
__vbaLateIdCallSt
__vbaLateIdNamedCall
__vbaLateIdNamedCallLd
__vbaLateIdNamedCallSt
__vbaLateIdNamedStAd
__vbaLateIdSt
__vbaLateIdStAd
__vbaLateMemCall
__vbaLateMemCallLd
__vbaLateMemCallSt
__vbaLateMemNamedCall
__vbaLateMemNamedCallLd
__vbaLateMemNamedCallSt
__vbaLateMemNamedStAd
__vbaLateMemSt
__vbaLateMemStAd
__vbaLbound
__vbaLdZeroAry
__vbaLenBstr
__vbaLenBstrB
__vbaLenVar
__vbaLenVarB
__vbaLineInputStr
__vbaLineInputVar
__vbaLsetFixstr
__vbaLsetFixstrFree
__vbaMidStmtBstr
__vbaMidStmtBstrB
__vbaMidStmtVar
__vbaMidStmtVarB
__vbaNameFile
__vbaNew
__vbaNew2
__vbaNextEachAry
__vbaNextEachCollAd
__vbaNextEachCollObj
__vbaNextEachCollVar
__vbaNextEachVar
__vbaObjAddref
__vbaObjIs
__vbaObjSet
__vbaObjSetAddref
__vbaObjVar
__vbaOnError
__vbaOnGoCheck
__vbaPowerR8
__vbaPrintFile
__vbaPrintObj
__vbaPut3
__vbaPut4
__vbaPutFxStr3
__vbaPutFxStr4
__vbaPutOwner3
__vbaPutOwner4
__vbaR4Cy
__vbaR4ErrVar
__vbaR4ForNextCheck
__vbaR4Sgn
__vbaR4Str
__vbaR4Var
__vbaR8Cy
__vbaR8ErrVar
__vbaR8FixI2
__vbaR8FixI4
__vbaR8ForNextCheck
__vbaR8IntI2
__vbaR8IntI4
__vbaR8Sgn
__vbaR8Str
__vbaR8Var
__vbaRaiseEvent
__vbaRecAnsiToUni
__vbaRecAssign
__vbaRecDestruct
__vbaRecDestructAnsi
__vbaRecUniToAnsi
__vbaRedim
__vbaRedimPreserve
__vbaRedimPreserveVar
__vbaRedimPreserveVar2
__vbaRedimVar
__vbaRedimVar2
__vbaRefVarAry
__vbaResume
__vbaRsetFixstr
__vbaRsetFixstrFree
__vbaSetSystemError
__vbaStopExe
__vbaStr2Vec
__vbaStrAryToAnsi
__vbaStrAryToUnicode
__vbaStrBool
__vbaStrCat
__vbaStrCmp
__vbaStrComp
__vbaStrCompVar
__vbaStrCopy
__vbaStrCy
__vbaStrDate
__vbaStrErrVarCopy
__vbaStrFixstr
__vbaStrI2
__vbaStrI4
__vbaStrLike
__vbaStrMove
__vbaStrR4
__vbaStrR8
__vbaStrTextCmp
__vbaStrTextLike
__vbaStrToAnsi
__vbaStrToUnicode
__vbaStrUI1
__vbaStrVarCopy
__vbaStrVarMove
__vbaStrVarVal
__vbaUI1Cy
__vbaUI1ErrVar
__vbaUI1I2
__vbaUI1I4
__vbaUI1Sgn
__vbaUI1Str
__vbaUI1Var
__vbaUbound
__vbaUdtVar
__vbaUnkVar
__vbaVar2Vec
__vbaVarAbs
__vbaVarAdd
__vbaVarAnd
__vbaVarCat
__vbaVarCmpEq
__vbaVarCmpGe
__vbaVarCmpGt
__vbaVarCmpLe
__vbaVarCmpLt
__vbaVarCmpNe
__vbaVarCopy
__vbaVarDateVar
__vbaVarDiv
__vbaVarDup
__vbaVarEqv
__vbaVarErrI4
__vbaVarFix
__vbaVarForInit
__vbaVarForNext
__vbaVarIdiv
__vbaVarImp
__vbaVarIndexLoad
__vbaVarIndexLoadRef
__vbaVarIndexLoadRefLock
__vbaVarIndexStore
__vbaVarIndexStoreObj
__vbaVarInt
__vbaVarLateMemCallLd
__vbaVarLateMemCallLdRf
__vbaVarLateMemCallSt
__vbaVarLateMemSt
__vbaVarLateMemStAd
__vbaVarLike
__vbaVarLikeVar
__vbaVarMod
__vbaVarMove
__vbaVarMul
__vbaVarNeg
__vbaVarNot
__vbaVarOr
__vbaVarPow
__vbaVarSetObj
__vbaVarSetObjAddref
__vbaVarSetUnk
__vbaVarSetUnkAddref
__vbaVarSetVar
__vbaVarSetVarAddref
__vbaVarSub
__vbaVarTextCmpEq
__vbaVarTextCmpGe
__vbaVarTextCmpGt
__vbaVarTextCmpLe
__vbaVarTextCmpLt
__vbaVarTextCmpNe
__vbaVarTextLike
__vbaVarTextLikeVar
__vbaVarTextTstEq
__vbaVarTextTstGe
__vbaVarTextTstGt
__vbaVarTextTstLe
__vbaVarTextTstLt
__vbaVarTextTstNe
__vbaVarTstEq
__vbaVarTstGe
__vbaVarTstGt
__vbaVarTstLe
__vbaVarTstLt
__vbaVarTstNe
__vbaVarVargNofree
__vbaVarXor
__vbaVarZero
__vbaVargObj
__vbaVargObjAddref
__vbaVargParmRef
__vbaVargUnk
__vbaVargUnkAddref
__vbaVargVar
__vbaVargVarCopy
__vbaVargVarMove
__vbaVargVarRef
__vbaVerifyVarObj
__vbaWriteFile
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_allmul
rtBoolFromErrVar
rtBstrFromErrVar
rtCyFromErrVar
rtDecFromVar
rtI2FromErrVar
rtI4FromErrVar
rtR4FromErrVar
rtR8FromErrVar
rtUI1FromErrVar
rtcAbsVar
rtcAnsiValueBstr
rtcAppActivate
rtcAppleScript
rtcArray
rtcAtn
rtcBeep
rtcBstrFromAnsi
rtcBstrFromByte
rtcBstrFromChar
rtcBstrFromError
rtcBstrFromFormatVar
rtcByteValueBstr
rtcCVErrFromVar
rtcCallByName
rtcChangeDir
rtcChangeDrive
rtcCharValueBstr
rtcChoose
rtcCommandBstr
rtcCommandVar
rtcCompareBstr
rtcCos
rtcCreateObject
rtcCreateObject2
rtcCurrentDir
rtcCurrentDirBstr
rtcDDB
rtcDateAdd
rtcDateDiff
rtcDateFromVar
rtcDatePart
rtcDeleteSetting
rtcDir
rtcDoEvents
rtcEndOfFile
rtcEnvironBstr
rtcEnvironVar
rtcErrObj
rtcExp
rtcFV
rtcFileAttributes
rtcFileCopy
rtcFileDateTime
rtcFileLen
rtcFileLength
rtcFileLocation
rtcFileReset
rtcFileSeek
rtcFileWidth
rtcFilter
rtcFixVar
rtcFormatCurrency
rtcFormatDateTime

Sections

.text
Size: 1008KB - Virtual size: 1004KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ENGINE
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSVCRT40.DLL
.dll windows:4 windows x86 arch:x86

57259dcda30c27e977785c33a8441434

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsValidLocale
RtlUnwind
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ResumeThread
GetLastError
CreateThread
TlsSetValue
ExitThread
CloseHandle
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
FindClose
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
HeapFree
HeapAlloc
HeapCreate
HeapDestroy
ReadFile
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
CreateFileA
SetStdHandle
SetEndOfFile
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
Sleep
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
SetEnvironmentVariableW
RaiseException
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
GetLocaleInfoW
GetTimeZoneInformation
HeapReAlloc
HeapSize
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapUnlock
HeapWalk
HeapLock
HeapCompact
ReadConsoleA
SetConsoleMode
GetConsoleMode
WriteConsoleA
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
LockFile
UnlockFile
CreatePipe
CreateFileW
GetLocalTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
GetSystemTime

Exports

Exports

$I10_OUTPUT
??0Iostream_init@@QAE@AAVios@@H@Z
??0Iostream_init@@QAE@XZ
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??0filebuf@@QAE@ABV0@@Z
??0filebuf@@QAE@H@Z
??0filebuf@@QAE@HPADH@Z
??0filebuf@@QAE@XZ
??0fstream@@QAE@ABV0@@Z
??0fstream@@QAE@H@Z
??0fstream@@QAE@HPADH@Z
??0fstream@@QAE@PBDHH@Z
??0fstream@@QAE@XZ
??0ifstream@@QAE@ABV0@@Z
??0ifstream@@QAE@H@Z
??0ifstream@@QAE@HPADH@Z
??0ifstream@@QAE@PBDHH@Z
??0ifstream@@QAE@XZ
??0ios@@IAE@ABV0@@Z
??0ios@@IAE@XZ
??0ios@@QAE@PAVstreambuf@@@Z
??0iostream@@IAE@ABV0@@Z
??0iostream@@IAE@XZ
??0iostream@@QAE@PAVstreambuf@@@Z
??0istream@@IAE@ABV0@@Z
??0istream@@IAE@XZ
??0istream@@QAE@PAVstreambuf@@@Z
??0istream_withassign@@QAE@ABV0@@Z
??0istream_withassign@@QAE@PAVstreambuf@@@Z
??0istream_withassign@@QAE@XZ
??0istrstream@@QAE@ABV0@@Z
??0istrstream@@QAE@PAD@Z
??0istrstream@@QAE@PADH@Z
??0logic_error@@QAE@ABQBD@Z
??0logic_error@@QAE@ABV0@@Z
??0ofstream@@QAE@ABV0@@Z
??0ofstream@@QAE@H@Z
??0ofstream@@QAE@HPADH@Z
??0ofstream@@QAE@PBDHH@Z
??0ofstream@@QAE@XZ
??0ostream@@IAE@ABV0@@Z
??0ostream@@IAE@XZ
??0ostream@@QAE@PAVstreambuf@@@Z
??0ostream_withassign@@QAE@ABV0@@Z
??0ostream_withassign@@QAE@PAVstreambuf@@@Z
??0ostream_withassign@@QAE@XZ
??0ostrstream@@QAE@ABV0@@Z
??0ostrstream@@QAE@PADHH@Z
??0ostrstream@@QAE@XZ
??0stdiobuf@@QAE@ABV0@@Z
??0stdiobuf@@QAE@PAU_iobuf@@@Z
??0stdiostream@@QAE@ABV0@@Z
??0stdiostream@@QAE@PAU_iobuf@@@Z
??0streambuf@@IAE@PADH@Z
??0streambuf@@IAE@XZ
??0streambuf@@QAE@ABV0@@Z
??0strstream@@QAE@ABV0@@Z
??0strstream@@QAE@PADHH@Z
??0strstream@@QAE@XZ
??0strstreambuf@@QAE@ABV0@@Z
??0strstreambuf@@QAE@H@Z
??0strstreambuf@@QAE@P6APAXJ@ZP6AXPAX@Z@Z
??0strstreambuf@@QAE@PADH0@Z
??0strstreambuf@@QAE@XZ
??1Iostream_init@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1filebuf@@UAE@XZ
??1fstream@@UAE@XZ
??1ifstream@@UAE@XZ
??1ios@@UAE@XZ
??1iostream@@UAE@XZ
??1istream@@UAE@XZ
??1istream_withassign@@UAE@XZ
??1istrstream@@UAE@XZ
??1logic_error@@UAE@XZ
??1ofstream@@UAE@XZ
??1ostream@@UAE@XZ
??1ostream_withassign@@UAE@XZ
??1ostrstream@@UAE@XZ
??1stdiobuf@@UAE@XZ
??1stdiostream@@UAE@XZ
??1streambuf@@UAE@XZ
??1strstream@@UAE@XZ
??1strstreambuf@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4Iostream_init@@QAEAAV0@ABV0@@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??4filebuf@@QAEAAV0@ABV0@@Z
??4fstream@@QAEAAV0@AAV0@@Z
??4ifstream@@QAEAAV0@ABV0@@Z
??4ios@@IAEAAV0@ABV0@@Z
??4iostream@@IAEAAV0@AAV0@@Z
??4iostream@@IAEAAV0@PAVstreambuf@@@Z
??4istream@@IAEAAV0@ABV0@@Z
??4istream@@IAEAAV0@PAVstreambuf@@@Z
??4istream_withassign@@QAEAAV0@ABV0@@Z
??4istream_withassign@@QAEAAVistream@@ABV1@@Z
??4istream_withassign@@QAEAAVistream@@PAVstreambuf@@@Z
??4istrstream@@QAEAAV0@ABV0@@Z
??4logic_error@@QAEAAV0@ABV0@@Z
??4ofstream@@QAEAAV0@ABV0@@Z
??4ostream@@IAEAAV0@ABV0@@Z
??4ostream@@IAEAAV0@PAVstreambuf@@@Z
??4ostream_withassign@@QAEAAV0@ABV0@@Z
??4ostream_withassign@@QAEAAVostream@@ABV1@@Z
??4ostream_withassign@@QAEAAVostream@@PAVstreambuf@@@Z
??4ostrstream@@QAEAAV0@ABV0@@Z
??4stdiobuf@@QAEAAV0@ABV0@@Z
??4stdiostream@@QAEAAV0@AAV0@@Z
??4streambuf@@QAEAAV0@ABV0@@Z
??4strstream@@QAEAAV0@AAV0@@Z
??4strstreambuf@@QAEAAV0@ABV0@@Z
??5istream@@QAEAAV0@AAC@Z
??5istream@@QAEAAV0@AAD@Z
??5istream@@QAEAAV0@AAE@Z
??5istream@@QAEAAV0@AAF@Z
??5istream@@QAEAAV0@AAG@Z
??5istream@@QAEAAV0@AAH@Z
??5istream@@QAEAAV0@AAI@Z
??5istream@@QAEAAV0@AAJ@Z
??5istream@@QAEAAV0@AAK@Z
??5istream@@QAEAAV0@AAM@Z
??5istream@@QAEAAV0@AAN@Z
??5istream@@QAEAAV0@AAO@Z
??5istream@@QAEAAV0@P6AAAV0@AAV0@@Z@Z
??5istream@@QAEAAV0@P6AAAVios@@AAV1@@Z@Z
??5istream@@QAEAAV0@PAC@Z
??5istream@@QAEAAV0@PAD@Z
??5istream@@QAEAAV0@PAE@Z
??5istream@@QAEAAV0@PAVstreambuf@@@Z
??6ostream@@QAEAAV0@C@Z
??6ostream@@QAEAAV0@D@Z
??6ostream@@QAEAAV0@E@Z
??6ostream@@QAEAAV0@F@Z
??6ostream@@QAEAAV0@G@Z
??6ostream@@QAEAAV0@H@Z
??6ostream@@QAEAAV0@I@Z
??6ostream@@QAEAAV0@J@Z
??6ostream@@QAEAAV0@K@Z
??6ostream@@QAEAAV0@M@Z
??6ostream@@QAEAAV0@N@Z
??6ostream@@QAEAAV0@O@Z
??6ostream@@QAEAAV0@P6AAAV0@AAV0@@Z@Z
??6ostream@@QAEAAV0@P6AAAVios@@AAV1@@Z@Z
??6ostream@@QAEAAV0@PAVstreambuf@@@Z
??6ostream@@QAEAAV0@PBC@Z
??6ostream@@QAEAAV0@PBD@Z
??6ostream@@QAEAAV0@PBE@Z
??6ostream@@QAEAAV0@PBX@Z
??7ios@@QBEHXZ
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??Bios@@QBEPAXXZ
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_7filebuf@@6B@
??_7fstream@@6B@
??_7ifstream@@6B@
??_7ios@@6B@
??_7iostream@@6B@
??_7istream@@6B@
??_7istream_withassign@@6B@
??_7istrstream@@6B@
??_7logic_error@@6B@
??_7ofstream@@6B@
??_7ostream@@6B@
??_7ostream_withassign@@6B@
??_7ostrstream@@6B@
??_7stdiobuf@@6B@
??_7stdiostream@@6B@
??_7streambuf@@6B@
??_7strstream@@6B@
??_7strstreambuf@@6B@
??_8fstream@@7Bistream@@@
??_8fstream@@7Bostream@@@
??_8ifstream@@7B@
??_8iostream@@7Bistream@@@
??_8iostream@@7Bostream@@@
??_8istream@@7B@
??_8istream_withassign@@7B@
??_8istrstream@@7B@
??_8ofstream@@7B@
??_8ostream@@7B@
??_8ostream_withassign@@7B@
??_8ostrstream@@7B@
??_8stdiostream@@7Bistream@@@
??_8stdiostream@@7Bostream@@@
??_8strstream@@7Bistream@@@
??_8strstream@@7Bostream@@@
??_Dfstream@@QAEXXZ
??_Difstream@@QAEXXZ
??_Diostream@@QAEXXZ
??_Distream@@QAEXXZ
??_Distream_withassign@@QAEXXZ
??_Distrstream@@QAEXXZ
??_Dofstream@@QAEXXZ
??_Dostream@@QAEXXZ
??_Dostream_withassign@@QAEXXZ
??_Dostrstream@@QAEXXZ
??_Dstdiostream@@QAEXXZ
??_Dstrstream@@QAEXXZ
??_EIostream_init@@QAEPAXI@Z
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_Efilebuf@@UAEPAXI@Z
??_Efstream@@UAEPAXI@Z
??_Eifstream@@UAEPAXI@Z
??_Eios@@UAEPAXI@Z
??_Eiostream@@UAEPAXI@Z
??_Eistream@@UAEPAXI@Z
??_Eistream_withassign@@UAEPAXI@Z
??_Eistrstream@@UAEPAXI@Z
??_Elogic_error@@UAEPAXI@Z
??_Eofstream@@UAEPAXI@Z
??_Eostream@@UAEPAXI@Z
??_Eostream_withassign@@UAEPAXI@Z
??_Eostrstream@@UAEPAXI@Z
??_Estdiobuf@@UAEPAXI@Z
??_Estdiostream@@UAEPAXI@Z
??_Estreambuf@@UAEPAXI@Z
??_Estrstream@@UAEPAXI@Z
??_Estrstreambuf@@UAEPAXI@Z
??_GIostream_init@@QAEPAXI@Z
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
??_Gfilebuf@@UAEPAXI@Z
??_Gfstream@@UAEPAXI@Z
??_Gifstream@@UAEPAXI@Z
??_Gios@@UAEPAXI@Z
??_Giostream@@UAEPAXI@Z
??_Gistream@@UAEPAXI@Z
??_Gistream_withassign@@UAEPAXI@Z
??_Gistrstream@@UAEPAXI@Z
??_Glogic_error@@UAEPAXI@Z
??_Gofstream@@UAEPAXI@Z
??_Gostream@@UAEPAXI@Z
??_Gostream_withassign@@UAEPAXI@Z
??_Gostrstream@@UAEPAXI@Z
??_Gstdiobuf@@UAEPAXI@Z
??_Gstdiostream@@UAEPAXI@Z
??_Gstreambuf@@UAEPAXI@Z
??_Gstrstream@@UAEPAXI@Z
??_Gstrstreambuf@@UAEPAXI@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?adjustfield@ios@@2JB
?allocate@streambuf@@IAEHXZ
?attach@filebuf@@QAEPAV1@H@Z
?attach@fstream@@QAEXH@Z
?attach@ifstream@@QAEXH@Z
?attach@ofstream@@QAEXH@Z
?bad@ios@@QBEHXZ
?base@streambuf@@IBEPADXZ
?basefield@ios@@2JB
?before@type_info@@QBEHABV1@@Z
?binary@filebuf@@2HB
?bitalloc@ios@@SAJXZ
?blen@streambuf@@IBEHXZ
?cerr@@3Vostream_withassign@@A
?cin@@3Vistream_withassign@@A
?clear@ios@@QAEXH@Z
?clog@@3Vostream_withassign@@A
?close@filebuf@@QAEPAV1@XZ
?close@fstream@@QAEXXZ
?close@ifstream@@QAEXXZ
?close@ofstream@@QAEXXZ
?clrlock@ios@@QAAXXZ
?clrlock@streambuf@@QAEXXZ
?cout@@3Vostream_withassign@@A
?dbp@streambuf@@QAEXXZ
?dec@@YAAAVios@@AAV1@@Z
?delbuf@ios@@QAEXH@Z
?delbuf@ios@@QBEHXZ
?doallocate@streambuf@@MAEHXZ
?doallocate@strstreambuf@@MAEHXZ
?eatwhite@istream@@QAEXXZ
?eback@streambuf@@IBEPADXZ
?ebuf@streambuf@@IBEPADXZ
?egptr@streambuf@@IBEPADXZ
?endl@@YAAAVostream@@AAV1@@Z
?ends@@YAAAVostream@@AAV1@@Z
?eof@ios@@QBEHXZ
?epptr@streambuf@@IBEPADXZ
?fLockcInit@ios@@0HA
?fail@ios@@QBEHXZ
?fd@filebuf@@QBEHXZ
?fd@fstream@@QBEHXZ
?fd@ifstream@@QBEHXZ
?fd@ofstream@@QBEHXZ
?fill@ios@@QAEDD@Z
?fill@ios@@QBEDXZ
?flags@ios@@QAEJJ@Z
?flags@ios@@QBEJXZ
?floatfield@ios@@2JB
?flush@@YAAAVostream@@AAV1@@Z
?flush@ostream@@QAEAAV1@XZ
?freeze@strstreambuf@@QAEXH@Z
?gbump@streambuf@@IAEXH@Z
?gcount@istream@@QBEHXZ
?get@istream@@IAEAAV1@PADHH@Z
?get@istream@@QAEAAV1@AAC@Z
?get@istream@@QAEAAV1@AAD@Z
?get@istream@@QAEAAV1@AAE@Z
?get@istream@@QAEAAV1@AAVstreambuf@@D@Z
?get@istream@@QAEAAV1@PACHD@Z
?get@istream@@QAEAAV1@PADHD@Z
?get@istream@@QAEAAV1@PAEHD@Z
?get@istream@@QAEHXZ
?getdouble@istream@@AAEHPADH@Z
?getint@istream@@AAEHPAD@Z
?getline@istream@@QAEAAV1@PACHD@Z
?getline@istream@@QAEAAV1@PADHD@Z
?getline@istream@@QAEAAV1@PAEHD@Z
?good@ios@@QBEHXZ
?gptr@streambuf@@IBEPADXZ
?hex@@YAAAVios@@AAV1@@Z
?ignore@istream@@QAEAAV1@HH@Z
?in_avail@streambuf@@QBEHXZ
?init@ios@@IAEXPAVstreambuf@@@Z
?ipfx@istream@@QAEHH@Z
?is_open@filebuf@@QBEHXZ
?is_open@fstream@@QBEHXZ
?is_open@ifstream@@QBEHXZ
?is_open@ofstream@@QBEHXZ
?isfx@istream@@QAEXXZ
?iword@ios@@QBEAAJH@Z
?lock@ios@@QAAXXZ
?lock@streambuf@@QAEXXZ
?lockbuf@ios@@QAAXXZ
?lockc@ios@@KAXXZ
?lockptr@ios@@IAEPAU_CRT_CRITICAL_SECTION@@XZ
?lockptr@streambuf@@IAEPAU_CRT_CRITICAL_SECTION@@XZ
?name@type_info@@QBEPBDXZ
?oct@@YAAAVios@@AAV1@@Z
?open@filebuf@@QAEPAV1@PBDHH@Z
?open@fstream@@QAEXPBDHH@Z
?open@ifstream@@QAEXPBDHH@Z
?open@ofstream@@QAEXPBDHH@Z
?openprot@filebuf@@2HB
?opfx@ostream@@QAEHXZ
?osfx@ostream@@QAEXXZ
?out_waiting@streambuf@@QBEHXZ
?overflow@filebuf@@UAEHH@Z
?overflow@stdiobuf@@UAEHH@Z
?overflow@strstreambuf@@UAEHH@Z
?pbackfail@stdiobuf@@UAEHH@Z
?pbackfail@streambuf@@UAEHH@Z
?pbase@streambuf@@IBEPADXZ
?pbump@streambuf@@IAEXH@Z
?pcount@ostrstream@@QBEHXZ
?pcount@strstream@@QBEHXZ
?peek@istream@@QAEHXZ
?pptr@streambuf@@IBEPADXZ
?precision@ios@@QAEHH@Z
?precision@ios@@QBEHXZ
?put@ostream@@QAEAAV1@C@Z
?put@ostream@@QAEAAV1@D@Z
?put@ostream@@QAEAAV1@E@Z
?putback@istream@@QAEAAV1@D@Z
?pword@ios@@QBEAAPAXH@Z
?raw_name@type_info@@QBEPBDXZ
?rdbuf@fstream@@QBEPAVfilebuf@@XZ
?rdbuf@ifstream@@QBEPAVfilebuf@@XZ
?rdbuf@ios@@QBEPAVstreambuf@@XZ
?rdbuf@istrstream@@QBEPAVstrstreambuf@@XZ
?rdbuf@ofstream@@QBEPAVfilebuf@@XZ
?rdbuf@ostrstream@@QBEPAVstrstreambuf@@XZ
?rdbuf@stdiostream@@QBEPAVstdiobuf@@XZ
?rdbuf@strstream@@QBEPAVstrstreambuf@@XZ
?rdstate@ios@@QBEHXZ
?read@istream@@QAEAAV1@PACH@Z
?read@istream@@QAEAAV1@PADH@Z
?read@istream@@QAEAAV1@PAEH@Z
?sbumpc@streambuf@@QAEHXZ
?seekg@istream@@QAEAAV1@J@Z
?seekg@istream@@QAEAAV1@JW4seek_dir@ios@@@Z
?seekoff@filebuf@@UAEJJW4seek_dir@ios@@H@Z
?seekoff@stdiobuf@@UAEJJW4seek_dir@ios@@H@Z
?seekoff@streambuf@@UAEJJW4seek_dir@ios@@H@Z
?seekoff@strstreambuf@@UAEJJW4seek_dir@ios@@H@Z
?seekp@ostream@@QAEAAV1@J@Z
?seekp@ostream@@QAEAAV1@JW4seek_dir@ios@@@Z
?seekpos@streambuf@@UAEJJH@Z
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?setb@streambuf@@IAEXPAD0H@Z
?setbuf@filebuf@@UAEPAVstreambuf@@PADH@Z
?setbuf@fstream@@QAEPAVstreambuf@@PADH@Z
?setbuf@ifstream@@QAEPAVstreambuf@@PADH@Z
?setbuf@ofstream@@QAEPAVstreambuf@@PADH@Z
?setbuf@streambuf@@UAEPAV1@PADH@Z
?setbuf@strstreambuf@@UAEPAVstreambuf@@PADH@Z
?setf@ios@@QAEJJ@Z
?setf@ios@@QAEJJJ@Z
?setg@streambuf@@IAEXPAD00@Z
?setlock@ios@@QAAXXZ
?setlock@streambuf@@QAEXXZ
?setmode@filebuf@@QAEHH@Z
?setmode@fstream@@QAEHH@Z
?setmode@ifstream@@QAEHH@Z
?setmode@ofstream@@QAEHH@Z
?setp@streambuf@@IAEXPAD0@Z
?setrwbuf@stdiobuf@@QAEHHH@Z
?sgetc@streambuf@@QAEHXZ
?sgetn@streambuf@@QAEHPADH@Z
?sh_none@filebuf@@2HB
?sh_read@filebuf@@2HB
?sh_write@filebuf@@2HB
?snextc@streambuf@@QAEHXZ
?sputbackc@streambuf@@QAEHD@Z
?sputc@streambuf@@QAEHH@Z
?sputn@streambuf@@QAEHPBDH@Z
?stdiofile@stdiobuf@@QAEPAU_iobuf@@XZ
?stossc@streambuf@@QAEXXZ
?str@istrstream@@QAEPADXZ
?str@ostrstream@@QAEPADXZ
?str@strstream@@QAEPADXZ
?str@strstreambuf@@QAEPADXZ
?sunk_with_stdio@ios@@0HA
?sync@filebuf@@UAEHXZ
?sync@istream@@QAEHXZ
?sync@stdiobuf@@UAEHXZ
?sync@streambuf@@UAEHXZ
?sync@strstreambuf@@UAEHXZ
?sync_with_stdio@ios@@SAXXZ
?tellg@istream@@QAEJXZ
?tellp@ostream@@QAEJXZ
?terminate@@YAXXZ
?text@filebuf@@2HB
?tie@ios@@QAEPAVostream@@PAV2@@Z
?tie@ios@@QBEPAVostream@@XZ
?unbuffered@streambuf@@IAEXH@Z
?unbuffered@streambuf@@IBEHXZ
?underflow@filebuf@@UAEHXZ
?underflow@stdiobuf@@UAEHXZ
?underflow@strstreambuf@@UAEHXZ
?unexpected@@YAXXZ
?unlock@ios@@QAAXXZ
?unlock@streambuf@@QAEXXZ
?unlockbuf@ios@@QAAXXZ
?unlockc@ios@@KAXXZ
?unsetf@ios@@QAEJJ@Z
?what@exception@@UBEPBDXZ
?width@ios@@QAEHH@Z
?width@ios@@QBEHXZ
?write@ostream@@QAEAAV1@PBCH@Z
?write@ostream@@QAEAAV1@PBDH@Z
?write@ostream@@QAEAAV1@PBEH@Z
?writepad@ostream@@AAEAAV1@PBD0@Z
?ws@@YAAAVistream@@AAV1@@Z
?x_curindex@ios@@0HA
?x_lockc@ios@@0U_CRT_CRITICAL_SECTION@@A
?x_maxbit@ios@@0JA
?x_statebuf@ios@@0PAJA
?xalloc@ios@@SAHXZ
?xsgetn@streambuf@@UAEHPADH@Z
?xsputn@streambuf@@UAEHPBDH@Z
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CxxThrowException

Sections

.text
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSWINSCK.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

fcc40667ac22e0c598518006de958259

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:0e:7d:a7:00:00:00:00:00:48
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/10/2003, 05:59

Not After

25/01/2005, 06:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5b:3d:e6:b4:56:d1:a3:cc:c3:77:ec:dd:05:31:a7:25:62:28:b5:bc
Signer

Actual PE Digest

5b:3d:e6:b4:56:d1:a3:cc:c3:77:ec:dd:05:31:a7:25:62:28:b5:bc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

wsock32

accept
listen
inet_ntoa
recv
WSAGetLastError
WSASetLastError
select
__WSAFDIsSet
shutdown
ntohs
sendto
recvfrom
connect
getsockopt
setsockopt
getsockname
getpeername
closesocket
WSACancelAsyncRequest
gethostbyaddr
bind
WSAAsyncSelect
socket
WSAStartup
WSACleanup
inet_addr
WSAAsyncGetHostByName
WSAAsyncGetHostByAddr
gethostbyname
htons
gethostname
ioctlsocket
send

kernel32

WideCharToMultiByte
GetVersion
GetProcAddress
GetModuleFileNameA
InitializeCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
lstrcpynA
lstrcpyA
lstrlenA
lstrcatA
IsBadWritePtr
DisableThreadLibraryCalls
lstrlenW
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
LocalFree
FormatMessageA
GetTickCount
MultiByteToWideChar
SetLastError
GetLocaleInfoA
DeleteCriticalSection
FreeLibrary
lstrcmpA
InterlockedDecrement
GetFileAttributesA
GetWindowsDirectoryA
LoadLibraryA
GetLastError
InterlockedIncrement
lstrcmpiA
FindResourceA
LockResource
LoadResource
HeapReAlloc

user32

EndDialog
DrawEdge
DialogBoxParamA
LoadCursorA
MessageBoxA
GetActiveWindow
GetDC
CharNextA
ReleaseDC
SetParent
GetWindowRect
ShowWindow
WinHelpA
IsDialogMessageA
GetWindow
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
IsChild
GetKeyState
SetWindowPos
LoadBitmapA
IsWindowVisible
EndPaint
GetClientRect
BeginPaint
GetSystemMetrics
GetDlgItemTextA
ClientToScreen
OffsetRect
EqualRect
IntersectRect
SetWindowRgn
PtInRect
MessageBeep
LoadStringA
IsWindow
CreateDialogIndirectParamA
GetParent
SetDlgItemTextA
SendMessageA
DefWindowProcA
GetWindowLongA
DestroyWindow
SetWindowLongA
KillTimer
SetTimer
UnregisterClassA
RegisterClassA
PeekMessageA
PostMessageA
SendDlgItemMessageA
GetDlgItemInt
SetDlgItemInt
SetFocus
MoveWindow
CreateWindowExA
wsprintfA

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CreateOleAdviseHolder

advapi32

RegDeleteValueA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

VariantChangeType
SysAllocStringLen
SysAllocString
SafeArrayRedim
SysStringLen
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi
LoadTypeLibEx
OleCreatePropertyFrame
LoadRegTypeLi
SetErrorInfo
SysFreeString
CreateErrorInfo
GetErrorInfo
SafeArrayUnaccessData
SafeArrayDestroy
VariantClear
SysAllocStringByteLen
SafeArrayCreate
SysStringByteLen
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
VariantInit
SafeArrayAccessData
SafeArrayGetDim

gdi32

GetDeviceCaps
CreateCompatibleDC
CreateRectRgnIndirect
GetWindowExtEx
GetViewportExtEx
DeleteDC
DeleteObject
GetObjectA
LPtoDP
SetMapMode
SetViewportExtEx
SetWindowExtEx
SetViewportOrgEx
SetWindowOrgEx
CreateDCA
BitBlt
SelectObject

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OLEAUT32.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

d7112004d3c345a2ed68d74bba3d37f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ole32

StgCreateDocfileOnILockBytes
WriteFmtUserTypeStg
WriteClassStg
ReadClassStg
MkParseDisplayName
StgCreateDocfile
CreateBindCtx
CoCreateInstance
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
CoSetState
ReleaseStgMedium
CoGetClassObject
StringFromGUID2
CreateItemMoniker
GetRunningObjectTable
CoGetMalloc
CLSIDFromString
CoUnmarshalInterface
CoMarshalInterface
CoUnmarshalHresult
CoMarshalHresult

user32

CreateWindowExA
RegisterClipboardFormatA
RegisterClassA
GetClassInfoA
GetWindowLongA
IsWindow
DestroyWindow
DefWindowProcA
GetSysColor
SetWindowLongA
SetFocus
SetActiveWindow
GetActiveWindow
PostQuitMessage
PostMessageA
DispatchMessageA
DispatchMessageW
TranslateMessage
GetMessageW
GetMessageA
SendMessageA
EnableWindow
GetParent
GetFocus
CharNextA
GetWindowTextA
CharLowerA
SendMessageW
GetDlgItem
GetKeyState
ReleaseDC
GetDialogBaseUnits
GetDC
GetClientRect
IsWindowUnicode
GetTopWindow
WinHelpA
wsprintfA
DestroyIcon
CreateIcon
CreateCursor
DrawIcon
GetSystemMetrics
GetIconInfo
CopyIcon
CopyImage

gdi32

GetWindowOrgEx
CreateHalftonePalette
CreateDIBitmap
CreateDIBSection
Escape
SetBitmapBits
SetDIBits
PlayMetaFileRecord
CreatePalette
GetEnhMetaFileBits
GetMetaFileBitsEx
CreateCompatibleDC
BitBlt
DeleteDC
CreateCompatibleBitmap
GetBitmapBits
SetEnhMetaFileBits
SaveDC
IntersectClipRect
GetPaletteEntries
OffsetViewportOrgEx
PlayEnhMetaFile
EnumMetaFile
RestoreDC
SetStretchBltMode
SetBkColor
SetTextColor
SetMapMode
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
GetWinMetaFileBits
GetCurrentObject
GetObjectType
GetStockObject
SelectPalette
RealizePalette
StretchBlt
GetDIBits
StretchDIBits
GetObjectA
GetBitmapDimensionEx
GetEnhMetaFileHeader
SetMetaFileBitsEx
CreateBitmap
PatBlt
DeleteEnhMetaFile
DeleteMetaFile
GetTextExtentPointA
GetDeviceCaps
SelectObject
GetTextMetricsW
GetTextMetricsA
GetTextFaceW
GetTextFaceA
EnumFontFamiliesExA
CreateFontIndirectA
DeleteObject

kernel32

LoadLibraryA
GlobalSize
FreeLibrary
LockResource
FlushFileBuffers
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
GetCurrentDirectoryA
VirtualAlloc
HeapSize
HeapReAlloc
RaiseException
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
ExitProcess
DeleteFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
HeapFree
HeapAlloc
SetEnvironmentVariableA
SetFilePointer
GetLocalTime
MultiByteToWideChar
GetProcAddress
SetStdHandle
GetLocaleInfoA
GetSystemDefaultLCID
GetUserDefaultLCID
GetVersionExA
TlsGetValue
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
GetModuleHandleA
CompareStringA
CompareStringW
LCMapStringA
LCMapStringW
GetStringTypeExA
GetStringTypeExW
GetLocaleInfoW
GetLastError
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
IsBadWritePtr
IsBadReadPtr
InterlockedExchange
GetVersion
IsDBCSLeadByte
MulDiv
RtlUnwind
GetDriveTypeA
LoadResource
FindResourceA
_lclose
_lread
_lwrite
_llseek
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
MapViewOfFile
GlobalHandle
GlobalReAlloc
GlobalDeleteAtom
GlobalAddAtomA
lstrlenW
GetDriveTypeW
TlsAlloc
_lopen
lstrcmpiA
UnmapViewOfFile
CloseHandle
TlsSetValue
GetSystemInfo
CreateFileMappingA
GetFileSize
SearchPathA
TlsFree
CreateFileA
SetErrorMode
GetFullPathNameA
SetLastError
GetCommandLineA

advapi32

RegOpenKeyW
RegQueryInfoKeyA
RegDeleteKeyA
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegFlushKey
RegSetValueA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA
RegSetValueExA

Exports

Exports

BSTR_UserFree
BSTR_UserMarshal
BSTR_UserSize
BSTR_UserUnmarshal
BstrFromVector
ClearCustData
CreateDispTypeInfo
CreateErrorInfo
CreateStdDispatch
CreateTypeLib
CreateTypeLib2
DispCallFunc
DispGetIDsOfNames
DispGetParam
DispInvoke
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DosDateTimeToVariantTime
GetActiveObject
GetAltMonthNames
GetErrorInfo
GetRecordInfoFromGuids
GetRecordInfoFromTypeInfo
LHashValOfNameSys
LHashValOfNameSysA
LPSAFEARRAY_Marshal
LPSAFEARRAY_Size
LPSAFEARRAY_Unmarshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserUnmarshal
LoadRegTypeLib
LoadTypeLib
LoadTypeLibEx
OACreateTypeLib2
OaBuildVersion
OleCreateFontIndirect
OleCreatePictureIndirect
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
OleIconToCursor
OleLoadPicture
OleLoadPictureEx
OleLoadPictureFile
OleLoadPictureFileEx
OleLoadPicturePath
OleSavePictureFile
OleTranslateColor
QueryPathOfRegTypeLib
RegisterActiveObject
RegisterTypeLib
RevokeActiveObject
SafeArrayAccessData
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayAllocDescriptorEx
SafeArrayCopy
SafeArrayCopyData
SafeArrayCreate
SafeArrayCreateEx
SafeArrayCreateVector
SafeArrayCreateVectorEx
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayGetDim
SafeArrayGetElement
SafeArrayGetElemsize
SafeArrayGetIID
SafeArrayGetLBound
SafeArrayGetRecordInfo
SafeArrayGetUBound
SafeArrayGetVartype
SafeArrayLock
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayRedim
SafeArraySetIID
SafeArraySetRecordInfo
SafeArrayUnaccessData
SafeArrayUnlock
SetErrorInfo
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
SysReAllocString
SysReAllocStringLen
SysStringByteLen
SysStringLen
SystemTimeToVariantTime
UnRegisterTypeLib
UserBSTR_free_inst
UserBSTR_free_local
UserBSTR_from_local
UserBSTR_to_local
UserEXCEPINFO_free_inst
UserEXCEPINFO_free_local
UserEXCEPINFO_from_local
UserEXCEPINFO_to_local
UserHWND_free_inst
UserHWND_free_local
UserHWND_from_local
UserHWND_to_local
UserMSG_free_inst
UserMSG_free_local
UserMSG_from_local
UserMSG_to_local
UserVARIANT_free_inst
UserVARIANT_free_local
UserVARIANT_from_local
UserVARIANT_to_local
VARIANT_UserFree
VARIANT_UserMarshal
VARIANT_UserSize
VARIANT_UserUnmarshal
VarAbs
VarAdd
VarAnd
VarBoolFromCy
VarBoolFromDate
VarBoolFromDec
VarBoolFromDisp
VarBoolFromI1
VarBoolFromI2
VarBoolFromI4
VarBoolFromR4
VarBoolFromR8
VarBoolFromStr
VarBoolFromUI1
VarBoolFromUI2
VarBoolFromUI4
VarBstrCat
VarBstrCmp
VarBstrFromBool
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarBstrFromDisp
VarBstrFromI1
VarBstrFromI2
VarBstrFromI4
VarBstrFromR4
VarBstrFromR8
VarBstrFromUI1
VarBstrFromUI2
VarBstrFromUI4
VarCat
VarCmp
VarCyAbs
VarCyAdd
VarCyCmp
VarCyCmpR8
VarCyFix
VarCyFromBool
VarCyFromDate
VarCyFromDec
VarCyFromDisp
VarCyFromI1
VarCyFromI2
VarCyFromI4
VarCyFromR4
VarCyFromR8
VarCyFromStr
VarCyFromUI1
VarCyFromUI2
VarCyFromUI4
VarCyInt
VarCyMul
VarCyMulI4
VarCyNeg
VarCyRound
VarCySub
VarDateFromBool
VarDateFromCy
VarDateFromDec
VarDateFromDisp
VarDateFromI1
VarDateFromI2
VarDateFromI4
VarDateFromR4
VarDateFromR8
VarDateFromStr
VarDateFromUI1
VarDateFromUI2
VarDateFromUI4
VarDateFromUdate
VarDateFromUdateEx
VarDecAbs
VarDecAdd
VarDecCmp
VarDecCmpR8
VarDecDiv
VarDecFix
VarDecFromBool
VarDecFromCy
VarDecFromDate
VarDecFromDisp
VarDecFromI1
VarDecFromI2
VarDecFromI4
VarDecFromR4
VarDecFromR8
VarDecFromStr
VarDecFromUI1
VarDecFromUI2
VarDecFromUI4
VarDecInt
VarDecMul
VarDecNeg
VarDecRound
VarDecSub
VarDiv
VarEqv
VarFix
VarFormat
VarFormatCurrency
VarFormatDateTime
VarFormatFromTokens
VarFormatNumber
VarFormatPercent
VarI1FromBool
VarI1FromCy
VarI1FromDate
VarI1FromDec
VarI1FromDisp
VarI1FromI2
VarI1FromI4
VarI1FromR4
VarI1FromR8
VarI1FromStr
VarI1FromUI1
VarI1FromUI2
VarI1FromUI4
VarI2FromBool
VarI2FromCy
VarI2FromDate
VarI2FromDec
VarI2FromDisp
VarI2FromI1
VarI2FromI4
VarI2FromR4
VarI2FromR8
VarI2FromStr
VarI2FromUI1
VarI2FromUI2
VarI2FromUI4
VarI4FromBool
VarI4FromCy
VarI4FromDate
VarI4FromDec
VarI4FromDisp
VarI4FromI1
VarI4FromI2
VarI4FromR4
VarI4FromR8
VarI4FromStr
VarI4FromUI1
VarI4FromUI2
VarI4FromUI4
VarIdiv
VarImp
VarInt
VarMod
VarMonthName
VarMul
VarNeg
VarNot
VarNumFromParseNum
VarOr
VarParseNumFromStr
VarPow
VarR4CmpR8
VarR4FromBool
VarR4FromCy
VarR4FromDate
VarR4FromDec
VarR4FromDisp
VarR4FromI1
VarR4FromI2
VarR4FromI4
VarR4FromR8
VarR4FromStr
VarR4FromUI1
VarR4FromUI2
VarR4FromUI4
VarR8FromBool
VarR8FromCy
VarR8FromDate
VarR8FromDec
VarR8FromDisp
VarR8FromI1
VarR8FromI2
VarR8FromI4
VarR8FromR4
VarR8FromStr
VarR8FromUI1
VarR8FromUI2
VarR8FromUI4
VarR8Pow
VarR8Round
VarRound
VarSub
VarTokenizeFormatString
VarUI1FromBool
VarUI1FromCy
VarUI1FromDate
VarUI1FromDec
VarUI1FromDisp
VarUI1FromI1
VarUI1FromI2
VarUI1FromI4
VarUI1FromR4
VarUI1FromR8
VarUI1FromStr
VarUI1FromUI2
VarUI1FromUI4
VarUI2FromBool
VarUI2FromCy
VarUI2FromDate
VarUI2FromDec
VarUI2FromDisp
VarUI2FromI1
VarUI2FromI2
VarUI2FromI4
VarUI2FromR4
VarUI2FromR8
VarUI2FromStr
VarUI2FromUI1
VarUI2FromUI4
VarUI4FromBool
VarUI4FromCy
VarUI4FromDate
VarUI4FromDec
VarUI4FromDisp
VarUI4FromI1
VarUI4FromI2
VarUI4FromI4
VarUI4FromR4
VarUI4FromR8
VarUI4FromStr
VarUI4FromUI1
VarUI4FromUI2
VarUdateFromDate
VarWeekdayName
VarXor
VariantChangeType
VariantChangeTypeEx
VariantClear
VariantCopy
VariantCopyInd
VariantInit
VariantTimeToDosDateTime
VariantTimeToSystemTime
VectorFromBstr

Sections

.text
Size: 520KB - Virtual size: 519KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OLEPRO32.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

8f50e2228a97d0224410529663a78a82

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

SetLastError
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
GlobalAddAtomA
GlobalDeleteAtom
GlobalReAlloc
GlobalHandle
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
LockResource
FreeLibrary
MulDiv
IsDBCSLeadByte
LoadLibraryA
InterlockedDecrement
HeapDestroy
SetFilePointer
SetStdHandle
CloseHandle
FlushFileBuffers
RaiseException
GetLocaleInfoW
InterlockedIncrement
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetProcAddress
WideCharToMultiByte
VirtualAlloc
LCMapStringW
LCMapStringA
WriteFile
VirtualFree
HeapCreate
GetCommandLineA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
GetVersion
GetLastError
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
RtlUnwind

user32

GetMessageA
SendMessageA
EnableWindow
CopyIcon
GetIconInfo
CopyImage
DrawIcon
CreateCursor
GetSystemMetrics
DestroyIcon
wsprintfA
GetSysColor
SetWindowLongA
GetWindowLongA
DestroyWindow
SetFocus
IsWindow
SetActiveWindow
GetActiveWindow
PostQuitMessage
PostMessageA
DispatchMessageA
DispatchMessageW
TranslateMessage
GetMessageW
RegisterClipboardFormatA
GetDlgItem
CreateIcon
GetParent
GetFocus
CharNextA
GetWindowTextA
CharLowerA
SendMessageW
GetDC
GetKeyState
ReleaseDC
GetDialogBaseUnits
GetClientRect
IsWindowUnicode
GetTopWindow
WinHelpA

gdi32

SetViewportExtEx
SetMapMode
SetTextColor
DeleteDC
CreateCompatibleBitmap
PatBlt
DeleteEnhMetaFile
DeleteMetaFile
GetTextExtentPointA
GetPaletteEntries
DeleteObject
CreateFontIndirectA
EnumFontFamiliesExA
GetTextFaceA
GetTextFaceW
GetTextMetricsA
GetTextMetricsW
SelectObject
GetDeviceCaps
CreateBitmap
SetMetaFileBitsEx
GetEnhMetaFileHeader
GetBitmapDimensionEx
GetObjectA
StretchDIBits
GetDIBits
StretchBlt
RealizePalette
SelectPalette
GetStockObject
GetObjectType
GetCurrentObject
CreateHalftonePalette
CreateDIBitmap
CreateDIBSection
Escape
SetBitmapBits
SetDIBits
PlayMetaFileRecord
CreatePalette
GetEnhMetaFileBits
GetMetaFileBitsEx
CreateCompatibleDC
BitBlt
SetViewportOrgEx
GetWinMetaFileBits
GetBitmapBits
SetEnhMetaFileBits
SaveDC
IntersectClipRect
GetWindowOrgEx
OffsetViewportOrgEx
PlayEnhMetaFile
EnumMetaFile
RestoreDC
SetStretchBltMode
SetBkColor
SetWindowOrgEx
SetWindowExtEx

ole32

ReleaseStgMedium
CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
StgCreateDocfile
CoCreateInstance
StringFromGUID2
CoGetMalloc

advapi32

RegFlushKey
RegQueryValueA
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegCloseKey

oleaut32

SysAllocString
VariantClear
VariantChangeType
SysFreeString
VariantInit
LoadTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OleCreateFontIndirect
OleCreatePictureIndirect
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
OleIconToCursor
OleLoadPicture
OleTranslateColor

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RICHED32.DLL
.dll windows:4 windows x86 arch:x86

34e74232da6eb747568d5bef3b1391ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ole32

OleGetClipboard
OleSetContainedObject
StringFromCLSID
GetClassFile
ProgIDFromCLSID
CLSIDFromProgID
CoIsOle1Class
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgCreateDocfile
CoTreatAsClass
ReadFmtUserTypeStg
SetConvertStg
WriteFmtUserTypeStg
OleCreateDefaultHandler
OleConvertOLESTREAMToIStorage
OleConvertIStorageToOLESTREAMEx
OleConvertIStorageToOLESTREAM
CoTaskMemFree
OleDuplicateData
OleDraw
CoGetMalloc
OleCreateLinkFromData
CreateBindCtx
CoDisconnectObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleCreateLinkToFile
GetHGlobalFromStream
OleIsCurrentClipboard
OleLoad
DoDragDrop
OleSave
ReadClassStg
WriteClassStg
OleSetClipboard
CreateStreamOnHGlobal
OleCreateStaticFromData
OleCreateFromData
ReleaseStgMedium

kernel32

lstrcpyA
lstrcmpiA
lstrlenA
GetTickCount
IsBadReadPtr
lstrcmpA
MulDiv
GlobalFree
GlobalLock
MultiByteToWideChar
GlobalAlloc
GlobalSize
GetProfileIntA
GetACP
InitializeCriticalSection
GetVersionExA
DisableThreadLibraryCalls
FreeLibrary
DeleteCriticalSection
IsBadCodePtr
HeapCreate
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
InterlockedDecrement
GetUserDefaultLangID
LeaveCriticalSection
InterlockedIncrement
GetProcAddress
GlobalHandle
WideCharToMultiByte
GetLocaleInfoA
EnterCriticalSection
LoadLibraryA
GlobalUnlock
GetProfileSectionA

user32

GetCapture
SetActiveWindow
WindowFromPoint
ShowScrollBar
GetScrollRange
GetWindowWord
SetWindowPos
OffsetRect
SetScrollInfo
CreateCaret
SetCaretPos
ScrollDC
EnableScrollBar
CharLowerBuffA
IsWindow
GetFocus
GetUpdateRgn
IsChild
RedrawWindow
RegisterClassA
UnregisterClassA
SystemParametersInfoA
FrameRect
LoadStringA
SetRectEmpty
SetCursorPos
ClientToScreen
TrackPopupMenu
SetFocus
GetMessageTime
GetMessagePos
CopyRect
InvertRect
DestroyCursor
GetCaretBlinkTime
SetCaretBlinkTime
IsWindowVisible
LoadBitmapA
SetWindowWord
SetClipboardData
CloseClipboard
wsprintfA
RegisterClipboardFormatA
InvalidateRect
SetTimer
KillTimer
GetUpdateRect
IntersectRect
HideCaret
ValidateRect
ShowCaret
LockWindowUpdate
PtInRect
GetCursor
GetWindowRect
GetClientRect
BeginPaint
EndPaint
GetKeyState
GetDlgItem
PostMessageA
MessageBeep
ReleaseCapture
ShowCursor
ScreenToClient
MapWindowPoints
InflateRect
GetCursorPos
GetDoubleClickTime
GetMessageExtraInfo
SendMessageA
SetCursor
GetSystemMetrics
GetAsyncKeyState
PeekMessageA
DestroyMenu
CreateWindowExA
DestroyWindow
SetMessageExtraInfo
wvsprintfA
GetSysColor
GetParent
GetWindowLongA
SetScrollRange
SetWindowLongA
LoadCursorA
DefWindowProcA
GetDC
ReleaseDC
ActivateKeyboardLayout
GetKeyboardLayout
GetKeyboardLayoutList
UpdateWindow
SetCapture
IsIconic
DestroyCaret
OpenClipboard
ScrollWindowEx
EmptyClipboard

gdi32

GetMetaFileBitsEx
GetTextMetricsA
GetCharABCWidthsA
SetMapMode
SetTextColor
DeleteObject
GetObjectA
UpdateColors
ExcludeClipRect
OffsetRgn
CreateRectRgnIndirect
CombineRgn
CreateRectRgn
CreateCompatibleDC
CreateCompatibleBitmap
TextOutA
BitBlt
DeleteDC
GetClipBox
GetBkMode
InvertRgn
EnumMetaFile
CreatePatternBrush
PatBlt
CreateMetaFileA
CloseMetaFile
CreateBitmap
SetMetaFileBitsEx
DeleteMetaFile
EnumFontFamiliesA
IntersectClipRect
SetROP2
Rectangle
CreateHalftonePalette
SelectPalette
RealizePalette
SetBkColor
SetBkMode
SetTextAlign
SetWindowOrgEx
SetWindowExtEx
PtInRegion
EnumFontFamiliesExA
TranslateCharsetInfo
CreateFontIndirectA
SelectObject
ExtTextOutA
GetDeviceCaps
GetStockObject
SaveDC
RestoreDC
RectVisible
GetOutlineTextMetricsA
GetCharWidthA

shell32

DragQueryFileA
DragFinish
DragAcceptFiles
DragQueryPoint

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 605B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mpchwb
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RICHTX32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

aaca01ab2cd35af160b8025e9dcfad9f

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

16/11/1999, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

04/04/2000, 00:00

Not After

17/04/2001, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

shell32

DragAcceptFiles
DragQueryFileA
DragFinish

oledlg

ord1

kernel32

GlobalUnlock
GetVersionExA
GlobalSize
GlobalLock
FindResourceA
GlobalAlloc
GlobalFree
GetLocaleInfoA
LoadResource
LockResource
GetModuleFileNameA
GetWindowsDirectoryA
HeapReAlloc
GetFileAttributesA
lstrcatA
lstrcpynA
DisableThreadLibraryCalls
GetProcAddress
GetVersion
GetAtomNameA
FindAtomA
AddAtomA
IsBadWritePtr
DeleteAtom
InterlockedIncrement
FreeLibrary
LoadLibraryA
InterlockedDecrement
GetProcessHeap
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
WriteFile
GetLastError
ReadFile
LeaveCriticalSection
CreateFileA
lstrcmpA
lstrcpyA
HeapAlloc
lstrlenA
HeapFree
WideCharToMultiByte
lstrlenW
SetFilePointer
MultiByteToWideChar
IsDBCSLeadByte
CloseHandle
lstrcmpiA

user32

SetCursorPos
ScreenToClient
GetClipboardFormatNameA
PeekMessageW
PostMessageW
PeekMessageA
RegisterWindowMessageA
IsDlgButtonChecked
SetDlgItemInt
SetDlgItemTextA
CheckDlgButton
ReleaseCapture
DefWindowProcA
LoadCursorA
SetCursor
CreateDialogIndirectParamA
MapWindowPoints
FillRect
GetDlgItemTextA
GetClientRect
InvalidateRect
ValidateRect
SetRect
GetSysColor
InflateRect
GetClassInfoA
TrackPopupMenu
GetWindow
GetWindowTextA
CharNextA
MessageBoxA
SendDlgItemMessageA
GetDlgItem
PostMessageA
IsChild
TranslateMessage
DispatchMessageA
IsWindowEnabled
GetNextDlgTabItem
IsDialogMessageA
WinHelpA
BeginPaint
MoveWindow
SetFocus
IsWindowVisible
EndPaint
SetParent
ShowWindow
EnableMenuItem
DeleteMenu
EqualRect
SetWindowRgn
IntersectRect
GetWindowRect
OffsetRect
GetDlgItemInt
GetActiveWindow
SetWindowLongA
SetWindowPos
LoadMenuA
UnregisterClassA
DestroyWindow
DestroyMenu
GetSubMenu
RemoveMenu
GetParent
GetMenuItemCount
GetFocus
IsWindow
WindowFromDC
RegisterClassA
LoadStringA
RegisterClipboardFormatA
GetCapture
GetCursorPos
EnableWindow
EndDialog
wsprintfA
GetKeyState
MessageBeep
CallWindowProcA
GetDC
GetSystemMetrics
ReleaseDC
UpdateWindow
SendMessageA
DialogBoxParamA
GetWindowLongA
CreateWindowExA
ClientToScreen
PtInRect

ole32

DoDragDrop
RegisterDragDrop
CreateOleAdviseHolder
OleCreateFromFile
CLSIDFromProgID
OleCreate
OleSetContainedObject
StringFromCLSID
OleGetIconOfClass
CoGetMalloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSaveToStream
OleLoadFromStream
RevokeDragDrop
CoTaskMemRealloc
ReleaseStgMedium
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree

advapi32

RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA

oleaut32

SafeArrayGetElement
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayGetLBound
VariantCopyInd
VariantCopy
SafeArrayUnaccessData
SetErrorInfo
OleCreatePropertyFrame
CreateErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
SafeArrayCreate
SafeArrayPutElement
RegisterTypeLi
OleCreatePictureIndirect
LoadRegTypeLi
GetErrorInfo
OleCreateFontIndirect
SysAllocStringLen
OleLoadPicture
OleTranslateColor
SysStringLen
SysFreeString
VariantChangeType
VariantClear
SysAllocString
VariantInit
SafeArrayCopy

comdlg32

GetOpenFileNameA
CommDlgExtendedError

gdi32

GetNearestColor
CreateSolidBrush
DeleteObject
EnumFontFamiliesExA
CreatePalette
GetBitmapBits
StretchBlt
GetObjectA
SelectPalette
CreateDIBitmap
GetDIBits
GetPaletteEntries
RealizePalette
CreateBitmap
CopyEnhMetaFileA
GetStockObject
CreateDCA
LPtoDP
CopyMetaFileA
GetViewportExtEx
CreateRectRgnIndirect
GetWindowExtEx
GetClipBox
SetWindowExtEx
SetBkColor
SelectObject
CreateCompatibleBitmap
SetViewportExtEx
DeleteDC
EndDoc
PatBlt
StartPage
StartDocA
EndPage
SetWindowOrgEx
SetViewportOrgEx
DPtoLP
CreateCompatibleDC
GetMapMode
CreateICA
GetObjectType
SetMapMode
GetDeviceCaps

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VBFrameworkMapClassObject

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SETUP1.EXE
.exe windows:4 windows x86 arch:x86

9d031f97ea77b7f10014879c2c1ed1aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt
__vbaVarSub
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
__vbaLineInputStr
__vbaLenBstr
ord588
__vbaStrVarMove
ord589
ord697
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
ord516
ord517
_adj_fprem1
__vbaRecAnsiToUni
ord519
__vbaCopyBytes
__vbaResume
__vbaStrCat
__vbaRecDestruct
__vbaSetSystemError
__vbaNameFile
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaLateMemSt
ord669
__vbaForEachCollObj
__vbaBoolStr
__vbaExitProc
__vbaFileCloseAll
ord595
__vbaCyAdd
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaBoolVar
__vbaForEachCollVar
ord523
__vbaBoolVarNull
_CIsin
ord709
ord631
__vbaErase
__vbaLateMemStAd
__vbaNextEachCollObj
ord525
__vbaVarZero
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
ord527
__vbaGenerateBoundsError
ord529
__vbaCyI2
__vbaStrCmp
__vbaVarTstEq
__vbaCyI4
__vbaNextEachCollVar
__vbaPrintObj
__vbaI2I4
DllFunctionCall
__vbaVarOr
__vbaVarLateMemSt
__vbaLbound
__vbaRedimPreserve
_adj_fpatan
__vbaR4Var
__vbaLateIdCallLd
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaNew
ord600
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaFpCmpCy
__vbaVarMul
__vbaExceptHandler
ord712
__vbaPrintFile
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
__vbaVarDiv
ord531
__vbaFPException
__vbaInStrVar
ord532
ord717
__vbaUbound
__vbaStrVarVal
__vbaVarCat
ord534
__vbaDateVar
ord536
__vbaI2Var
ord644
ord537
ord645
_CIlog
ord646
__vbaErrorOverflow
__vbaFileOpen
ord648
__vbaInStr
__vbaNew2
ord571
__vbaCyMulI2
_adj_fdiv_m32i
ord572
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
ord576
__vbaDerefAry1
_adj_fdivr_m32
__vbaPowerR8
ord577
_adj_fdiv_r
ord578
ord685
ord100
ord579
__vbaI4Var
__vbaAryLock
__vbaVarAdd
__vbaVarDup
__vbaStrToAnsi
__vbaFpI2
__vbaFpI4
__vbaVarCopy
ord616
__vbaVarLateMemCallLd
__vbaR8IntI2
__vbaLateMemCallLd
_CIatan
ord618
__vbaStrMove
__vbaCastObj
__vbaStrVarCopy
ord650
_allmul
__vbaLenVarB
__vbaLateIdSt
_CItan
ord546
__vbaAryUnlock
_CIexp
__vbaMidStmtBstr
ord580
__vbaFreeStr
__vbaFreeObj
ord581

Sections

.text
Size: 216KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SPIN32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

893d91dff29f7757e959b769e859d678

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc40

ord4657
ord2086
ord4608
ord3890
ord1539
ord5644
ord4700
ord3314
ord4296
ord3919
ord2323
ord3837
ord1785
ord3268
ord4510
ord1494
ord4677
ord2140
ord1850
ord4691
ord2861
ord4099
ord3907
ord654
ord5405
ord5649
ord1986
ord1989
ord2007
ord1975
ord2004
ord3080
ord1366
ord974
ord2707
ord5352
ord2815
ord5279
ord2728
ord5301
ord2801
ord5200
ord2548
ord4863
ord1633
ord3738
ord2176
ord2358
ord1043
ord1071
ord2135
ord1464
ord2064
ord881
ord3827
ord4973
ord4113
ord5023
ord1873
ord4314
ord4375
ord5001
ord3611
ord4133
ord4132
ord4230
ord4124
ord4360
ord4024
ord3997
ord4070
ord4441
ord4380
ord4385
ord4390
ord4122
ord4156
ord4473
ord4127
ord4117
ord4241
ord4123
ord4111
ord4110
ord4505
ord4060
ord3854
ord3844
ord3840
ord4202
ord4204
ord4201
ord3892
ord4079
ord4459
ord3898
ord4444
ord4432
ord2177
ord2963
ord5363
ord1540
ord5643
ord4704
ord3922
ord2618
ord3580
ord4154
ord2744
ord2851
ord2621
ord2695
ord5360
ord3578
ord5160
ord632
ord665
ord3452
ord426
ord381
ord1868
ord4740
ord4736
ord4737
ord267
ord2223
ord2378
ord1359
ord4403
ord1394
ord3110
ord3158
ord3185
ord569
ord729
ord2106
ord5124
ord5123
ord3630
ord3784
ord423
ord5568
ord279
ord5121
ord1426
ord1425
ord314
ord4219
ord4223
ord4248
ord4228
ord545
ord2451
ord3530
ord285
ord4435
ord570
ord315
ord5341
ord1456
ord3049
ord3335
ord1400
ord5389
ord3214
ord3112
ord2389
ord3458
ord5648
ord3963
ord2234
ord2197
ord5070
ord3431
ord965
ord4627
ord2097
ord2909
ord4713
ord4715
ord3579
ord4165
ord4719
ord4703
ord5053
ord2845
ord2960
ord3192
ord721
ord504
ord5630
ord1075
ord1085
ord1097
ord1647
ord3724
ord406
ord3714
ord706
ord5370
ord3656
ord486
ord3028
ord4462
ord615
ord762
ord362
ord810
ord4952
ord483
ord3684
ord5550
ord978
ord979
ord5638
ord2894
ord5637
ord265
ord2694
ord3340
ord3346
ord3345
ord2916
ord2696
ord2620
ord2860
ord2199
ord4176
ord4450
ord4312
ord3859
ord4681
ord4302
ord4046
ord1084
ord1035
ord1073
ord731
ord403
ord651
ord3202
ord3906
ord4096
ord3581
ord4098
ord3945
ord2843
ord2754
ord2617
ord3952
ord3946
ord2755
ord2844
ord2115
ord1370
ord999
ord1000
ord711
ord671
ord733
ord269
ord1105
ord988
ord5681
ord1367
ord1046
ord328
ord1042
ord1369

msvcrt40

__dllonexit
malloc
__CxxFrameHandler
wcslen
_adjust_fdiv
_EH_prolog
_initterm
free
??1type_info@@UAE@XZ
_onexit
_mbsrev

kernel32

LocalAlloc
LocalFree
MulDiv
lstrlenA
FindResourceA
LoadResource
LockResource
SizeofResource
GetPrivateProfileStringA
lstrcmpiA
lstrcpyA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
Sleep
GetTickCount
GetModuleFileNameA
GetVersion
lstrcmpA

user32

wsprintfA
EnableWindow
SendMessageA
PostMessageA
ReleaseDC
WinHelpA
FillRect
OffsetRect
InvertRect
UpdateWindow
GetDC
GetSystemMetrics
LoadCursorA
SetCursor
ScreenToClient
GetAsyncKeyState
GetCursorPos
PtInRect

gdi32

Polygon
BitBlt
CreateCompatibleDC
CreateDCA
GdiFlush
StretchDIBits
CreateBitmap
GetDIBits
GetSystemPaletteEntries
GetObjectA
CreateCompatibleBitmap
GetDeviceCaps
CreateICA
EnumFontFamiliesA

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyA

ole32

CoTaskMemFree

oleaut32

LoadTypeLi
SysFreeString
SysAllocString
LoadRegTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ST6UNST.EXE
.exe windows:4 windows x86 arch:x86

2c2a74fe0776f6aac245ba9e8eeec7c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ReadFile
LocalFree
SetFilePointer
LocalAlloc
GlobalDeleteAtom
Sleep
GlobalAddAtomA
GlobalFree
GlobalAlloc
IsDBCSLeadByte
GlobalLock
GlobalFindAtomA
CompareStringA
WideCharToMultiByte
WriteFile
CloseHandle
GetWindowsDirectoryA
OpenProcess
GetVersion
FreeLibrary
RemoveDirectoryA
GetLastError
DeleteFileA
FindFirstFileA
FindClose
lstrlenA
lstrcpyA
lstrcatA
lstrcmpA
lstrcpynA
MultiByteToWideChar
CreateProcessA
WaitForSingleObject
SetErrorMode
GetCurrentDirectoryA
OutputDebugStringA
LoadLibraryA
GetProcAddress
GetFileAttributesA
GlobalUnlock
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
IsBadCodePtr
FreeEnvironmentStringsW
FreeEnvironmentStringsA
lstrcmpiA
GetModuleFileNameA
UnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
HeapFree
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetCurrentProcess
TerminateProcess
ExitProcess
SetCurrentDirectoryA
SetEnvironmentVariableA
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

PackDDElParam
SendMessageA
DispatchMessageA
DefWindowProcA
CharNextA
DestroyWindow
UnregisterClassA
CreateWindowExA
RegisterClassA
wsprintfA
UnpackDDElParam
LoadStringA
LoadIconA
LoadCursorA
MessageBoxA
wvsprintfA
TranslateMessage
GetMessageA
SetCursor
ShowCursor
SetDlgItemTextA
SetWindowLongA
EndDialog
GetDlgItem
SetFocus
DialogBoxParamA
UpdateWindow
SetWindowTextA
InvalidateRect
CharUpperA
CharPrevA
BeginPaint
GetClientRect
DrawTextA
SetRect
EndPaint
PostQuitMessage
GetSystemMenu
EnableMenuItem
CreateDialogParamA
GetWindowRect
GetSystemMetrics
SetWindowPos
ShowWindow
PostMessageA
PeekMessageA
FillRect
SetClassLongA

gdi32

CreateSolidBrush
SetROP2
Rectangle
SelectObject
SetTextColor
SetBkMode
GetStockObject
GetTextMetricsA
ExtTextOutA
CreateFontIndirectA
DeleteObject

advapi32

RegOpenKeyA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

OleInitialize
OleUninitialize

oleaut32

LoadTypeLi

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
STDOLE2.TLB
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TABCTL32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

e0cb36c66e5c120ef20ebc4f30366345

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

16/11/1999, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

04/04/2000, 00:00

Not After

17/04/2001, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetStringTypeW
GetStringTypeA
VirtualAlloc
LCMapStringW
LCMapStringA
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
ExitProcess
RaiseException
GetOEMCP
GetACP
GetCPInfo
GetModuleHandleA
GetCommandLineA
lstrcpynA
GetFileAttributesA
GetVersion
DisableThreadLibraryCalls
FindResourceA
LoadResource
LockResource
GetLastError
InterlockedDecrement
InterlockedIncrement
GetProcAddress
GetLocaleInfoA
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA
MultiByteToWideChar
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
lstrcmpiA
lstrlenA
GlobalSize
IsDBCSLeadByte
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
lstrcpyA
EnterCriticalSection
GetProcessHeap
HeapReAlloc
lstrcmpA
InitializeCriticalSection
lstrcatA

user32

BeginPaint
GetClientRect
MoveWindow
IntersectRect
PtInRect
CreateWindowExA
SetWindowPos
SetFocus
SetWindowRgn
FillRect
CopyRect
DrawFocusRect
GetSysColor
IsWindowEnabled
GetWindowRect
GetWindowDC
DestroyWindow
GetWindowLongA
SetWindowLongA
CallWindowProcA
CharNextA
OffsetRect
SetRectEmpty
ShowWindow
IsDialogMessageA
ScreenToClient
GetClipboardFormatNameA
RegisterClipboardFormatA
MapWindowPoints
SetCursorPos
InvalidateRect
UnregisterClassA
ReleaseCapture
GetNextDlgTabItem
CreateDialogIndirectParamA
IsChild
SetParent
IsWindowVisible
WinHelpA
InflateRect
EndDialog
GetActiveWindow
DialogBoxParamA
GetCursorPos
IsIconic
GetParent
LockWindowUpdate
EqualRect
IsWindow
MessageBeep
MessageBoxA
GetDlgItemInt
GetDlgItemTextA
IsDlgButtonChecked
SendDlgItemMessageA
SetDlgItemTextA
SetDlgItemInt
CheckDlgButton
GetDlgItem
wsprintfA
GetKeyState
DefWindowProcA
SetCursor
PeekMessageA
SendMessageA
GetFocus
GetDC
ReleaseDC
SetRect
IsCharAlphaNumericA
VkKeyScanA
CreateAcceleratorTableA
EnableWindow
LoadCursorA
RegisterClassA
DestroyAcceleratorTable
LoadStringA
GetWindow
GetSystemMetrics
EndPaint
ClientToScreen

ole32

ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
OleSaveToStream
OleLoadFromStream

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

SysAllocStringLen
OleCreatePropertyFrame
LoadTypeLi
SafeArrayCopy
SafeArrayRedim
SafeArrayGetElement
SafeArrayCreate
SafeArrayPutElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayDestroy
SafeArrayUnaccessData
VariantCopyInd
SafeArrayAccessData
LoadTypeLibEx
UnRegisterTypeLi
VariantCopy
CreateErrorInfo
SetErrorInfo
RegisterTypeLi
VariantInit
SysStringLen
VariantChangeType
GetErrorInfo
OleLoadPicture
OleTranslateColor
LoadRegTypeLi
SysAllocStringByteLen
SysStringByteLen
OleCreatePictureIndirect
OleCreateFontIndirect
VariantClear
SysFreeString
SysAllocString

gdi32

SetMapMode
GetWindowExtEx
GetViewportExtEx
LPtoDP
GetNearestColor
CreatePalette
GetBitmapBits
CreateDIBitmap
GetDIBits
CopyEnhMetaFileA
CopyMetaFileA
CreateDCA
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
GetDeviceCaps
DeleteDC
DeleteObject
StretchBlt
SelectObject
CreateBitmap
CreateCompatibleDC
RealizePalette
SelectPalette
GetOutlineTextMetricsA
BitBlt
CreateCompatibleBitmap
SetTextColor
SetBkColor
CreateRectRgn
CreateFontIndirectA
GetObjectA
SelectClipRgn
CombineRgn
CreatePolygonRgn
SetBkMode
CreatePen
TextOutA
GetTextColor
LineTo
MoveToEx
GetTextExtentPoint32A
GetCharWidthA
GetCurrentPositionEx
SetTextAlign
GetStockObject
CreateSolidBrush
OffsetRgn
SetBrushOrgEx
UnrealizeObject
GetPaletteEntries
CreateRectRgnIndirect
CreateICA

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
THREED32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

d5f09a42b36ef8ed87b0317650ba47a4

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc40

ord2815
ord5279
ord2728
ord5461
ord3320
ord5352
ord5301
ord2801
ord5299
ord2792
ord4863
ord2183
ord1633
ord3738
ord2176
ord2358
ord1043
ord1071
ord974
ord2135
ord1464
ord4973
ord881
ord3827
ord4154
ord4113
ord5023
ord1873
ord4314
ord4375
ord5001
ord3611
ord4133
ord4132
ord4360
ord4024
ord3997
ord4070
ord4441
ord4380
ord4385
ord4390
ord4122
ord4156
ord4473
ord4127
ord4117
ord4111
ord4110
ord4060
ord3854
ord3844
ord3840
ord4202
ord4204
ord4201
ord4079
ord4459
ord3898
ord4432
ord2177
ord2963
ord5363
ord1540
ord5643
ord4704
ord3922
ord2618
ord2755
ord2844
ord3946
ord2851
ord2621
ord2695
ord3581
ord4098
ord5160
ord632
ord665
ord3452
ord426
ord381
ord3530
ord1394
ord1868
ord4737
ord267
ord4740
ord4724
ord3523
ord2223
ord2378
ord1359
ord706
ord1391
ord4403
ord2227
ord3185
ord3110
ord3158
ord569
ord2106
ord2115
ord5121
ord1426
ord1425
ord2635
ord314
ord3010
ord1400
ord5341
ord1456
ord3049
ord3919
ord1539
ord4296
ord4685
ord570
ord4444
ord2004
ord421
ord760
ord3524
ord4505
ord486
ord4123
ord4241
ord2451
ord2510
ord5129
ord2536
ord3873
ord4203
ord4198
ord4228
ord4999
ord3098
ord2795
ord5241
ord4465
ord4124
ord4435
ord762
ord2007
ord1975
ord2072
ord1995
ord5200
ord2548
ord3892
ord4735
ord2747
ord3862
ord2515
ord4219
ord4223
ord729
ord5568
ord2081
ord2312
ord2317
ord4736
ord5416
ord1366
ord4728
ord4742
ord483
ord5647
ord4694
ord2845
ord4101
ord3134
ord315
ord3724
ord2707
ord3630
ord3784
ord5139
ord3786
ord4173
ord2001
ord4448
ord4206
ord5296
ord1014
ord5648
ord3963
ord2234
ord2197
ord5070
ord3431
ord965
ord4627
ord2097
ord2909
ord4713
ord4715
ord2389
ord3579
ord4165
ord4719
ord4703
ord5053
ord3458
ord2960
ord3192
ord721
ord504
ord5630
ord1075
ord1085
ord1097
ord1647
ord406
ord3714
ord5370
ord3656
ord3028
ord4462
ord615
ord362
ord810
ord4952
ord3684
ord5550
ord978
ord979
ord5638
ord2894
ord5637
ord265
ord3314
ord4700
ord3837
ord5644
ord4608
ord2086
ord4657
ord3890
ord1989
ord2064
ord1986
ord654
ord3907
ord4099
ord2861
ord4691
ord1850
ord2140
ord4677
ord1494
ord4510
ord3268
ord5649
ord1785
ord2323
ord1786
ord2557
ord2199
ord3578
ord5360
ord4312
ord4176
ord4450
ord4302
ord3859
ord4681
ord1035
ord4046
ord1084
ord403
ord1073
ord731
ord3906
ord651
ord3202
ord2694
ord4096
ord3580
ord3345
ord3340
ord3346
ord2620
ord2916
ord2696
ord3945
ord2860
ord2744
ord2617
ord2843
ord2754
ord5389
ord3952
ord4649
ord3335
ord4248
ord711
ord671
ord733
ord269
ord1370
ord988
ord5681
ord1367
ord1046
ord328
ord1042
ord1369
ord1105
ord1000
ord999

msvcrt40

__dllonexit
__CxxFrameHandler
wcslen
_mbsrev
_EH_prolog
_onexit
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv

kernel32

GetVersion
Sleep
LocalAlloc
LocalFree
MulDiv
FindResourceA
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
GetPrivateProfileStringA
lstrcpyA
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalFree
lstrcmpiA
lstrcmpA
lstrlenA

user32

DrawFocusRect
SetRectEmpty
GetClientRect
PtInRect
InvertRect
CreateAcceleratorTableA
ShowWindow
IsWindowVisible
CopyRect
EnableWindow
SetPropA
OffsetRect
DrawTextA
GetCapture
GetPropA
GetWindow
wsprintfA
GetParent
ScreenToClient
GetWindowRect
PostMessageA
ClientToScreen
GetDlgItem
MoveWindow
GrayStringA
GetSysColor
GetCursorPos
DestroyCursor
SetCursor
LoadCursorA
UpdateWindow
ReleaseCapture
VkKeyScanA
CharNextA
CharUpperA
GetDC
ReleaseDC
WinHelpA
GetTabbedTextExtentA
LoadBitmapA
GetSystemMetrics
SetWindowTextA
FillRect
SendMessageA
IsWindow

gdi32

DeleteObject
CreateRectRgn
SaveDC
SelectClipRgn
GetDeviceCaps
CreateCompatibleDC
CreateBitmap
SelectObject
ExcludeClipRect
CreateDCA
SelectPalette
RealizePalette
GetTextMetricsA
SetTextColor
GetStockObject
SetBkMode
DeleteDC
CreateCompatibleBitmap
CreateSolidBrush
FillRgn
CombineRgn
CreateRectRgnIndirect
Ellipse
CreatePen
CreateEllipticRgnIndirect
GetTextExtentPointA
LPtoDP
GetPixel
SetBkColor
LineTo
GetTextColor
GetNearestColor
SetPixel
MoveToEx
BitBlt
CreateFontIndirectA
StretchBlt
StretchDIBits
GetDIBits
GetSystemPaletteEntries
RestoreDC
CreateICA
EnumFontFamiliesA
GetObjectA

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyA

ole32

CoTaskMemFree

oleaut32

LoadTypeLi
SysStringLen
SysReAllocStringLen
SysFreeString
VariantChangeType
VariantInit
SysAllocString
LoadRegTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GrayStringCallback

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TKSD10.dll
.dll regsvr32 windows:4 windows x86 arch:x86

072a6caa17bdd12d1dca1762de7b8377

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
_CIcos
_adj_fptan
ord585
__vbaVarMove
ord587
__vbaAryMove
__vbaFreeVar
__vbaStrVarMove
__vbaAptOffset
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaRaiseEvent
__vbaFreeObjList
_adj_fprem1
ord519
__vbaCopyBytes
__vbaStrCat
__vbaLsetFixstr
ord660
__vbaStrDate
__vbaHresultCheckObj
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaAryDestruct
__vbaVarForInit
__vbaExitProc
ord595
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaStrFixstr
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaAryConstruct2
__vbaI2I4
__vbaFpUI1
__vbaLbound
_adj_fpatan
__vbaR4Var
Zombie_GetTypeInfoCount
__vbaRedim
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaStrUI1
__vbaExceptHandler
__vbaDateStr
_adj_fprem
_adj_fdivr_m64
ord714
ord608
__vbaFPException
ord319
__vbaUbound
ord534
__vbaVarCat
__vbaDateVar
ord537
_CIlog
__vbaErrorOverflow
__vbaR8Str
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord573
__vbaFreeStrList
_adj_fdivr_m32
__vbaPowerR8
_adj_fdiv_r
ord685
ord101
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaVarAdd
__vbaAryLock
ord320
__vbaVarDup
ord321
ord614
__vbaFpI4
_CIatan
__vbaAryCopy
__vbaCastObj
__vbaStrMove
_allmul
ord652
_CItan
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaMidStmtBstr
__vbaFreeObj
__vbaFreeStr

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VB6STKIT.DLL
.dll windows:4 windows x86 arch:x86

9f4b76d42cbc350286ec870347345155

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

TranslateMessage
CharNextA
wsprintfA
CharPrevA
LoadStringA
PeekMessageA
MessageBoxA
DispatchMessageA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

ole32

CoCreateInstance
StringFromGUID2
OleInitialize
OleUninitialize

oleaut32

RegisterTypeLi
LoadTypeLi

kernel32

GetFileAttributesA
CompareStringW
GetStringTypeW
DeleteFileA
GetStringTypeA
GetLocaleInfoA
GetTimeZoneInformation
LCMapStringW
GetEnvironmentStringsW
LCMapStringA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetACP
GetCPInfo
HeapReAlloc
GetLocaleInfoW
FlushFileBuffers
SetEnvironmentVariableA
GetOEMCP
GetVersion
GetLastError
lstrcatA
lstrcpyA
lstrcmpiA
lstrlenA
CopyFileA
OpenFile
Sleep
lstrcpynA
WriteFile
CloseHandle
SetFilePointer
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetErrorMode
LocalFree
LocalUnlock
LocalLock
LocalAlloc
SetFileTime
GetFileTime
GetWindowsDirectoryA
MultiByteToWideChar
CompareStringA
WideCharToMultiByte
GetModuleFileNameA
VirtualAlloc
HeapCreate
VirtualFree
TlsSetValue
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
FindClose
FindFirstFileA
GetFileType
SetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
ReadFile
GetCommandLineA
GetCurrentThreadId
DeleteCriticalSection
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetEndOfFile
SetHandleCount
GetStdHandle
GetStartupInfoA
GetFullPathNameA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetStdHandle
InterlockedDecrement
InterlockedIncrement
HeapDestroy

Exports

Exports

AbortAction
AddActionNote
ChangeActionKey
CommitAction
DLLSelfRegister
DisableLogging
EnableLogging
ExtractFileFromCab
GetClsidFromActXFile
LogConfig
LogError
LogNote
LogWarning
NewAction
RegisterTLB
SyncShell
_SetTime@8
fCreateShellLink
fRemoveShellLink
fWithinAction

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dao360.dll
.dll regsvr32 windows:4 windows x86 arch:x86

740d7cb11304862970f49454448a6e33

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcschr
wcscspn
_wcsnicmp
atoi
atol
_wtoi
wcslen
_ultow
wcsncpy
malloc
free
_ftol
wcstod
wcsstr
wcscpy
sprintf
swprintf
wcscat
toupper
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall

kernel32

DeleteCriticalSection
InitializeCriticalSection
GlobalFree
GlobalReAlloc
GlobalAlloc
GlobalLock
GetSystemDefaultLCID
CompareStringA
TlsSetValue
CompareStringW
GetCurrentProcessId
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
WideCharToMultiByte
lstrlenW
TlsGetValue
TlsAlloc
lstrlenA
Sleep
InterlockedDecrement
InterlockedIncrement
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
TlsFree
GlobalUnlock

user32

PeekMessageW
GetDesktopWindow
wsprintfW
GetWindowLongA
DispatchMessageW
TranslateMessage
GetWindow
IsWindowVisible
GetWindowThreadProcessId

advapi32

RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegCloseKey

ole32

CoInitialize
CoGetClassObject
CoGetMalloc
CoUninitialize

oleaut32

GetErrorInfo
CreateErrorInfo
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysReAllocString
VariantChangeTypeEx
SafeArrayRedim
SafeArrayDestroy
SafeArrayCreate
SafeArrayLock
SafeArrayUnlock
VariantChangeType
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
DispGetIDsOfNames
DispInvoke
SysAllocString
VariantInit
SetErrorInfo
VariantClear
DispGetParam
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
VariantCopy

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerEx
DllUnregisterServer

Sections

.text
Size: 416KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/10X.FG
Bindu Software/Colorlab/10Y.FG
Bindu Software/Colorlab/10Z.FG
Bindu Software/Colorlab/11X_10DEG.txt
Bindu Software/Colorlab/11X_2DEG.txt
Bindu Software/Colorlab/11Y_10DEG.txt
Bindu Software/Colorlab/11Y_2DEG.txt
Bindu Software/Colorlab/11Z_10DEG.txt
Bindu Software/Colorlab/11Z_2DEG.txt
Bindu Software/Colorlab/11x.fg
Bindu Software/Colorlab/11y.fg
Bindu Software/Colorlab/11z.fg
Bindu Software/Colorlab/1X.FG
Bindu Software/Colorlab/1X_10DEG.txt
Bindu Software/Colorlab/1X_10DEG_20NM.txt
Bindu Software/Colorlab/1X_2DEG.txt
Bindu Software/Colorlab/1X_2DEG_20NM.txt
Bindu Software/Colorlab/1Y.FG
Bindu Software/Colorlab/1Y_10DEG.txt
Bindu Software/Colorlab/1Y_10DEG_20NM.txt
Bindu Software/Colorlab/1Y_2DEG.txt
Bindu Software/Colorlab/1Y_2DEG_20NM.txt
Bindu Software/Colorlab/1Z.FG
Bindu Software/Colorlab/1Z_10DEG.txt
Bindu Software/Colorlab/1Z_10DEG_20NM.txt
Bindu Software/Colorlab/1Z_2DEG.txt
Bindu Software/Colorlab/1Z_2DEG_20NM.txt
Bindu Software/Colorlab/2X.FG
Bindu Software/Colorlab/2X_10DEG.txt
Bindu Software/Colorlab/2X_10DEG_20NM.txt
Bindu Software/Colorlab/2X_2DEG.txt
Bindu Software/Colorlab/2X_2DEG_20NM.txt
Bindu Software/Colorlab/2Y.FG
Bindu Software/Colorlab/2Y_10DEG.txt
Bindu Software/Colorlab/2Y_10DEG_20NM.txt
Bindu Software/Colorlab/2Y_2DEG.txt
Bindu Software/Colorlab/2Y_2DEG_20NM.txt
Bindu Software/Colorlab/2Z.FG
Bindu Software/Colorlab/2Z_10DEG.txt
Bindu Software/Colorlab/2Z_10DEG_20NM.txt
Bindu Software/Colorlab/2Z_2DEG.txt
Bindu Software/Colorlab/2Z_2DEG_20NM.txt
Bindu Software/Colorlab/3X.FG
Bindu Software/Colorlab/3X_10DEG.txt
Bindu Software/Colorlab/3X_10DEG_20NM.txt
Bindu Software/Colorlab/3X_2DEG.txt
Bindu Software/Colorlab/3X_2DEG_20NM.txt
Bindu Software/Colorlab/3Y.FG
Bindu Software/Colorlab/3Y_10DEG.txt
Bindu Software/Colorlab/3Y_10DEG_20NM.txt
Bindu Software/Colorlab/3Y_2DEG.txt
Bindu Software/Colorlab/3Y_2DEG_20NM.txt
Bindu Software/Colorlab/3Z.FG
Bindu Software/Colorlab/3Z_10DEG.txt
Bindu Software/Colorlab/3Z_10DEG_20NM.txt
Bindu Software/Colorlab/3Z_2DEG.txt
Bindu Software/Colorlab/3Z_2DEG_20NM.txt
Bindu Software/Colorlab/4X.FG
Bindu Software/Colorlab/4X_10DEG_20NM.txt
Bindu Software/Colorlab/4Y.FG
Bindu Software/Colorlab/4Y_10DEG_20NM.txt
Bindu Software/Colorlab/4Z.FG
Bindu Software/Colorlab/4Z_10DEG_20NM.txt
Bindu Software/Colorlab/5100 Software Manual.pdf
.pdf
Bindu Software/Colorlab/5100HTrn.dat
Bindu Software/Colorlab/5100NSET.TXT
Bindu Software/Colorlab/5X.FG
Bindu Software/Colorlab/5X_10DEG.txt
Bindu Software/Colorlab/5X_10DEG_20NM.txt
Bindu Software/Colorlab/5X_2DEG.txt
Bindu Software/Colorlab/5X_2DEG_20NM.txt
Bindu Software/Colorlab/5Y.FG
Bindu Software/Colorlab/5Y_10DEG.txt
Bindu Software/Colorlab/5Y_10DEG_20NM.txt
Bindu Software/Colorlab/5Y_2DEG.txt
Bindu Software/Colorlab/5Y_2DEG_20NM.txt
Bindu Software/Colorlab/5Z.FG
Bindu Software/Colorlab/5Z_10DEG.txt
Bindu Software/Colorlab/5Z_10DEG_20NM.txt
Bindu Software/Colorlab/5Z_2DEG.txt
Bindu Software/Colorlab/5Z_2DEG_20NM.txt
Bindu Software/Colorlab/6X.FG
Bindu Software/Colorlab/6X_10DEG.txt
Bindu Software/Colorlab/6X_10DEG_20NM.txt
Bindu Software/Colorlab/6X_2DEG.txt
Bindu Software/Colorlab/6X_2DEG_20NM.txt
Bindu Software/Colorlab/6Y.FG
Bindu Software/Colorlab/6Y_10DEG.txt
Bindu Software/Colorlab/6Y_10DEG_20NM.txt
Bindu Software/Colorlab/6Y_2DEG.txt
Bindu Software/Colorlab/6Y_2DEG_20NM.txt
Bindu Software/Colorlab/6Z.FG
Bindu Software/Colorlab/6Z_10DEG.txt
Bindu Software/Colorlab/6Z_10DEG_20NM.txt
Bindu Software/Colorlab/6Z_2DEG.txt
Bindu Software/Colorlab/6Z_2DEG_20NM.txt
Bindu Software/Colorlab/7X.FG
Bindu Software/Colorlab/7Y.FG
Bindu Software/Colorlab/7Z.FG
Bindu Software/Colorlab/8001.STD
Bindu Software/Colorlab/8163_254.STD
Bindu Software/Colorlab/8X_10DEG.txt
Bindu Software/Colorlab/8X_10DEG_20NM.txt
Bindu Software/Colorlab/8X_2DEG.txt
Bindu Software/Colorlab/8X_2DEG_20NM.txt
Bindu Software/Colorlab/8Y_10DEG.txt
Bindu Software/Colorlab/8Y_10DEG_20NM.txt
Bindu Software/Colorlab/8Y_2DEG.txt
Bindu Software/Colorlab/8Y_2DEG_20NM.txt
Bindu Software/Colorlab/8Z_10DEG.txt
Bindu Software/Colorlab/8Z_10DEG_20NM.txt
Bindu Software/Colorlab/8Z_2DEG.txt
Bindu Software/Colorlab/8Z_2DEG_20NM.txt
Bindu Software/Colorlab/8x.fg
Bindu Software/Colorlab/8y.fg
Bindu Software/Colorlab/8z.fg
Bindu Software/Colorlab/9X_10DEG.txt
Bindu Software/Colorlab/9X_10DEG_20NM.txt
Bindu Software/Colorlab/9X_2DEG.txt
Bindu Software/Colorlab/9X_2DEG_20NM.txt
Bindu Software/Colorlab/9Y_10DEG.txt
Bindu Software/Colorlab/9Y_10DEG_20NM.txt
Bindu Software/Colorlab/9Y_2DEG.txt
Bindu Software/Colorlab/9Y_2DEG_20NM.txt
Bindu Software/Colorlab/9Z_10DEG.txt
Bindu Software/Colorlab/9Z_10DEG_20NM.txt
Bindu Software/Colorlab/9Z_2DEG.txt
Bindu Software/Colorlab/9Z_2DEG_20NM.txt
Bindu Software/Colorlab/9x.fg
Bindu Software/Colorlab/9y.fg
Bindu Software/Colorlab/9z.fg
Bindu Software/Colorlab/A.cfg
Bindu Software/Colorlab/AMNT
Bindu Software/Colorlab/APHA.TTD
Bindu Software/Colorlab/ASTA.DAT
Bindu Software/Colorlab/ASTM.H
Bindu Software/Colorlab/AddInf.mdb
Bindu Software/Colorlab/B.cfg
Bindu Software/Colorlab/BLACK.RFT
Bindu Software/Colorlab/Batch1.txt
Bindu Software/Colorlab/Batch1t.txt
Bindu Software/Colorlab/Batch2.txt
Bindu Software/Colorlab/Bc1.txt
Bindu Software/Colorlab/Bc1t.txt
Bindu Software/Colorlab/Bc2.txt
Bindu Software/Colorlab/Box.tmp
Bindu Software/Colorlab/CALB.FAC
Bindu Software/Colorlab/CALEXC.FAC
Bindu Software/Colorlab/CALINC.FAC
Bindu Software/Colorlab/CALINC_100.FAC
Bindu Software/Colorlab/CBatch1.txt
Bindu Software/Colorlab/CBatch1T.txt
Bindu Software/Colorlab/CBatch2.txt
Bindu Software/Colorlab/CBc1.txt
Bindu Software/Colorlab/CBc1T.txt
Bindu Software/Colorlab/CBc2.txt
Bindu Software/Colorlab/CCSys.txt
Bindu Software/Colorlab/CCSys1.txt
Bindu Software/Colorlab/CCb.txt
Bindu Software/Colorlab/CCb2.txt
Bindu Software/Colorlab/CCbQ.txt
Bindu Software/Colorlab/CCms.txt
Bindu Software/Colorlab/CCommon.txt
Bindu Software/Colorlab/CDRVDL32.DLL
.dll windows:1 windows x86 arch:x86

a106e4fd7526e6d128c95708072b3890

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
WaitForSingleObject
ReleaseMutex
LeaveCriticalSection
EnterCriticalSection
ClearCommError
GetLastError
ReadFile
GetOverlappedResult
WriteFile
GetCommModemStatus
Sleep
CloseHandle
GlobalFree
GlobalUnlock
EscapeCommFunction
PurgeComm
ClearCommBreak
SetCommBreak
SetCommState
CreateMutexA
CreateEventA
SetCommTimeouts
GetCommProperties
SetupComm
GetCommTimeouts
GetCommState
CreateFileA
GlobalLock
InitializeCriticalSection
TlsAlloc
GetCurrentThreadId
DeleteCriticalSection
ResumeThread
CreateThread
TlsSetValue
ExitThread
GetEnvironmentStrings
GetCommandLineA
GetVersion
UnhandledExceptionFilter
RtlUnwind
ExitProcess
GetStartupInfoA
GetModuleFileNameA
TlsFree
TlsGetValue
VirtualFree
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
GetStdHandle
GetFileType

user32

wsprintfA

winmm

timeGetTime

Exports

Exports

bio_get_elapsedtime
bio_get_timer
bio_get_timerresolution
bio_set_timer
bio_set_timerresolution
ser_rs232_block
ser_rs232_cleanup
ser_rs232_dtr_off
ser_rs232_dtr_on
ser_rs232_flush
ser_rs232_get_sdata
ser_rs232_getbyte
ser_rs232_getpacket
ser_rs232_getport
ser_rs232_getregister
ser_rs232_getstatus
ser_rs232_maxport
ser_rs232_misc_func
ser_rs232_putbyte
ser_rs232_putpacket
ser_rs232_putregister
ser_rs232_rts_off
ser_rs232_rts_on
ser_rs232_set_intfunc
ser_rs232_setbauddiv
ser_rs232_setup
ser_rs232_viewpacket

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.commdrv
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 835B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/CDRVHF32.DLL
.dll windows:1 windows x86 arch:x86

1db0889011620b7944b751506eb5650d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalHandle
GlobalFree
GlobalLock
VirtualFree
VirtualAlloc
Sleep
GlobalAlloc
GetEnvironmentStrings
GetCommandLineA
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetFileType
GetLastError
GetModuleFileNameA
GetACP
GetOEMCP
GetCPInfo
GetStdHandle
GetStartupInfoA
WriteFile
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection

user32

DispatchMessageA
TranslateMessage
PeekMessageA

cdrvdl32

ord7
ord20
ord3
ord17
ord16
ord27
ord25
ord24
ord23
ord28
ord9
ord5
ord11
ord8
ord21
ord13
ord14
ord6
ord4

Exports

Exports

BytesInReceiveBuffer
BytesInTransmitBuffer
CdrvCheckTime
CdrvCrc16
CdrvCrc32
CdrvDelay
CdrvGetPcb
CdrvReturnStringAddress
CdrvSetTime
CdrvSetTimeoutFunction
CdrvSetTimerResolution
DataStreamGetByte
DataStreamGetPacket
Dial
DtrOff
DtrOn
FlushReceiveBuffer
FlushTransmitBuffer
GetByte
GetNumber
GetPaceTime
GetPacket
GetString
GetTimeout
InitializePort
IsAllDataOut
IsBreak
IsCarrierDetect
IsCts
IsDsr
IsFramingError
IsInputOverrun
IsOverrunError
IsParityError
IsPortAvailable
IsReceiveBufferEmpty
IsRing
IsTransmitBufferEmpty
ModemAnswerMode
ModemAttention
ModemCommandState
ModemConnect
ModemForceAnswer
ModemGetCarrierSpeed
ModemGetConnectSpeed
ModemGetSRegister
ModemGetString
ModemGetValue
ModemHangup
ModemInit
ModemModifyString
ModemModifyValue
ModemOffHook
ModemOnline
ModemSendCommand
ModemSetSRegister
ModemSpeaker
ModemVolume
ModemWaitForCall
ModemWaitForRing
PeekChar
PutByte
PutPacket
PutString
ReceiveBufferSize
RtsOff
RtsOn
SendBreak
SetBaud
SetDataStreamFunction
SetFlowControlCharacters
SetFlowControlThreshold
SetPaceTime
SetPortCharacteristics
SetSpecialBehavior
SetTimeout
SpaceInReceiveBuffer
SpaceInTransmitBuffer
SpaceTransmitBuffer
TransmitBufferSize
UnInitializePort
WaitFor
WaitForFixed
WaitForPeek
WaitForPeekFixed
WaitForPeekTable
WaitForPeekTableFixed
WaitForTable
WaitForTableFixed

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/CDb1.txt
Bindu Software/Colorlab/CDb1T.txt
Bindu Software/Colorlab/CDb2.txt
Bindu Software/Colorlab/CFm1.txt
Bindu Software/Colorlab/CFm1T.txt
Bindu Software/Colorlab/CFm2.txt
Bindu Software/Colorlab/CHis.txt
Bindu Software/Colorlab/CLOSED.BMP
Bindu Software/Colorlab/CLib1.txt
Bindu Software/Colorlab/CLib1T.txt
Bindu Software/Colorlab/CLib2.txt
Bindu Software/Colorlab/CLoad.txt
Bindu Software/Colorlab/CManager.txt
Bindu Software/Colorlab/CMatch1.txt
Bindu Software/Colorlab/CMatch2.txt
Bindu Software/Colorlab/CMeasure.txt
Bindu Software/Colorlab/CORRLE.DAT
Bindu Software/Colorlab/CORRLI.DAT
Bindu Software/Colorlab/CORRSE.DAT
Bindu Software/Colorlab/CORRSI.DAT
Bindu Software/Colorlab/CORRT.DAT
Bindu Software/Colorlab/CQ6543.CAL
Bindu Software/Colorlab/CQOLLib.dll
.dll regsvr32 windows:4 windows x86 arch:x86

7c4135ab681fd4e4e47ac8c1499a4585

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapDestroy
LoadLibraryExW
lstrcmpiW
lstrcpynW
InitializeCriticalSection
LeaveCriticalSection
FindResourceW
GetLastError
DeleteCriticalSection
GetProcAddress
LoadLibraryW
lstrcpyW
lstrcatW
InterlockedIncrement
EnterCriticalSection
WideCharToMultiByte
OutputDebugStringA
CreateDirectoryW
GetFileAttributesW
CreateFileW
FlushFileBuffers
WriteFile
GetLocalTime
SetFilePointer
GetFileSize
lstrlenW
DisableThreadLibraryCalls
Sleep
FreeLibrary
SizeofResource
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
ReadFile
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetModuleFileNameW
LoadResource
CloseHandle
InterlockedDecrement
lstrlenA
MultiByteToWideChar
GetTickCount
ReleaseMutex
WaitForSingleObject
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
GetModuleHandleW
GetShortPathNameW
CreateThread
TerminateThread
CreateMutexW
HeapCreate
VirtualFree
LocalFree
GetEnvironmentVariableA
GetModuleFileNameA
GetVersionExA
TlsGetValue
GetModuleHandleA
TlsFree
TlsAlloc
SetLastError
GetCurrentThreadId
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualAlloc
HeapSize
TlsSetValue
RtlUnwind
GetTimeZoneInformation
GetSystemTime
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess

user32

CharNextW
PeekMessageW
DispatchMessageW
TranslateMessage

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree

oleaut32

SysAllocStringByteLen
SysFreeString
SysAllocString
LoadTypeLi
SysStringByteLen
VarUI4FromStr
VariantClear
RegisterTypeLi
LoadRegTypeLi
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen

cdrvhf32

ord32
ord36
ord20
ord7
ord35

wsock32

sendto
recvfrom
send
socket
ioctlsocket
closesocket
WSAGetLastError
bind
connect
htons
recv

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/CQc.txt
Bindu Software/Colorlab/CQcT.txt
Bindu Software/Colorlab/CSpectro.txt
Bindu Software/Colorlab/CSys.txt
Bindu Software/Colorlab/CSys1.txt
Bindu Software/Colorlab/Cal.fac
Bindu Software/Colorlab/Cb.txt
Bindu Software/Colorlab/Cb2.txt
Bindu Software/Colorlab/CbQ.txt
Bindu Software/Colorlab/Cms.txt
Bindu Software/Colorlab/CmsQ.exe
.exe windows:4 windows x86 arch:x86

d8e7263fa9a2e6690b59bb1d1b9055ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
GetCurrentProcessId
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetLastError
SetErrorMode
GetProcAddress
FindFirstFileA
FindClose
GetSystemTime
SystemTimeToFileTime
CreateFileA
FindNextFileA
CloseHandle
ReadFile
GetLocalTime
GetVersion
WriteFile
LocalAlloc
LocalFree
DeviceIoControl
GetFileSize
SearchPathA
Sleep
WaitForSingleObject
CreateSemaphoreA
OpenSemaphoreA
ReleaseSemaphore
GetModuleHandleA
GetVersion
GetModuleHandleA
GetProcAddress

user32

MessageBoxA

msvbvm60

ord587

Sections

.text
Size: 888KB - Virtual size: 884KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.protect
Size: 1012KB - Virtual size: 1011KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bindu Software/Colorlab/Coldif.cfg
Bindu Software/Colorlab/Colorlab.cfg
.lnk
Bindu Software/Colorlab/Colorlab.exe
.exe windows:4 windows x86 arch:x86

acf6d7accd5db7090b88318f136b499b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
GetCurrentProcessId
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetLastError
SetErrorMode
GetProcAddress
FindFirstFileA
FindClose
GetSystemTime
SystemTimeToFileTime
CreateFileA
FindNextFileA
CloseHandle
ReadFile
GetLocalTime
GetVersion
WriteFile
LocalAlloc
LocalFree
DeviceIoControl
GetFileSize
SearchPathA
Sleep
WaitForSingleObject
CreateSemaphoreA
OpenSemaphoreA
ReleaseSemaphore
GetModuleHandleA
GetVersion
GetModuleHandleA
GetProcAddress

user32

MessageBoxA

msvbvm60

ord697

Sections

.text
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.protect
Size: 1024KB - Virtual size: 1021KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bindu Software/Colorlab/CommPort.dll
.dll regsvr32 windows:4 windows x86 arch:x86

f9bde6671b49af70a7c37376bb6576ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
__vbaStrI2
ord690
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaFreeVar
__vbaLenBstr
__vbaAptOffset
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaRaiseEvent
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
Zombie_GetTypeInfo
ord595
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
__vbaRefVarAry
_CIsin
ord631
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaI2I4
__vbaCastObjVar
__vbaLbound
_adj_fpatan
Zombie_GetTypeInfoCount
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
ord716
__vbaFPException
ord319
__vbaUbound
__vbaStrVarVal
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord101
ord102
ord103
ord689
ord104
ord105
ord320
ord321
_CIatan
__vbaStrMove
__vbaCastObj
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/Common.txt
Bindu Software/Colorlab/DAO2532.TLB
Bindu Software/Colorlab/DAO2535.TLB
Bindu Software/Colorlab/DAO3032.DLL
.dll regsvr32 windows:1 windows x86 arch:x86

dc24fa2b1cf2ad23523a77c5b2fd7f1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msjt3032

ord156
ord137
ord162
ord139
ord106
ord160
ord311
ord321
ord112
ord166
ord178
ord153
ord133
ord138
ord134
ord147
ord326
ord169
ord179
ord151
ord170
ord316
ord155
ord120
ord146
ord308
ord173
ord122
ord159
ord157
ord911
ord127
ord912
ord312
ord910
ord909
ord319
ord310
ord317
ord163
ord315
ord908
ord907
ord302
ord309
ord318
ord108
ord132
ord304
ord148
ord167
ord172
ord158
ord906
ord191
ord140
ord102
ord119
ord188
ord152
ord110
ord113
ord128
ord107
ord187
ord145
ord103
ord150
ord154
ord176
ord130
ord141
ord175
ord171
ord131
ord118
ord121
ord161
ord136
ord101
ord114
ord109
ord104
ord142
ord123
ord115
ord126
ord165

msjter32

ord5
ord2
ord3

msvcrt20

atol
_onexit
__dllonexit
??3@YAXPAX@Z
atoi
_ftol
_stricmp
wcslen
toupper
_ultoa
_strnicmp
sprintf
_purecall
wcscpy
memmove
??2@YAPAXI@Z
strncmp

kernel32

GetProcAddress
lstrlenA
GetCurrentThreadId
lstrcpynA
GlobalFree
OpenFile
GlobalUnlock
GlobalLock
GlobalReAlloc
GlobalAlloc
lstrcatA
lstrcmpiA
lstrcpyA
lstrcmpW
GetCurrentProcessId
LoadLibraryA
IsDBCSLeadByte
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
GetModuleFileNameA
CompareStringA

user32

GetWindowLongA
GetDesktopWindow
wsprintfA
IsWindowVisible
GetWindowThreadProcessId
GetWindow

advapi32

RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegQueryValueA

oleaut32

SafeArrayUnlock
SafeArrayCreate
GetErrorInfo
VariantChangeType
VariantCopy
RegisterTypeLi
SetErrorInfo
SysAllocString
SysStringByteLen
VariantClear
VariantInit
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
LoadRegTypeLi
DispInvoke
DispGetIDsOfNames
SysStringLen
LoadTypeLi
SafeArrayRedim
SafeArrayLock
CreateErrorInfo
SafeArrayDestroy

ole32

CoGetMalloc
CoUninitialize
CoInitialize

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/DAO350.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

d249124e9bb3cd7ad1eff43913414080

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt40

atol
_stricmp
atoi
_ultoa
wcslen
malloc
free
strncmp
wcscpy
??3@YAXPAX@Z
_ftol
_purecall
strtod
_strnicmp
??2@YAPAXI@Z
memmove
toupper
sprintf

kernel32

DeleteCriticalSection
TlsGetValue
InitializeCriticalSection
lstrcmpW
lstrlenA
GlobalUnlock
lstrcpynA
GlobalReAlloc
GlobalFree
GlobalLock
IsDBCSLeadByte
Sleep
InterlockedDecrement
InterlockedIncrement
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
TlsFree
TlsAlloc
WideCharToMultiByte
GlobalAlloc
lstrcatA
lstrcpyA
CompareStringA
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
GetCurrentProcessId
CompareStringW
TlsSetValue

user32

GetWindow
DispatchMessageA
PeekMessageA
GetWindowLongA
GetWindowThreadProcessId
IsWindowVisible
wsprintfA
GetDesktopWindow
TranslateMessage

advapi32

RegQueryValueA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegCloseKey

oleaut32

SysAllocString
VariantClear
DispGetParam
SafeArrayGetElement
SafeArrayPutElement
CreateErrorInfo
SafeArrayGetUBound
SafeArrayAccessData
SysAllocStringLen
SysStringLen
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
DispGetIDsOfNames
DispInvoke
SysStringByteLen
VariantInit
SetErrorInfo
GetErrorInfo
VariantChangeTypeEx
SafeArrayUnaccessData
SysFreeString
SysAllocStringByteLen
VariantCopy
VariantChangeType
SafeArrayUnlock
SafeArrayLock
SafeArrayCreate
SafeArrayDestroy
SafeArrayRedim

ole32

CoInitialize
CoGetClassObject
CoGetMalloc
CoUninitialize

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerEx
DllUnregisterServer

Sections

.text
Size: 458KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/DATABASE.MDB
Bindu Software/Colorlab/DATETIME.DAT
Bindu Software/Colorlab/DEG10.TXT
Bindu Software/Colorlab/DEG2.TXT
Bindu Software/Colorlab/DISP.TXT
Bindu Software/Colorlab/DISPERSE.FAC
Bindu Software/Colorlab/DISPERSE.PAL
Bindu Software/Colorlab/DISPERSE.XYZ
Bindu Software/Colorlab/DISPERSE.cal
Bindu Software/Colorlab/DISPERSE.ped
Bindu Software/Colorlab/DISPERSE.rfl
Bindu Software/Colorlab/DOWNLOAD.AVI
Bindu Software/Colorlab/DV002.INF
Bindu Software/Colorlab/DV010.INF
Bindu Software/Colorlab/DVIIVII.INF
Bindu Software/Colorlab/DVIIVX.INF
Bindu Software/Colorlab/Data1C.CAL
Bindu Software/Colorlab/Data1C.RFL
Bindu Software/Colorlab/Data1C.XYZ
Bindu Software/Colorlab/Data1C.hed
Bindu Software/Colorlab/Data2C.CAL
Bindu Software/Colorlab/Data2C.FAC
Bindu Software/Colorlab/Data2C.HED
Bindu Software/Colorlab/Data2C.KII
Bindu Software/Colorlab/Data2C.LOD
Bindu Software/Colorlab/Data2C.RFL
Bindu Software/Colorlab/Data2C.rem
Bindu Software/Colorlab/DataPb.PAL
Bindu Software/Colorlab/DataPb.PED
Bindu Software/Colorlab/DataPb.PIG
Bindu Software/Colorlab/DataPb.PYZ
Bindu Software/Colorlab/DataTrn.cal
Bindu Software/Colorlab/DataTrn.hed
Bindu Software/Colorlab/DataTrn.rfl
Bindu Software/Colorlab/DataTrn.std
Bindu Software/Colorlab/DataTrn.trm
Bindu Software/Colorlab/DataTrn.xyz
Bindu Software/Colorlab/Db1.txt
Bindu Software/Colorlab/Db1t.txt
Bindu Software/Colorlab/Db2.txt
Bindu Software/Colorlab/EMPIRE.MDB
Bindu Software/Colorlab/Ellipse.tmp
Bindu Software/Colorlab/Extn1.dat
Bindu Software/Colorlab/Extn1T.dat
Bindu Software/Colorlab/Extn2.dat
Bindu Software/Colorlab/Extn4.dat
Bindu Software/Colorlab/Extn5.dat
Bindu Software/Colorlab/FBatch1.txt
Bindu Software/Colorlab/FBatch1t.txt
Bindu Software/Colorlab/FBatch2.txt
Bindu Software/Colorlab/FBc1.txt
Bindu Software/Colorlab/FBc1t.txt
Bindu Software/Colorlab/FBc2.txt
Bindu Software/Colorlab/FCSys.txt
Bindu Software/Colorlab/FCSys1.txt
Bindu Software/Colorlab/FCb.txt
Bindu Software/Colorlab/FCb2.txt
Bindu Software/Colorlab/FCms.txt
Bindu Software/Colorlab/FCommon.txt
Bindu Software/Colorlab/FDb1.txt
Bindu Software/Colorlab/FDb1t.txt
Bindu Software/Colorlab/FDb2.txt
Bindu Software/Colorlab/FFm1.txt
Bindu Software/Colorlab/FFm1t.txt
Bindu Software/Colorlab/FFm2.txt
Bindu Software/Colorlab/FHis.txt
Bindu Software/Colorlab/FLib1.txt
Bindu Software/Colorlab/FLib2.txt
Bindu Software/Colorlab/FLoad.txt
Bindu Software/Colorlab/FManager.txt
Bindu Software/Colorlab/FMatch1.txt
Bindu Software/Colorlab/FMatch2.txt
Bindu Software/Colorlab/FMeasure.txt
Bindu Software/Colorlab/FQc.txt
Bindu Software/Colorlab/FQct.txt
Bindu Software/Colorlab/FSpMs.txt
Bindu Software/Colorlab/FSpectro.txt
Bindu Software/Colorlab/FT
Bindu Software/Colorlab/FTIME
Bindu Software/Colorlab/Fm1.txt
Bindu Software/Colorlab/Fm1t.txt
Bindu Software/Colorlab/ForSp.dat
Bindu Software/Colorlab/FromStat.dat
Bindu Software/Colorlab/GBcommon.dll
.dll regsvr32 windows:4 windows x86 arch:x86

e5c2aac309eb18b68f61f1eb7b59337f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord553
ord660
ord661
ord662
ord663
ord557
ord558
ord592
ord593
ord300
ord594
ord595
ord303
ord304
ord305
ord306
ord705
ord520
ord309
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
ord560
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
ord310
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord312
ord711
ord313
ord605
ord712
ord713
ord606
ord714
ord607
ord608
ord715
ord716
ord717
ProcCallEngine
ord536
ord537
ord644
ord645
ord648
ord573
ord681
ord685
ord101
ord102
ord103
ord104
ord610
ord105
ord612
ord613
ord616
ord617
ord619
ord542
ord650
ord652
ord545
ord546
ord581

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/GROUP.GRP
Bindu Software/Colorlab/HASPUserSetup_7_80.exe
.exe windows:5 windows x86 arch:x86

26d454e40163dad18a05dcda5483e039

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:19:03:ac:ad:f9:53:6f:b0:43:22:4f:86:a7:db:05
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/06/2016, 00:00

Not After

26/08/2019, 12:00

Subject

SERIALNUMBER=1897511,CN=SafeNet Canada\, Inc.,O=SafeNet Canada\, Inc.,POSTALCODE=K2E 7M6,STREET=Suite 200+STREET=20 Colonnade Road,L=Ottawa,ST=Ontario,C=CA,1.3.6.1.4.1.311.60.2.1.3=#13024341,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

41:77:e0:7c:af:22:03:0e:73:18:ec:20:8d:75:73:b3:e2:78:ac:50
Signer

Actual PE Digest

41:77:e0:7c:af:22:03:0e:73:18:ec:20:8d:75:73:b3:e2:78:ac:50

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\CodeBases\isdev\src\Runtime\MSI\Shared\Setup\Setup___Win32_Release_Unicode\setup.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

comctl32

ord17

kernel32

SizeofResource
LoadResource
FindResourceW
GlobalUnlock
GlobalLock
GlobalFree
GetTickCount
GetExitCodeThread
CreateThread
CopyFileW
InterlockedIncrement
GetVersionExW
CompareStringA
CompareStringW
CreateEventW
InterlockedDecrement
QueryPerformanceFrequency
lstrcatW
GetTempFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
GetSystemDefaultLangID
GetUserDefaultLangID
lstrcmpW
lstrcmpiW
VerLanguageNameW
FindClose
FindNextFileW
CompareFileTime
FindFirstFileW
MoveFileW
GetPrivateProfileStringW
CreateDirectoryW
SetFileAttributesW
GetSystemTimeAsFileTime
LocalFree
FormatMessageW
GetSystemInfo
MulDiv
RaiseException
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
GetModuleHandleW
GetVersion
GetLocalTime
IsValidLocale
GetFileAttributesW
GetCommandLineW
lstrcpyA
VirtualQuery
IsBadReadPtr
FlushFileBuffers
SetEndOfFile
GetDriveTypeW
GetLocaleInfoW
GetCurrentThread
GetDiskFreeSpaceW
GetExitCodeProcess
LocalAlloc
InterlockedExchange
GlobalAlloc
SetStdHandle
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
LCMapStringA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
SetThreadContext
GetStringTypeA
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapDestroy
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
FatalAppExitA
GetModuleHandleA
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
lstrcpynA
lstrcmpA
SearchPathW
VirtualProtect
lstrlenW
SystemTimeToFileTime
QueryPerformanceCounter
SetEvent
ResetEvent
GetCurrentProcessId
GetEnvironmentVariableW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetDateFormatW
GetTimeFormatW
GetCurrentDirectoryW
FindResourceExW
GetFileTime
SetFileTime
LockResource
ExpandEnvironmentStringsW
GetTempPathW
SetErrorMode
GetWindowsDirectoryW
lstrcpyW
GetSystemDirectoryW
SetCurrentDirectoryW
CreateProcessW
WaitForSingleObject
DeleteFileW
RemoveDirectoryW
Sleep
ExitProcess
GetCurrentProcess
DuplicateHandle
TerminateProcess
MoveFileExW
GetThreadContext
VirtualProtectEx
WriteProcessMemory
GetModuleFileNameW
FlushInstructionCache
lstrcpynW
GetProcessHeap
HeapAlloc
HeapFree
WriteFile
ReadFile
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
lstrlenA
GetLastError
SetLastError
GetStringTypeW
ResumeThread
SetEnvironmentVariableA
OpenProcess
GetProcessTimes
CreateFileA
WriteConsoleW
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP

user32

ExitWindowsEx
CharUpperW
wvsprintfW
SendDlgItemMessageW
CharPrevW
LoadImageW
CreateDialogParamW
MoveWindow
SetCursor
GetDlgItemTextW
GetWindow
SetFocus
EnableWindow
SetDlgItemTextW
SetForegroundWindow
SetActiveWindow
GetDC
FillRect
GetSysColor
GetSysColorBrush
SendMessageW
IsDialogMessageW
GetWindowRect
GetSystemMetrics
SetRect
FindWindowW
IntersectRect
SubtractRect
IsWindow
DestroyWindow
CreateDialogIndirectParamW
CharNextW
MessageBoxW
WaitForInputIdle
GetWindowLongW
SetWindowLongW
GetClientRect
ClientToScreen
SetWindowPos
GetWindowDC
ReleaseDC
EndPaint
BeginPaint
EndDialog
SetWindowTextW
GetDlgItem
ShowWindow
DialogBoxIndirectParamW
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageW
wsprintfW
LoadIconW
LoadCursorW
RegisterClassW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
PostMessageW
KillTimer
PostQuitMessage
SetTimer
GetDlgCtrlID

gdi32

GetDIBColorTable
GetSystemPaletteEntries
CreatePalette
CreateHalftonePalette
UnrealizeObject
SelectPalette
RealizePalette
CreateFontW
SetBkMode
SetTextColor
GetObjectW
GetDeviceCaps
CreateFontIndirectW
CreateSolidBrush
CreateCompatibleDC
SelectObject
BitBlt
CreateDIBitmap
DeleteDC
DeleteObject
GetStockObject
TranslateCharsetInfo

advapi32

RegEnumKeyW
RegCreateKeyW
LookupPrivilegeValueW
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
AdjustTokenPrivileges
RegOpenKeyW

shell32

SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
ShellExecuteW
CommandLineToArgvW
SHBrowseForFolderW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CLSIDFromProgID
CoInitialize
CoCreateGuid
CreateItemMoniker
GetRunningObjectTable
StringFromGUID2
ProgIDFromCLSID
CoUninitialize
CoInitializeSecurity
CoCreateInstance

oleaut32

VariantClear
GetErrorInfo
VarUI4FromStr
SystemTimeToVariantTime
CreateErrorInfo
VarBstrFromDate
SysStringByteLen
LoadTypeLi
RegisterTypeLi
SetErrorInfo
VariantChangeType
SysFreeString
SysAllocStringLen
SysReAllocStringLen
SysStringLen
VarBstrCat
SysAllocString
SysAllocStringByteLen

rpcrt4

UuidToStringW
RpcStringFreeW
UuidFromStringW
UuidCreate

Sections

.text
Size: 699KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/HASPUserSetup_8_15.exe
.exe windows:5 windows x86 arch:x86

fd98317ee4955ba02e0bbaaaf8eabd77

Code Sign

01:a0:a8:e5:5a:b3:cf:24:af:81:5e:b5:cd:cc:63:1a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/07/2020, 00:00

Not After

02/03/2021, 12:00

Subject

SERIALNUMBER=2177038,CN=Thales DIS CPL USA\, Inc.,O=Thales DIS CPL USA\, Inc.,L=Belcamp,ST=Maryland,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:20:07:0e:11:1f:a3:b9:ec:48:fb:d5:e5:a0:d9:b9:21:cc:16:ec:72:2b:34:7b:87:97:f3:44:27:4a:88:10
Signer

Actual PE Digest

79:20:07:0e:11:1f:a3:b9:ec:48:fb:d5:e5:a0:d9:b9:21:cc:16:ec:72:2b:34:7b:87:97:f3:44:27:4a:88:10

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\CodeBases\isdev\redist\Language Independent\i386\setup.pdb

Imports

comctl32

ord17

kernel32

LoadLibraryW
lstrcmpW
lstrcmpiW
GetSystemDefaultLangID
GetUserDefaultLangID
VerLanguageNameW
CompareFileTime
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
SetFileAttributesW
GetSystemTimeAsFileTime
GetPrivateProfileStringW
MoveFileW
LocalFree
FormatMessageW
GetSystemInfo
MulDiv
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryExW
GetVersion
GetLocalTime
IsValidLocale
GetCommandLineW
GetFileAttributesW
GlobalAlloc
GlobalFree
FlushFileBuffers
VirtualQuery
IsBadReadPtr
GetDiskFreeSpaceExW
GetDriveTypeW
GetExitCodeProcess
GetCurrentThread
GetLocaleInfoW
InterlockedExchange
LoadLibraryExA
GetModuleHandleW
GetProcAddress
GetSystemDirectoryA
LoadLibraryA
GetLastError
SetLastError
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
ReadFile
SetFilePointer
WriteFile
HeapAlloc
lstrcmpA
SystemTimeToFileTime
ResetEvent
SetEvent
FindResourceExW
OpenProcess
GetProcessTimes
ReadConsoleW
WriteConsoleW
SetStdHandle
GetCurrentDirectoryW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetTimeFormatW
GetDateFormatW
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
HeapReAlloc
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeLibrary
CompareStringA
CompareStringW
lstrcatW
GetVersionExW
InterlockedDecrement
InterlockedIncrement
CreateEventW
QueryPerformanceFrequency
GetTempFileNameW
CopyFileW
GetTickCount
GetExitCodeThread
CreateThread
FindResourceW
GlobalUnlock
GlobalLock
SizeofResource
LockResource
LoadResource
lstrcpyW
SetErrorMode
GetTempPathW
ExpandEnvironmentStringsW
MoveFileExW
WriteProcessMemory
VirtualProtectEx
GetWindowsDirectoryW
GetSystemDirectoryW
FlushInstructionCache
SetThreadContext
GetThreadContext
CreateProcessW
ResumeThread
TerminateProcess
ExitProcess
GetCurrentProcess
Sleep
WaitForSingleObject
DuplicateHandle
RemoveDirectoryW
DeleteFileW
SetCurrentDirectoryW
lstrlenW
lstrcpynW
GetModuleFileNameW
GetProcessHeap
HeapFree
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetCurrentThreadId
HeapSize
GetModuleHandleExW
GetStdHandle
GetFullPathNameW
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
LCMapStringW
DecodePointer
EncodePointer

user32

DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
RegisterClassW
PostQuitMessage
CharPrevW
SendDlgItemMessageW
wvsprintfW
LoadImageW
CreateDialogParamW
MoveWindow
SetCursor
GetWindow
GetDlgItemTextW
SetFocus
EnableWindow
SetForegroundWindow
SetActiveWindow
SetDlgItemTextW
IsDialogMessageW
FindWindowW
SubtractRect
IntersectRect
SetRect
FillRect
GetSysColorBrush
GetSysColor
GetWindowRect
GetDC
GetSystemMetrics
GetDlgCtrlID
CreateDialogIndirectParamW
DestroyWindow
IsWindow
SendMessageW
MessageBoxW
CharNextW
WaitForInputIdle
SetWindowLongW
GetWindowLongW
GetClientRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
SetWindowPos
SetWindowTextW
GetDlgItem
ExitWindowsEx
CharUpperW
EndDialog
DialogBoxIndirectParamW
ShowWindow
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageW
wsprintfW
LoadIconW
LoadCursorW
KillTimer
SetTimer
CreateWindowExW

gdi32

TranslateCharsetInfo
UnrealizeObject
CreateHalftonePalette
GetDIBColorTable
SelectPalette
RealizePalette
GetSystemPaletteEntries
CreatePalette
CreateFontW
GetObjectW
SetTextColor
SetBkMode
GetDeviceCaps
CreateSolidBrush
CreateFontIndirectW
SetStretchBltMode
StretchBlt
SelectObject
DeleteDC
CreateDIBitmap
CreateCompatibleDC
BitBlt
DeleteObject
GetStockObject

advapi32

GetTokenInformation
RegOpenKeyExW
RegOpenKeyW
RegOverridePredefKey
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
FreeSid
EqualSid
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
SetEntriesInAclW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CreateWellKnownSid
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExW
RegEnumValueW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW

shell32

SHGetMalloc
ShellExecuteExW
SHGetPathFromIDListW
SHGetFolderPathW
SHBrowseForFolderW
ShellExecuteW
CommandLineToArgvW

ole32

CoCreateInstance
CoCreateGuid
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoInitializeSecurity
CoUninitialize

oleaut32

UnRegisterTypeLi
RegisterTypeLi
SysAllocStringLen
SysFreeString
SysReAllocStringLen
SysStringLen
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VarBstrCat
VarBstrFromDate
VariantClear
VariantChangeType
GetErrorInfo
VarUI4FromStr
SystemTimeToVariantTime
LoadTypeLi

shlwapi

PathFileExistsW

rpcrt4

RpcStringFreeW
UuidCreate
UuidToStringW

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/HASPUserSetup_8_53.exe
.exe windows:5 windows x86 arch:x86

fd98317ee4955ba02e0bbaaaf8eabd77

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:b1:28:b9:01:7a:fc:bb:23:ac:2c:eb:8c:a5:27:2e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

22/02/2022, 00:00

Not After

06/04/2023, 23:59

Subject

SERIALNUMBER=2177038,CN=Thales DIS CPL USA\, Inc.,OU=Security Team,O=Thales DIS CPL USA\, Inc.,L=Austin,ST=Texas,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e8:56:21:2a:c0:80:98:4a:cd:c5:ce:3a:b6:14:fe:b1:3a:03:ec:23:33:95:f6:5e:88:ec:04:c1:fd:90:58:06
Signer

Actual PE Digest

e8:56:21:2a:c0:80:98:4a:cd:c5:ce:3a:b6:14:fe:b1:3a:03:ec:23:33:95:f6:5e:88:ec:04:c1:fd:90:58:06

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\CodeBases\isdev\redist\Language Independent\i386\setup.pdb

Imports

comctl32

ord17

kernel32

LoadLibraryW
lstrcmpW
lstrcmpiW
GetSystemDefaultLangID
GetUserDefaultLangID
VerLanguageNameW
CompareFileTime
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
SetFileAttributesW
GetSystemTimeAsFileTime
GetPrivateProfileStringW
MoveFileW
LocalFree
FormatMessageW
GetSystemInfo
MulDiv
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryExW
GetVersion
GetLocalTime
IsValidLocale
GetCommandLineW
GetFileAttributesW
GlobalAlloc
GlobalFree
FlushFileBuffers
VirtualQuery
IsBadReadPtr
GetDiskFreeSpaceExW
GetDriveTypeW
GetExitCodeProcess
GetCurrentThread
GetLocaleInfoW
InterlockedExchange
LoadLibraryExA
GetModuleHandleW
GetProcAddress
GetSystemDirectoryA
LoadLibraryA
GetLastError
SetLastError
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
ReadFile
SetFilePointer
WriteFile
HeapAlloc
lstrcmpA
SystemTimeToFileTime
ResetEvent
SetEvent
FindResourceExW
OpenProcess
GetProcessTimes
ReadConsoleW
WriteConsoleW
SetStdHandle
GetCurrentDirectoryW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetTimeFormatW
GetDateFormatW
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
HeapReAlloc
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeLibrary
CompareStringA
CompareStringW
lstrcatW
GetVersionExW
InterlockedDecrement
InterlockedIncrement
CreateEventW
QueryPerformanceFrequency
GetTempFileNameW
CopyFileW
GetTickCount
GetExitCodeThread
CreateThread
FindResourceW
GlobalUnlock
GlobalLock
SizeofResource
LockResource
LoadResource
lstrcpyW
SetErrorMode
GetTempPathW
ExpandEnvironmentStringsW
MoveFileExW
WriteProcessMemory
VirtualProtectEx
GetWindowsDirectoryW
GetSystemDirectoryW
FlushInstructionCache
SetThreadContext
GetThreadContext
CreateProcessW
ResumeThread
TerminateProcess
ExitProcess
GetCurrentProcess
Sleep
WaitForSingleObject
DuplicateHandle
RemoveDirectoryW
DeleteFileW
SetCurrentDirectoryW
lstrlenW
lstrcpynW
GetModuleFileNameW
GetProcessHeap
HeapFree
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetCurrentThreadId
HeapSize
GetModuleHandleExW
GetStdHandle
GetFullPathNameW
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
LCMapStringW
DecodePointer
EncodePointer

user32

DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
RegisterClassW
PostQuitMessage
CharPrevW
SendDlgItemMessageW
wvsprintfW
LoadImageW
CreateDialogParamW
MoveWindow
SetCursor
GetWindow
GetDlgItemTextW
SetFocus
EnableWindow
SetForegroundWindow
SetActiveWindow
SetDlgItemTextW
IsDialogMessageW
FindWindowW
SubtractRect
IntersectRect
SetRect
FillRect
GetSysColorBrush
GetSysColor
GetWindowRect
GetDC
GetSystemMetrics
GetDlgCtrlID
CreateDialogIndirectParamW
DestroyWindow
IsWindow
SendMessageW
MessageBoxW
CharNextW
WaitForInputIdle
SetWindowLongW
GetWindowLongW
GetClientRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
SetWindowPos
SetWindowTextW
GetDlgItem
ExitWindowsEx
CharUpperW
EndDialog
DialogBoxIndirectParamW
ShowWindow
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageW
wsprintfW
LoadIconW
LoadCursorW
KillTimer
SetTimer
CreateWindowExW

gdi32

TranslateCharsetInfo
UnrealizeObject
CreateHalftonePalette
GetDIBColorTable
SelectPalette
RealizePalette
GetSystemPaletteEntries
CreatePalette
CreateFontW
GetObjectW
SetTextColor
SetBkMode
GetDeviceCaps
CreateSolidBrush
CreateFontIndirectW
SetStretchBltMode
StretchBlt
SelectObject
DeleteDC
CreateDIBitmap
CreateCompatibleDC
BitBlt
DeleteObject
GetStockObject

advapi32

GetTokenInformation
RegOpenKeyExW
RegOpenKeyW
RegOverridePredefKey
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
FreeSid
EqualSid
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
SetEntriesInAclW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CreateWellKnownSid
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExW
RegEnumValueW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW

shell32

SHGetMalloc
ShellExecuteExW
SHGetPathFromIDListW
SHGetFolderPathW
SHBrowseForFolderW
ShellExecuteW
CommandLineToArgvW

ole32

CoCreateInstance
CoCreateGuid
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoInitializeSecurity
CoUninitialize

oleaut32

UnRegisterTypeLi
RegisterTypeLi
SysAllocStringLen
SysFreeString
SysReAllocStringLen
SysStringLen
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VarBstrCat
VarBstrFromDate
VariantClear
VariantChangeType
GetErrorInfo
VarUI4FromStr
SystemTimeToVariantTime
LoadTypeLi

shlwapi

PathFileExistsW

rpcrt4

RpcStringFreeW
UuidCreate
UuidToStringW

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/HISTORY.HIS
Bindu Software/Colorlab/HOR.INF
Bindu Software/Colorlab/Hinstall.txt
Bindu Software/Colorlab/His.txt
Bindu Software/Colorlab/HitchLab.dat
Bindu Software/Colorlab/Hive.dll
.dll regsvr32 windows:4 windows x86 arch:x86

0ed481aa54b3c9f351f9c2158de5c9b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
ord518
__vbaVarSetVarAddref
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
__vbaVargVarCopy
_adj_fdiv_m32
ord592
ord300
ord301
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord305
ord306
ord307
__vbaVarTstLt
__vbaBoolVarNull
_CIsin
__vbaErase
__vbaVarCmpGt
__vbaVargVarMove
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaVarTstEq
ord561
ord562
DllFunctionCall
ord563
__vbaVarOr
__vbaRedimPreserve
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaNew
_CIsqrt
__vbaObjIs
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord313
ord606
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaUbound
ord644
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaFreeStrList
__vbaVarCmpLt
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord101
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaAryLock
__vbaVarDup
__vbaVarCopy
__vbaFpI4
__vbaVarSetObjAddref
_CIatan
__vbaCastObj
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj
__vbaRecAssign

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/ILLSS.DAT
Bindu Software/Colorlab/IVORY.PAL
Bindu Software/Colorlab/IVORY.PED
Bindu Software/Colorlab/IVORY.PIG
Bindu Software/Colorlab/Indicesb.cfg
Bindu Software/Colorlab/Indicesw.cfg
Bindu Software/Colorlab/Indicesy.cfg
Bindu Software/Colorlab/Iso.txt
Bindu Software/Colorlab/JBC1.TXT
Bindu Software/Colorlab/JBatch2.txt
Bindu Software/Colorlab/JBc2.txt
Bindu Software/Colorlab/JCB.TXT
Bindu Software/Colorlab/JCMS.TXT
Bindu Software/Colorlab/JCSYS.TXT
Bindu Software/Colorlab/JCb2.txt
Bindu Software/Colorlab/JCommon.txt
Bindu Software/Colorlab/JDB1.TXT
Bindu Software/Colorlab/JDISP.TXT
Bindu Software/Colorlab/JDb2.txt
Bindu Software/Colorlab/JFM1.TXT
Bindu Software/Colorlab/JFm2.txt
Bindu Software/Colorlab/JHis.txt
Bindu Software/Colorlab/JLib2.txt
Bindu Software/Colorlab/JLoad.txt
Bindu Software/Colorlab/JMATCH1.TXT
Bindu Software/Colorlab/JMEASURE.TXT
Bindu Software/Colorlab/JManager.txt
Bindu Software/Colorlab/JMatch2.txt
Bindu Software/Colorlab/JODISP.TXT
Bindu Software/Colorlab/JPOS.TXT
Bindu Software/Colorlab/JPPOS.TXT
Bindu Software/Colorlab/JQc.txt
Bindu Software/Colorlab/JSPECTRO.txt
Bindu Software/Colorlab/JSpMs.txt
Bindu Software/Colorlab/Jkmsecm700.inf
Bindu Software/Colorlab/LEAF.BMP
Bindu Software/Colorlab/LIB1C.CST
Bindu Software/Colorlab/LIBRARY.CIF
Bindu Software/Colorlab/LIBRARY.NCF
Bindu Software/Colorlab/LIBRARY.SUB
Bindu Software/Colorlab/LIBRARY.WLF
Bindu Software/Colorlab/Lib1.exe
.exe windows:4 windows x86 arch:x86

7c64cb580fb73f7fe78c214a29428610

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
GetCurrentProcessId
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetLastError
SetErrorMode
GetProcAddress
FindFirstFileA
FindClose
GetSystemTime
SystemTimeToFileTime
CreateFileA
FindNextFileA
CloseHandle
ReadFile
GetLocalTime
GetVersion
WriteFile
LocalAlloc
LocalFree
DeviceIoControl
GetFileSize
SearchPathA
Sleep
WaitForSingleObject
CreateSemaphoreA
OpenSemaphoreA
ReleaseSemaphore
GetModuleHandleA
GetVersion
GetModuleHandleA
GetProcAddress

user32

MessageBoxA

msvbvm60

ord583

Sections

.text
Size: 1.1MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.protect
Size: 1016KB - Virtual size: 1015KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bindu Software/Colorlab/Lib1.tol
Bindu Software/Colorlab/Lib1.txt
Bindu Software/Colorlab/Lib1C.CIF
Bindu Software/Colorlab/Lib1C.NCF
Bindu Software/Colorlab/Lib1C.SUB
Bindu Software/Colorlab/Lib1C.WLF
Bindu Software/Colorlab/Lib1t.txt
Bindu Software/Colorlab/Lib2.tol
Bindu Software/Colorlab/Lib2.txt
Bindu Software/Colorlab/Lib2C.CIF
Bindu Software/Colorlab/Lib2C.NCF
Bindu Software/Colorlab/Lib2C.SUB
Bindu Software/Colorlab/Lib2C.WLF
Bindu Software/Colorlab/ListOfSp.dat
Bindu Software/Colorlab/Load.txt
Bindu Software/Colorlab/Locator.dll
.dll regsvr32 windows:4 windows x86 arch:x86

3adf4aa6391b5d77b2b9b94f14feb56c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaRedimPreserveVar
__vbaFreeVar
_adj_fdiv_m64
__vbaVarIndexStore
__vbaRaiseEvent
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
_adj_fdiv_m32
__vbaAryDestruct
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaRefVarAry
_CIsin
__vbaErase
__vbaChkstk
EVENT_SINK_AddRef
__vbaI2I4
DllFunctionCall
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
ord601
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaUbound
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord101
ord102
ord103
ord104
ord105
__vbaStrToAnsi
__vbaVarCopy
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/MIO32.DLL
.dll windows:4 windows x86 arch:x86

629cf6f4ebc97bcc43c8125111cc6f43

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsc32

ord20
ord14
ord10

kernel32

GetOEMCP
FreeEnvironmentStringsA
CloseHandle
SetFilePointer
GetTickCount
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
WriteFile
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
DisableThreadLibraryCalls
GetLastError
HeapAlloc
HeapFree
LoadLibraryA
FlushFileBuffers
SetStdHandle

Exports

Exports

mioBreak
mioDebug
mioDriver
mioQuiet
mioResult
mioSendTo
mioWaitFor

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/MODE.CFG
Bindu Software/Colorlab/Manager.txt
Bindu Software/Colorlab/Match1.txt
Bindu Software/Colorlab/Match2.txt
Bindu Software/Colorlab/Measure.exe
.exe windows:4 windows x86 arch:x86

ee9684e3ff85340d17626e0337eb0e51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
GetCurrentProcessId
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetLastError
SetErrorMode
GetProcAddress
FindFirstFileA
FindClose
GetSystemTime
SystemTimeToFileTime
CreateFileA
FindNextFileA
CloseHandle
ReadFile
GetLocalTime
GetVersion
WriteFile
LocalAlloc
LocalFree
DeviceIoControl
GetFileSize
SearchPathA
Sleep
WaitForSingleObject
CreateSemaphoreA
OpenSemaphoreA
ReleaseSemaphore
GetModuleHandleA
GetVersion
GetModuleHandleA
GetProcAddress

user32

MessageBoxA

msvbvm60

EVENT_SINK_GetIDsOfNames

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.protect
Size: 1000KB - Virtual size: 998KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bindu Software/Colorlab/Measure.txt
Bindu Software/Colorlab/Mi.cfg
Bindu Software/Colorlab/NOOFSP
Bindu Software/Colorlab/New.grp
Bindu Software/Colorlab/Nrclient.dll
.dll windows:4 windows x86 arch:x86

5d969681961d48b41a1452d6943bf05c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
GetComputerNameA
CloseHandle
DeleteCriticalSection
TerminateThread
Sleep
SetEvent
GetLocalTime
lstrcpyA
VirtualQuery
LeaveCriticalSection
InterlockedExchangeAdd
GetTickCount
EnterCriticalSection
InterlockedExchange
WaitForSingleObject
lstrcpynA
lstrcatA
VirtualFree
WaitForMultipleObjects
VirtualAlloc
lstrlenA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
lstrcmpA
GlobalFree
GlobalAlloc
CreateEventA
GetVersion
GetVersionExA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
LoadLibraryA
GetProcAddress
CreateFileA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
CreateThread
OutputDebugStringA
ResetEvent
GetModuleFileNameA
GetLastError
GetFileAttributesA
RtlUnwind
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
IsBadWritePtr
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile

user32

wsprintfA

wsock32

inet_ntoa
connect
send
recv
socket
WSAGetLastError
setsockopt
sendto
ntohs
closesocket
WSAStartup
WSACleanup
ntohl
ioctlsocket
gethostbyname
htons
htonl
inet_addr
recvfrom
bind
select

netapi32

Netbios

advapi32

RegCreateKeyA
RegSetValueExA
RegOpenKeyExA

Exports

Exports

AutoConfigClient
GetCurIniPathName
NetRockey
NrGetLastError
NrGetVersion
SetIniPathName

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/OCAL.FAC
Bindu Software/Colorlab/ODisp.txt
Bindu Software/Colorlab/OGBcommon.dll
.dll regsvr32 windows:4 windows x86 arch:x86

5e42e017f89e5dd14e14e0cda8f854c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord519
ord553
ord660
ord662
ord663
ord557
ord592
ord593
ord594
ord595
ord303
ord705
ord520
ord309
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord560
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord605
ord712
ord606
ord713
ord607
ord608
ord715
ord716
ProcCallEngine
ord536
ord644
ord537
ord648
ord573
ord681
ord685
ord101
ord102
ord103
ord104
ord610
ord105
ord612
ord613
ord616
ord617
ord619
ord542
ord650
ord652
ord545
ord546
ord581

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/OPEN.BMP
Bindu Software/Colorlab/OPTF2.OPT
Bindu Software/Colorlab/ORGANIC.MDB
Bindu Software/Colorlab/ORGANIC.TOL
Bindu Software/Colorlab/ORGANIC.TXT
Bindu Software/Colorlab/Ov511p.inf
Bindu Software/Colorlab/PAINT.PDT
Bindu Software/Colorlab/PAINT.pal
Bindu Software/Colorlab/PAINT.ped
Bindu Software/Colorlab/PAINT.pyz
Bindu Software/Colorlab/PBATCH1.TXT
Bindu Software/Colorlab/PBATCH1T.TXT
Bindu Software/Colorlab/PBATCH2.TXT
Bindu Software/Colorlab/PBC1.DAT
Bindu Software/Colorlab/PBC1.TXT
Bindu Software/Colorlab/PBC1T.TXT
Bindu Software/Colorlab/PBC2.DAT
Bindu Software/Colorlab/PBC2.TXT
Bindu Software/Colorlab/PBCP.DAT
Bindu Software/Colorlab/PCB.TXT
Bindu Software/Colorlab/PCB2.TXT
Bindu Software/Colorlab/PCBQ.TXT
Bindu Software/Colorlab/PCMS.TXT
Bindu Software/Colorlab/PCMS1.DAT
Bindu Software/Colorlab/PCMS2.DAT
Bindu Software/Colorlab/PCMSP.DAT
Bindu Software/Colorlab/PCOMMON.TXT
Bindu Software/Colorlab/PCSYS.DAT
Bindu Software/Colorlab/PCSYS.TXT
Bindu Software/Colorlab/PCSYS1.TXT
Bindu Software/Colorlab/PDB1.DAT
Bindu Software/Colorlab/PDB1.TXT
Bindu Software/Colorlab/PDB12.TXT
Bindu Software/Colorlab/PDB1T.TXT
Bindu Software/Colorlab/PDB2.TXT
Bindu Software/Colorlab/PDBP.DAT
Bindu Software/Colorlab/PDb2.dat
Bindu Software/Colorlab/PFM.DAT
Bindu Software/Colorlab/PFM1.DAT
Bindu Software/Colorlab/PFM1.TXT
Bindu Software/Colorlab/PFM1T.TXT
Bindu Software/Colorlab/PFM2.DAT
Bindu Software/Colorlab/PFM2.TXT
Bindu Software/Colorlab/PFMP.DAT
Bindu Software/Colorlab/PHIS.TXT
Bindu Software/Colorlab/PHS.DAT
Bindu Software/Colorlab/PIGMENT.PAL
Bindu Software/Colorlab/PIGMENT.PED
Bindu Software/Colorlab/PIGMENT.PIG
Bindu Software/Colorlab/PIGMENT.PYZ
Bindu Software/Colorlab/PIGMENT.QXY
Bindu Software/Colorlab/PLIB1.DAT
Bindu Software/Colorlab/PLIB1.TXT
Bindu Software/Colorlab/PLIB1T.TXT
Bindu Software/Colorlab/PLIB2.DAT
Bindu Software/Colorlab/PLIB2.TXT
Bindu Software/Colorlab/PLOAD.TXT
Bindu Software/Colorlab/PMANAGER.TXT
Bindu Software/Colorlab/PMATCH1.TXT
Bindu Software/Colorlab/PMATCH2.TXT
Bindu Software/Colorlab/PMEASURE.TXT
Bindu Software/Colorlab/POINT02.ICO
Bindu Software/Colorlab/POINT04.ICO
Bindu Software/Colorlab/POS.TXT
Bindu Software/Colorlab/PPOS.TXT
Bindu Software/Colorlab/PQC.DAT
Bindu Software/Colorlab/PQC.TXT
Bindu Software/Colorlab/PQCT.TXT
Bindu Software/Colorlab/PREADME.TXT
Bindu Software/Colorlab/PSPECTRO.TXT
Bindu Software/Colorlab/PSPMS.TXT
Bindu Software/Colorlab/PWLOAD.DAT
Bindu Software/Colorlab/Paint.CAL
Bindu Software/Colorlab/Paint.FAC
Bindu Software/Colorlab/Paint.HED
Bindu Software/Colorlab/Paint.KII
Bindu Software/Colorlab/Paint.LI
Bindu Software/Colorlab/Paint.LOD
Bindu Software/Colorlab/Paint.RFL
Bindu Software/Colorlab/Paint.rem
Bindu Software/Colorlab/Polyestr.CAL
Bindu Software/Colorlab/Polyestr.HED
Bindu Software/Colorlab/Polyestr.XYZ
Bindu Software/Colorlab/Polyestr.rfl
Bindu Software/Colorlab/Polyestr.std
Bindu Software/Colorlab/Premier.mdb
Bindu Software/Colorlab/Qc Manual.pdf
.pdf
- http://premiercolorscan.com
- http://vsnl.com
- http://www.premiercolorscan.com
Bindu Software/Colorlab/Qc.exe
.exe windows:4 windows x86 arch:x86

ee9684e3ff85340d17626e0337eb0e51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
GetCurrentProcessId
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetLastError
SetErrorMode
GetProcAddress
FindFirstFileA
FindClose
GetSystemTime
SystemTimeToFileTime
CreateFileA
FindNextFileA
CloseHandle
ReadFile
GetLocalTime
GetVersion
WriteFile
LocalAlloc
LocalFree
DeviceIoControl
GetFileSize
SearchPathA
Sleep
WaitForSingleObject
CreateSemaphoreA
OpenSemaphoreA
ReleaseSemaphore
GetModuleHandleA
GetVersion
GetModuleHandleA
GetProcAddress

user32

MessageBoxA

msvbvm60

EVENT_SINK_GetIDsOfNames

Sections

.text
Size: 8.7MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.protect
Size: 1004KB - Virtual size: 1003KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bindu Software/Colorlab/Qc.txt
Bindu Software/Colorlab/QcT.txt
Bindu Software/Colorlab/R.DAT
Bindu Software/Colorlab/RBatch2.txt
Bindu Software/Colorlab/RBc2.txt
Bindu Software/Colorlab/RCb.txt
Bindu Software/Colorlab/RCb2.txt
Bindu Software/Colorlab/RCms.txt
Bindu Software/Colorlab/RCommon.txt
Bindu Software/Colorlab/RDb2.txt
Bindu Software/Colorlab/REACTIVE.CAL
Bindu Software/Colorlab/REACTIVE.HED
Bindu Software/Colorlab/REACTIVE.RFL
Bindu Software/Colorlab/REACTIVE.XYZ
Bindu Software/Colorlab/RFm2.txt
Bindu Software/Colorlab/RGBDATA.DAT
Bindu Software/Colorlab/RGTable.dat
Bindu Software/Colorlab/RHis.txt
Bindu Software/Colorlab/RLib2.txt
Bindu Software/Colorlab/RLoad.txt
Bindu Software/Colorlab/ROOT.BMP
Bindu Software/Colorlab/RQcT.txt
Bindu Software/Colorlab/Rgbdatfo.dat
Bindu Software/Colorlab/Right_WL.txt
Bindu Software/Colorlab/SBatch1.txt
Bindu Software/Colorlab/SBatch1t.txt
Bindu Software/Colorlab/SBatch2.txt
Bindu Software/Colorlab/SBc1.txt
Bindu Software/Colorlab/SBc1t.txt
Bindu Software/Colorlab/SBc2.txt
Bindu Software/Colorlab/SCRCOL.CFG
Bindu Software/Colorlab/SCSys.txt
Bindu Software/Colorlab/SCSys1.txt
Bindu Software/Colorlab/SCb.txt
Bindu Software/Colorlab/SCb2.txt
Bindu Software/Colorlab/SCbQ.txt
Bindu Software/Colorlab/SCms.txt
Bindu Software/Colorlab/SCommon.txt
Bindu Software/Colorlab/SDETAIL
Bindu Software/Colorlab/SDb1.txt
Bindu Software/Colorlab/SDb12.txt
Bindu Software/Colorlab/SDb1t.txt
Bindu Software/Colorlab/SDb2.txt
Bindu Software/Colorlab/SFm1.txt
Bindu Software/Colorlab/SFm1t.txt
Bindu Software/Colorlab/SHis.txt
Bindu Software/Colorlab/SLib1.txt
Bindu Software/Colorlab/SLib1t.txt
Bindu Software/Colorlab/SLib2.txt
Bindu Software/Colorlab/SLoad.txt
Bindu Software/Colorlab/SManager.txt
Bindu Software/Colorlab/SMatch.txt
Bindu Software/Colorlab/SMatch1.txt
Bindu Software/Colorlab/SMeasure.txt
Bindu Software/Colorlab/SPECTRO.CAL
Bindu Software/Colorlab/SQc.txt
Bindu Software/Colorlab/SQct.txt
Bindu Software/Colorlab/SSpMs.txt
Bindu Software/Colorlab/SSpectro.txt
Bindu Software/Colorlab/STDFIL.INF
Bindu Software/Colorlab/STDS.STD
Bindu Software/Colorlab/STRENGTH.VAL
Bindu Software/Colorlab/ScanS.exe
.exe windows:4 windows x86 arch:x86

acf6d7accd5db7090b88318f136b499b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
GetCurrentProcessId
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetLastError
SetErrorMode
GetProcAddress
FindFirstFileA
FindClose
GetSystemTime
SystemTimeToFileTime
CreateFileA
FindNextFileA
CloseHandle
ReadFile
GetLocalTime
GetVersion
WriteFile
LocalAlloc
LocalFree
DeviceIoControl
GetFileSize
SearchPathA
Sleep
WaitForSingleObject
CreateSemaphoreA
OpenSemaphoreA
ReleaseSemaphore
GetModuleHandleA
GetVersion
GetModuleHandleA
GetProcAddress

user32

MessageBoxA

msvbvm60

ord697

Sections

.text
Size: 232KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.protect
Size: 1000KB - Virtual size: 996KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bindu Software/Colorlab/Setup.Ini
Bindu Software/Colorlab/SpMs.txt
Bindu Software/Colorlab/Spectro.exe
.exe windows:4 windows x86 arch:x86

d8e7263fa9a2e6690b59bb1d1b9055ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
GetCurrentProcessId
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetLastError
SetErrorMode
GetProcAddress
FindFirstFileA
FindClose
GetSystemTime
SystemTimeToFileTime
CreateFileA
FindNextFileA
CloseHandle
ReadFile
GetLocalTime
GetVersion
WriteFile
LocalAlloc
LocalFree
DeviceIoControl
GetFileSize
SearchPathA
Sleep
WaitForSingleObject
CreateSemaphoreA
OpenSemaphoreA
ReleaseSemaphore
GetModuleHandleA
GetVersion
GetModuleHandleA
GetProcAddress

user32

MessageBoxA

msvbvm60

ord587

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.protect
Size: 1004KB - Virtual size: 1003KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bindu Software/Colorlab/Spectro.txt
Bindu Software/Colorlab/Std1C.std
Bindu Software/Colorlab/Std2C.std
Bindu Software/Colorlab/StdTrn.ttd
Bindu Software/Colorlab/Stdpb.std
Bindu Software/Colorlab/Strength.cfg
Bindu Software/Colorlab/TBatch1.txt
Bindu Software/Colorlab/TBatch1t.txt
Bindu Software/Colorlab/TBc1.txt
Bindu Software/Colorlab/TCb.txt
Bindu Software/Colorlab/TCommon.txt
Bindu Software/Colorlab/TDb1.txt
Bindu Software/Colorlab/TEMP.MDB
Bindu Software/Colorlab/TFm1.txt
Bindu Software/Colorlab/TL84.txt
Bindu Software/Colorlab/TManager.txt
Bindu Software/Colorlab/TMatch1.txt
Bindu Software/Colorlab/USBIOCOM.dll
.dll regsvr32 windows:4 windows x86 arch:x86

a86d5e1c50b129a92ff9a73bcd5fe7cf

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7d:a6:d8:c8:d3:f4:78:df:af:e9:df:de:12:ba:c4:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

12/12/2006, 00:00

Not After

11/12/2009, 23:59

Subject

CN=Thesycon Systemsoftware & Consulting GmbH,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Thesycon Systemsoftware & Consulting GmbH,L=Ilmenau,ST=Thuringia,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2a:e6:e4:5a:c2:46:7d:9a:20:20:21:a4:3a:c9:6b:e4:9c:b8:bb:fe
Signer

Actual PE Digest

2a:e6:e4:5a:c2:46:7d:9a:20:20:21:a4:3a:c9:6b:e4:9c:b8:bb:fe

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrcpynA
SizeofResource
LeaveCriticalSection
FindResourceA
GetLastError
LoadLibraryExA
IsDBCSLeadByte
lstrcmpiA
lstrcpyA
lstrcatA
InitializeCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
HeapDestroy
GetModuleFileNameA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
LoadResource
lstrlenW
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
CreateEventA
CloseHandle
ResetEvent
SetEvent
WaitForMultipleObjects
SetThreadPriority
WaitForSingleObject
InterlockedExchange
CreateFileA
GetOverlappedResult
DeviceIoControl
CancelIo
ReadFile
WriteFile
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapSize
UnhandledExceptionFilter

user32

PostMessageA
UnregisterDeviceNotification
CreateWindowExA
ShowWindow
UpdateWindow
RegisterDeviceNotificationA
CharNextA
RegisterClassExA
LoadCursorA
DefWindowProcA
UnregisterClassA
DispatchMessageA
TranslateMessage
GetMessageA

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumValueA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CLSIDFromString
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

SafeArrayUnaccessData
RegisterTypeLi
SafeArrayGetDim
SafeArrayGetElemsize
VariantClear
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SysFreeString
SysAllocStringLen
LoadTypeLi
SysAllocString
VarUI4FromStr
LoadRegTypeLi
SysStringLen

setupapi

SetupDiEnumDeviceInterfaces

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/UXXX.INF
Bindu Software/Colorlab/VERSION
Bindu Software/Colorlab/WBYES
Bindu Software/Colorlab/WF.INF
Bindu Software/Colorlab/WF31.INF
Bindu Software/Colorlab/WHITE.RFT
Bindu Software/Colorlab/WHITED0.DAT
Bindu Software/Colorlab/WHITESE.DAT
Bindu Software/Colorlab/WHITESI.DAT
Bindu Software/Colorlab/WSC32.DLL
.dll windows:4 windows x86 arch:x86

ad6b9e5837f58bf799958db6c6bdfc7e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfA

kernel32

HeapCreate
HeapDestroy
GetLastError
SetCommTimeouts
SetCommMask
ClearCommError
EscapeCommFunction
SetupComm
SetCommState
GetCommState
GetCommTimeouts
CreateFileA
CloseHandle
WriteFile
ReadFile
PurgeComm
GetCommModemStatus
ClearCommBreak
SetCommBreak
FormatMessageA
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
SetFilePointer
GetEnvironmentStringsW
WideCharToMultiByte
DisableThreadLibraryCalls
HeapAlloc
HeapFree
LoadLibraryA
FlushFileBuffers
SetStdHandle

Exports

Exports

SioBaud
SioBrkSig
SioCTS
SioDCD
SioDSR
SioDTR
SioDebug
SioDone
SioFlow
SioGetc
SioGets
SioInfo
SioParms
SioPutc
SioPuts
SioRI
SioRTS
SioRead
SioReset
SioRxClear
SioRxQue
SioStatus
SioTxClear
SioTxQue
SioUnGetc
SioWinError

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/White.dat
Bindu Software/Colorlab/X5VBDriver.dll
.dll regsvr32 windows:4 windows x86 arch:x86

2c8110640efb1e8e44ccc853a0179c7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaLenBstr
__vbaLateIdCall
__vbaAptOffset
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
__vbaRaiseEvent
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaLsetFixstr
ord660
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaExitProc
ord300
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
ord303
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
ord305
ord306
__vbaStrFixstr
ord309
_CIsin
ord632
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
DllFunctionCall
__vbaRedimPreserve
_adj_fpatan
__vbaLateIdCallLd
__vbaRedim
EVENT_SINK_Release
__vbaNew
_CIsqrt
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord313
ord712
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaUbound
__vbaI2Var
_CIlog
__vbaInStr
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord101
ord102
ord103
ord104
ord105
__vbaVarAdd
__vbaFpI2
ord617
_CIatan
__vbaCastObj
__vbaStrMove
_allmul
__vbaLateIdSt
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/XYDRV32.DLL
.dll windows:4 windows x86 arch:x86

048f1a0c64e1953db7dc10cc1e696cdb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsc32

ord3
ord25
ord10
ord14
ord20

user32

wsprintfA

kernel32

GetStdHandle
GetStartupInfoA
CloseHandle
SetFilePointer
FlushFileBuffers
SetStdHandle
GetTickCount
_lclose
lstrcpyA
_lwrite
lstrlenA
_lcreat
_lread
_lopen
_llseek
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetEnvironmentStringsW
WideCharToMultiByte
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetStringTypeW
HeapAlloc
DisableThreadLibraryCalls
WriteFile
GetStringTypeA
GetLastError
HeapFree
LoadLibraryA

Exports

Exports

xyAbort
xyAcquire
xyDebug
xyDriver
xyGetFileName
xyGetMessage
xyGetParameter
xyRelease
xySetParameter
xyStartRx
xyStartTx

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/XYZ.INF
Bindu Software/Colorlab/XYZLAB.MDB
Bindu Software/Colorlab/XrUsb.inf
Bindu Software/Colorlab/XyzBat.inf
Bindu Software/Colorlab/XyzBat2.inf
Bindu Software/Colorlab/XyzBatNew.inf
Bindu Software/Colorlab/XyzBatQc.inf
Bindu Software/Colorlab/comms.dll
.dll windows:4 windows x86 arch:x86

9ce7876d2af0b830be1dc8740ebe2dc2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCommTimeouts
SetCommState
BuildCommDCBA
GetCommState
SetupComm
CreateFileA
CloseHandle
PurgeComm
WriteFile
ReadFile
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

Exports

Exports

?ClosePort@@YGXXZ
?FlushBuffers@@YGXXZ
?OpenPort@@YGXKKKK@Z
?RecvChar@@YGKXZ
?SendChar@@YGXK@Z

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/corr.dat
Bindu Software/Colorlab/correlation
Bindu Software/Colorlab/dao360.dll
.dll regsvr32 windows:4 windows x86 arch:x86

740d7cb11304862970f49454448a6e33

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcschr
wcscspn
_wcsnicmp
atoi
atol
_wtoi
wcslen
_ultow
wcsncpy
malloc
free
_ftol
wcstod
wcsstr
wcscpy
sprintf
swprintf
wcscat
toupper
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall

kernel32

DeleteCriticalSection
InitializeCriticalSection
GlobalFree
GlobalReAlloc
GlobalAlloc
GlobalLock
GetSystemDefaultLCID
CompareStringA
TlsSetValue
CompareStringW
GetCurrentProcessId
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
WideCharToMultiByte
lstrlenW
TlsGetValue
TlsAlloc
lstrlenA
Sleep
InterlockedDecrement
InterlockedIncrement
FreeLibrary
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
TlsFree
GlobalUnlock

user32

PeekMessageW
GetDesktopWindow
wsprintfW
GetWindowLongA
DispatchMessageW
TranslateMessage
GetWindow
IsWindowVisible
GetWindowThreadProcessId

advapi32

RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegCloseKey

ole32

CoInitialize
CoGetClassObject
CoGetMalloc
CoUninitialize

oleaut32

GetErrorInfo
CreateErrorInfo
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysReAllocString
VariantChangeTypeEx
SafeArrayRedim
SafeArrayDestroy
SafeArrayCreate
SafeArrayLock
SafeArrayUnlock
VariantChangeType
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
DispGetIDsOfNames
DispInvoke
SysAllocString
VariantInit
SetErrorInfo
VariantClear
DispGetParam
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
VariantCopy

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerEx
DllUnregisterServer

Sections

.text
Size: 416KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/disperse.hed
Bindu Software/Colorlab/haspclnt.dll
.dll windows:4 windows x86 arch:x86

eca60c107729d4517397c7a573ce86bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
GetModuleHandleA
GetProcAddress
LoadLibraryA
GlobalAlloc
GetModuleHandleA
GetVersion
GetModuleHandleA
GetProcAddress
GetVersionExA

user32

MessageBoxA

Exports

Exports

Get_KeyID
RUS_PerformUpdate

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT_HA
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.protect
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bindu Software/Colorlab/haspdev.dll
.dll windows:4 windows x86 arch:x86

f45855141670fe81b62a7e609615b285

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentVariableA
GetVersionExA
MultiByteToWideChar
RaiseException
RtlUnwind
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
HeapFree
HeapAlloc
SetUnhandledExceptionFilter
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
CloseHandle

oleaut32

SysAllocStringLen
SysAllocString
SysFreeString

Exports

Exports

RUS_CreateUpdateDirect
RUS_CreateUpdateFAS
RUS_VariantCreateUpdateDirect
RUS_VariantCreateUpdateFAS

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/haspds_windows.dll
.dll windows:4 windows x86 arch:x86

4fedba9c3e25069f3cde08a08ac8979f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6b:ea:1e:66:d2:b4:a5:7e:74:ce:91:89:3f:ac:e0:d8
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

25/08/2008, 00:00

Not After

25/08/2010, 23:59

Subject

CN=Aladdin Knowledge Systems LTD\ ,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Aladdin Knowledge Systems LTD\ ,L=Tel Aviv,ST=Israel,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2c:13:cf:3b:2e:03:a6:14:ff:d9:9e:4a:c6:90:73:2f:16:97:2e:84
Signer

Actual PE Digest

2c:13:cf:3b:2e:03:a6:14:ff:d9:9e:4a:c6:90:73:2f:16:97:2e:84

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
SetFileAttributesA
GetModuleFileNameW
CopyFileA
GetFileAttributesA
SetFilePointer
WriteFile
LoadLibraryW
DeleteFileW
FormatMessageA
MoveFileW
CopyFileW
CreateMutexA
CreateDirectoryA
DeviceIoControl
OpenProcess
lstrlenA
GetSystemInfo
UnmapViewOfFile
CreateProcessW
MapViewOfFile
CreateFileMappingA
GetTickCount
FreeLibrary
TerminateProcess
GetModuleFileNameA
GetCurrentThread
GetCurrentProcess
LocalFree
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetExitCodeThread
GetModuleHandleA
GetProcAddress
GetLastError
LocalAlloc
GetLocalTime
FindFirstFileA
FindClose
DeleteFileA
FindNextFileA
RemoveDirectoryA
GetTempPathA
GetWindowsDirectoryA
CreateFileA
CloseHandle
GetSystemDirectoryA
MultiByteToWideChar
WideCharToMultiByte
GetVersionExA
LoadLibraryA
GetProcessHeap
SetEndOfFile
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
CreateEventA
LocalReAlloc
GetCurrentProcessId
SetEvent
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
GetCommandLineA
FindFirstFileW
FindNextFileW
RemoveDirectoryW
HeapFree
HeapAlloc
ExitProcess
VirtualProtect
VirtualAlloc
VirtualQuery
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
ReadFile
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
GetTimeZoneInformation
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
CreateFileW
CreateDirectoryW

advapi32

RegDeleteValueA
RegQueryValueExW
QueryServiceStatus
RegOpenKeyA
OpenThreadToken
OpenProcessToken
DuplicateToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
FreeSid
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey

user32

SetForegroundWindow
SendMessageCallbackA
PeekMessageA
GetWindowThreadProcessId
IsWindowVisible
FindWindowA
EnumWindows
GetWindowTextA
GetParent

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

haspds_ExitProcess
haspds_GetClientProcess
haspds_GetInfo
haspds_GetLastError
haspds_GetLastErrorMessage
haspds_GetLastError_Ex
haspds_GetVendorInfo
haspds_GetVersion
haspds_Install
haspds_KillClientProcess
haspds_SetParameter
haspds_UnInstall

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/haspvb32.dll
.dll windows:4 windows x86 arch:x86

69b1061ca0527a41b0830cabda65410b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
DeviceIoControl
GetCurrentProcessId
GetModuleHandleA
GetLastError
GetTickCount
SetErrorMode
LocalAlloc
LocalFree
ReadFile
FreeLibrary
CreateFileA
CloseHandle
GetEnvironmentVariableA
SearchPathA
Sleep
WaitForSingleObject
CreateSemaphoreA
OpenSemaphoreA
ReleaseSemaphore

Exports

Exports

GetEncDecBlock
ReadHaspBlock
SetEncDecBlock
WriteHaspBlock
hasp

Sections

.text
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CONST
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/hdinst_windows.dll
.dll windows:4 windows x86 arch:x86

c3f9b83127820af01feed500fda944a3

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:d9:27:65:a3:19:5d:d9:f2:d5:3f:0c:de:b5:d0:62
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

21/08/2006, 00:00

Not After

30/08/2008, 23:59

Subject

CN=Aladdin Knowledge Systems Inc.,OU=Digital ID Class 3 - Netscape Object Signing+OU=\ Digital ID Class 3 - Netscape Object Signing,O=Aladdin Knowledge Systems Inc.,L=New York,ST=New York,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

df:5e:44:a6:7b:f4:33:6f:32:e6:4e:8b:0d:f2:87:a3:48:c8:cb:91
Signer

Actual PE Digest

df:5e:44:a6:7b:f4:33:6f:32:e6:4e:8b:0d:f2:87:a3:48:c8:cb:91

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA

kernel32

GetCurrentThread
GetModuleFileNameA
TerminateProcess
CreateDirectoryA
SetFilePointer
WriteFile
FormatMessageA
GetLocalTime
Sleep
SetFileAttributesA
GetModuleFileNameW
CopyFileA
GetFileAttributesA
LocalAlloc
LoadLibraryA
CreateProcessA
WaitForSingleObject
DeviceIoControl
OpenProcess
lstrlenA
UnmapViewOfFile
GetExitCodeThread
GetExitCodeProcess
CreateProcessW
MapViewOfFile
CreateFileMappingA
GetTickCount
MoveFileA
LocalFree
FindFirstFileA
FindClose
DeleteFileA
FindNextFileA
RemoveDirectoryA
GetTempPathA
GetWindowsDirectoryA
CreateFileA
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
GetSystemInfo
GetVersionExA
GetLastError
GetModuleHandleA
GetProcAddress
GetCurrentProcess
GetSystemDirectoryA
SetEvent
FreeLibrary
GetCurrentProcessId
LocalReAlloc
CreateMutexA
CreateEventA

user32

FindWindowA
EnumWindows
SetForegroundWindow
SendMessageCallbackA
PeekMessageA
GetWindowThreadProcessId
IsWindowVisible
GetParent
GetWindowTextA

advapi32

OpenThreadToken
RegOpenKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
OpenProcessToken
DuplicateToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
FreeSid
RegDeleteValueA
QueryServiceStatus
RegQueryInfoKeyA

msvcrt

_local_unwind2
strstr
_mbscmp
_mbsnbicmp
wcscpy
free
malloc
isdigit
fclose
fread
fseek
_mkdir
getenv
_wfopen
_wremove
_wstat
_wfindfirst
_wfindnext
ftell
fwrite
div
wcslen
memset
_wcsicmp
strcat
strcpy
_initterm
_adjust_fdiv
__dllonexit
_onexit
vsprintf
atol
strrchr
sprintf
_findclose
atoi
_except_handler3
_findfirst
_stat
_unlink
fopen
fgets
strchr
_stricmp

Exports

Exports

haspds_ExitProcess
haspds_GetClientProcess
haspds_GetInfo
haspds_GetLastError
haspds_GetLastErrorMessage
haspds_GetLastError_Ex
haspds_GetVendorInfo
haspds_GetVersion
haspds_Install
haspds_KillClientProcess
haspds_SetParameter
haspds_UnInstall

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/msxml2.dll
.dll regsvr32 windows:5 windows x86 arch:x86

fd3e97d1a321f0144f165f7ba65a857f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

GetHGlobalFromStream
StringFromCLSID
CoTaskMemAlloc
CreateBindCtx
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
CLSIDFromProgID
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoCreateInstance

shlwapi

ord117
ord56
ord136
ord60
ord116
PathFindExtensionW
UrlCanonicalizeW
ord2
PathFindFileNameW
ord15
ord311
ord310
ord125
ord128
StrCatW
ord26
StrCmpNIA
PathIsURLW
UrlUnescapeW
PathSearchAndQualifyW
UrlCreateFromPathW
PathCreateFromUrlW
UrlIsW
ord52
StrCpyW
ord68
StrToIntW
StrCmpNIW
ord45
StrCmpNW
ord43
ord38
ord51
ord83
StrCmpW
ord115

kernel32

SuspendThread
LocalAlloc
VirtualProtect
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
HeapReAlloc
GetOEMCP
GetACP
VirtualQuery
RtlUnwind
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
ExitProcess
GetCommandLineA
CreateThread
SetThreadPriority
CreateEventA
GlobalAlloc
lstrcatW
GlobalLock
GlobalUnlock
GetSystemDefaultLCID
GetThreadLocale
SetEndOfFile
lstrcpyA
lstrlenA
GetProcAddress
LoadLibraryA
FreeLibrary
lstrcatA
MultiByteToWideChar
lstrcmpA
ExpandEnvironmentStringsA
GetModuleFileNameA
TlsSetValue
TlsGetValue
TerminateProcess
GetCurrentProcess
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedDecrement
InterlockedIncrement
lstrlenW
HeapFree
HeapSize
HeapAlloc
VirtualFree
VirtualAlloc
GetProcessHeap
DuplicateHandle
GetCurrentThread
CloseHandle
GetVersionExA
TlsAlloc
TlsFree
GetThreadContext
InterlockedExchange
Sleep
WaitForSingleObject
ResumeThread
SetEvent
ResetEvent
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
ReleaseSemaphore
DeleteCriticalSection
CreateSemaphoreA
InitializeCriticalSection
HeapDestroy
GetLastError
HeapCreate
GetSystemInfo
SetLastError
DebugBreak
RaiseException
WideCharToMultiByte
GetFullPathNameA
SizeofResource
LockResource
LoadResource
FindResourceA
LoadLibraryExA
FormatMessageA
FileTimeToSystemTime
SystemTimeToFileTime
GetCPInfo
WriteFile
GetFileType
SetFilePointer
CreateFileA
FlushFileBuffers
ReadFile

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 513KB - Virtual size: 513KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/normen.dat
Bindu Software/Colorlab/paint.unt
Bindu Software/Colorlab/parser.dll
.dll regsvr32 windows:4 windows x86 arch:x86

6f80f59168b01053b649c2d2c656a5cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaVarIndexStore
__vbaRaiseEvent
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaVarIndexLoad
__vbaBoolVar
__vbaRefVarAry
_CIsin
ord631
__vbaErase
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaI2I4
DllFunctionCall
__vbaLbound
_adj_fpatan
__vbaR4Var
__vbaRedim
EVENT_SINK_Release
ord601
_CIsqrt
__vbaRedimVar
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
__vbaFPException
__vbaVarCat
__vbaI2Var
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
ord572
_adj_fdivr_m32i
__vbaStrCopy
ord681
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord101
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaVarDup
__vbaStrToAnsi
__vbaVarCopy
_CIatan
__vbaStrMove
ord618
_allmul
_CItan
_CIexp
__vbaFreeStr

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/readme.txt
Bindu Software/Colorlab/regression_dll.dll
.dll windows:4 windows x86 arch:x86

61ee2fecc05d62c82bdccb9ca9cdf0e1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
RtlUnwind

Exports

Exports

?Initt@@YGXXZ
?RegValc@@YGNN@Z
?XYAddc@@YGXNN@Z
?setDegreec@@YGXJ@Z

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/regsvr32.exe
.exe windows:6 windows x86 arch:x86

a2dad36bd73280726da578eb659d0583

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

regsvr32.pdb

Imports

advapi32

RegQueryValueW
RegOpenKeyExW
RegCloseKey

kernel32

ReadFile
CreateFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
Wow64EnableWow64FsRedirection
GetSystemDirectoryW
GetNativeSystemInfo
IsWow64Process
GetCurrentProcess
GetCommandLineW
lstrlenW
GetProcAddress
GetModuleHandleW
GetLastError
FreeLibrary
SetFilePointer
LoadLibraryExW
WideCharToMultiByte
SetErrorMode
FormatMessageW
LocalAlloc
HeapSetInformation
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
UnhandledExceptionFilter
InterlockedExchange
CloseHandle
lstrcmpW

user32

CharNextW
LoadStringW

msvcrt

_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_wcmdln
_except_handler4_common
_controlfp
exit
?terminate@@YAXXZ
__argc
_XcptFilter
wcsncpy_s
memset
_exit
_cexit
__wgetmainargs
__wargv
strcat_s
swprintf_s
_wsplitpath_s
wcscat_s
wcscpy_s

ole32

OleUninitialize
OleInitialize

ntdll

NtSetInformationProcess
RtlImageNtHeader

comctl32

ord344

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 694B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/rgbdatf.dat
Bindu Software/Colorlab/standard.gls
Bindu Software/Colorlab/usbiocom2.dll
.dll regsvr32 windows:4 windows x86 arch:x86

4d2c2052ad14b407120e96eb245f6e96

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiEnumDeviceInterfaces

kernel32

InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
DisableThreadLibraryCalls
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrcpynA
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
HeapDestroy
DeleteCriticalSection
lstrcpyA
lstrcatA
CreateEventA
CloseHandle
ResetEvent
SetEvent
WaitForMultipleObjects
SetThreadPriority
WaitForSingleObject
InterlockedExchange
CreateFileA
GetOverlappedResult
DeviceIoControl
ReadFile
WriteFile
GetModuleFileNameA
GetModuleHandleA
lstrlenA
MultiByteToWideChar
GetShortPathNameA
lstrlenW
lstrcmpiA
IsDBCSLeadByte
CreateThread
ExitProcess
TerminateProcess
FlushFileBuffers
GetStringTypeW
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetFilePointer
TlsSetValue
GetCurrentThreadId
GetACP
GetOEMCP
UnhandledExceptionFilter
HeapSize
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
RtlUnwind
SetUnhandledExceptionFilter
GetCPInfo
GetCurrentProcess
TlsFree
HeapCreate
VirtualFree
ExitThread
GetEnvironmentVariableA
GetVersionExA
VirtualAlloc
IsBadWritePtr
TlsAlloc

user32

CharNextA
ShowWindow
DefWindowProcA
RegisterClassExA
LoadCursorA
TranslateMessage
UnregisterClassA
DispatchMessageA
GetMessageA
RegisterDeviceNotificationA
CreateWindowExA
UnregisterDeviceNotification
PostMessageA
UpdateWindow

advapi32

RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA

ole32

CLSIDFromString
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

SysStringLen
SafeArrayGetDim
SafeArrayGetElemsize
VariantClear
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringLen
LoadTypeLi
SysAllocString
VarUI4FromStr
LoadRegTypeLi
RegisterTypeLi
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/utility.dll
.dll windows:4 windows x86 arch:x86

f77f395720bad9aa8da4670d70e8f544

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedIncrement
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InterlockedDecrement
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
RtlUnwind

Exports

Exports

?CalculateIndex@@YGMJJPAM@Z
?ConvertMonochrome@@YGXJJPAM@Z
?ConvertScale@@YGXJJPAM@Z
?ltos@@YGIPAJPAD@Z
?stol@@YGIPADPAJ@Z
?stou@@YGIPADPAJ@Z
?utos@@YGIPAJPAD@Z

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab/x2d200.dll
.dll windows:4 windows x86 arch:x86

9c98b16df912756b58155ab9c05bb3b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
Sleep
GetCommandLineA
RaiseException
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetACP
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetHandleCount
GetStdHandle
HeapSize
HeapReAlloc
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
GetLocaleInfoW
GlobalDeleteAtom
GlobalLock
GlobalUnlock
GetModuleHandleA
GetProcAddress
SetLastError
lstrcpynA
IsBadWritePtr
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GetStartupInfoA
FreeEnvironmentStringsA
lstrcpyA
GetLocaleInfoA
TlsFree
GlobalReAlloc
IsBadReadPtr
LeaveCriticalSection
DeleteCriticalSection
GlobalHandle
GlobalFree
LocalAlloc
TlsAlloc
InitializeCriticalSection
lstrcmpA
CloseHandle
GlobalAlloc
GetCurrentThread
GetLastError
WideCharToMultiByte
LocalFree
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
InterlockedIncrement
FreeLibrary
InterlockedDecrement
LoadLibraryA
GetCurrentThreadId
GetVersion
lstrcatA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpiA
FreeEnvironmentStringsW
GlobalFindAtomA
GetEnvironmentStrings
GetFileType
MulDiv

user32

PeekMessageA
PostMessageA
SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
PostQuitMessage
SetCursor
GetCursorPos
ValidateRect
GetActiveWindow
TranslateMessage
GetMessageA
UnregisterClassA
GetClassNameA
GetSysColorBrush
DestroyMenu
LoadStringA
SetFocus
AdjustWindowRectEx
IsWindowVisible
DispatchMessageA
MapWindowPoints
GetParent
GetFocus
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
EndPaint
BeginPaint
ReleaseDC
ClientToScreen
FrameRect
IsRectEmpty
IsIconic
DrawIcon
FillRect
SetRect
SendMessageA
LoadCursorA
CopyRect
OffsetRect
GetSysColor
PtInRect
wsprintfA
GetClientRect
SetRectEmpty
UpdateWindow
EnableWindow
GetKeyState
GetTopWindow
MessageBoxA
GetCapture
LoadIconA
GrayStringA
DrawTextA
TabbedTextOutA
InvalidateRect
GetDC
GetMessageTime
RemovePropA
UnhookWindowsHookEx

gdi32

CreateCompatibleDC
CreateBrushIndirect
PtVisible
Arc
TextOutA
ExtTextOutA
RectVisible
GetTextExtentPoint32A
GetDeviceCaps
Escape
Rectangle
CreateSolidBrush
CreateFontIndirectA
CreateRectRgnIndirect
GetObjectA
GetTextMetricsA
CreateCompatibleBitmap
Ellipse
BitBlt
DeleteDC
Polygon
RestoreDC
SelectObject
SaveDC
SetBkColor
GetStockObject
SetROP2
SetBkMode
SetTextColor
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
CreatePenIndirect
SelectClipRgn
MoveToEx
LineTo
SetTextAlign
DeleteObject
CreatePen
CreateBitmap
ScaleWindowExtEx
GetClipBox
SetWindowExtEx

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA

comctl32

ord17

Exports

Exports

XygAddCIE94Tolerance
XygAddCMCTolerance
XygAddDeltaETolerance
XygAddLCHTolerance
XygAddLabTolerance
XygAddLineAdornment
XygAddNormalDistributionAdornment
XygAddPoint
XygAddRectangleAdornment
XygAddUserAdornment
XygAddUserTick
XygCalculatePointCoordinate
XygCreateGraph
XygDelAdornment
XygDelAllAdornments
XygDelAllPoints
XygDelAllTolerances
XygDelSeriesPoints
XygDelUserTicks
XygGetAxisLabel
XygGetAxisStyle
XygGetAxisView
XygGetBarOrientation
XygGetBarWidth
XygGetCurrentPoint
XygGetGraphFooter
XygGetGraphHeader
XygGetGraphHwnd
XygGetGraphRect
XygGetGraphType
XygGetLogfont
XygGetMajorTickSize
XygGetMinorTickSize
XygGetPoint
XygGetPointColor
XygGetRelativeOrigin
XygGetSeriesColor
XygGetSeriesMarker
XygGetSeriesMarkerSize
XygGetSeriesStyle
XygGetShadowSize
XygRenderGraph
XygSetAxisColor
XygSetAxisLabel
XygSetAxisMajorTickInc
XygSetAxisNumMinorTicks
XygSetAxisStyle
XygSetAxisTickFormat
XygSetAxisView
XygSetAxisViewMin
XygSetBackgroundBrush
XygSetBarOrientation
XygSetBarWidth
XygSetCurrentPoint
XygSetGraphBorder
XygSetGraphFooter
XygSetGraphHeader
XygSetGraphRect
XygSetGraphRectBorderColor
XygSetGraphRectColor
XygSetGraphShadow
XygSetGraphShadowColor
XygSetGraphWndColor
XygSetHueAngleLineColor
XygSetLogfont
XygSetMajorTickSize
XygSetMinorTickSize
XygSetMonochromeMode
XygSetPointColor
XygSetPointHiLoOfs
XygSetPointMarker
XygSetRelativeOrigin
XygSetSeriesBarStyle
XygSetSeriesColor
XygSetSeriesLineStyle
XygSetSeriesLineWidth
XygSetSeriesMarker
XygSetSeriesMarkerSize
XygSetSeriesStyle
XygSetShadowSize
XygSetTextColor
XygSetViewRectBorderColor
XygSetViewRectColor
XygSetViewShadow
XygSetViewToData

Sections

.text
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/Colorlab_Read_Me.pdf
.pdf
Bindu Software/HASPUserSetup_7_80.exe
.exe windows:5 windows x86 arch:x86

26d454e40163dad18a05dcda5483e039

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:19:03:ac:ad:f9:53:6f:b0:43:22:4f:86:a7:db:05
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/06/2016, 00:00

Not After

26/08/2019, 12:00

Subject

SERIALNUMBER=1897511,CN=SafeNet Canada\, Inc.,O=SafeNet Canada\, Inc.,POSTALCODE=K2E 7M6,STREET=Suite 200+STREET=20 Colonnade Road,L=Ottawa,ST=Ontario,C=CA,1.3.6.1.4.1.311.60.2.1.3=#13024341,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

41:77:e0:7c:af:22:03:0e:73:18:ec:20:8d:75:73:b3:e2:78:ac:50
Signer

Actual PE Digest

41:77:e0:7c:af:22:03:0e:73:18:ec:20:8d:75:73:b3:e2:78:ac:50

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\CodeBases\isdev\src\Runtime\MSI\Shared\Setup\Setup___Win32_Release_Unicode\setup.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

comctl32

ord17

kernel32

SizeofResource
LoadResource
FindResourceW
GlobalUnlock
GlobalLock
GlobalFree
GetTickCount
GetExitCodeThread
CreateThread
CopyFileW
InterlockedIncrement
GetVersionExW
CompareStringA
CompareStringW
CreateEventW
InterlockedDecrement
QueryPerformanceFrequency
lstrcatW
GetTempFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
GetSystemDefaultLangID
GetUserDefaultLangID
lstrcmpW
lstrcmpiW
VerLanguageNameW
FindClose
FindNextFileW
CompareFileTime
FindFirstFileW
MoveFileW
GetPrivateProfileStringW
CreateDirectoryW
SetFileAttributesW
GetSystemTimeAsFileTime
LocalFree
FormatMessageW
GetSystemInfo
MulDiv
RaiseException
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
GetModuleHandleW
GetVersion
GetLocalTime
IsValidLocale
GetFileAttributesW
GetCommandLineW
lstrcpyA
VirtualQuery
IsBadReadPtr
FlushFileBuffers
SetEndOfFile
GetDriveTypeW
GetLocaleInfoW
GetCurrentThread
GetDiskFreeSpaceW
GetExitCodeProcess
LocalAlloc
InterlockedExchange
GlobalAlloc
SetStdHandle
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
LCMapStringA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
SetThreadContext
GetStringTypeA
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapDestroy
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
FatalAppExitA
GetModuleHandleA
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
lstrcpynA
lstrcmpA
SearchPathW
VirtualProtect
lstrlenW
SystemTimeToFileTime
QueryPerformanceCounter
SetEvent
ResetEvent
GetCurrentProcessId
GetEnvironmentVariableW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetDateFormatW
GetTimeFormatW
GetCurrentDirectoryW
FindResourceExW
GetFileTime
SetFileTime
LockResource
ExpandEnvironmentStringsW
GetTempPathW
SetErrorMode
GetWindowsDirectoryW
lstrcpyW
GetSystemDirectoryW
SetCurrentDirectoryW
CreateProcessW
WaitForSingleObject
DeleteFileW
RemoveDirectoryW
Sleep
ExitProcess
GetCurrentProcess
DuplicateHandle
TerminateProcess
MoveFileExW
GetThreadContext
VirtualProtectEx
WriteProcessMemory
GetModuleFileNameW
FlushInstructionCache
lstrcpynW
GetProcessHeap
HeapAlloc
HeapFree
WriteFile
ReadFile
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
lstrlenA
GetLastError
SetLastError
GetStringTypeW
ResumeThread
SetEnvironmentVariableA
OpenProcess
GetProcessTimes
CreateFileA
WriteConsoleW
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP

user32

ExitWindowsEx
CharUpperW
wvsprintfW
SendDlgItemMessageW
CharPrevW
LoadImageW
CreateDialogParamW
MoveWindow
SetCursor
GetDlgItemTextW
GetWindow
SetFocus
EnableWindow
SetDlgItemTextW
SetForegroundWindow
SetActiveWindow
GetDC
FillRect
GetSysColor
GetSysColorBrush
SendMessageW
IsDialogMessageW
GetWindowRect
GetSystemMetrics
SetRect
FindWindowW
IntersectRect
SubtractRect
IsWindow
DestroyWindow
CreateDialogIndirectParamW
CharNextW
MessageBoxW
WaitForInputIdle
GetWindowLongW
SetWindowLongW
GetClientRect
ClientToScreen
SetWindowPos
GetWindowDC
ReleaseDC
EndPaint
BeginPaint
EndDialog
SetWindowTextW
GetDlgItem
ShowWindow
DialogBoxIndirectParamW
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageW
wsprintfW
LoadIconW
LoadCursorW
RegisterClassW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
PostMessageW
KillTimer
PostQuitMessage
SetTimer
GetDlgCtrlID

gdi32

GetDIBColorTable
GetSystemPaletteEntries
CreatePalette
CreateHalftonePalette
UnrealizeObject
SelectPalette
RealizePalette
CreateFontW
SetBkMode
SetTextColor
GetObjectW
GetDeviceCaps
CreateFontIndirectW
CreateSolidBrush
CreateCompatibleDC
SelectObject
BitBlt
CreateDIBitmap
DeleteDC
DeleteObject
GetStockObject
TranslateCharsetInfo

advapi32

RegEnumKeyW
RegCreateKeyW
LookupPrivilegeValueW
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
AdjustTokenPrivileges
RegOpenKeyW

shell32

SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
ShellExecuteW
CommandLineToArgvW
SHBrowseForFolderW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CLSIDFromProgID
CoInitialize
CoCreateGuid
CreateItemMoniker
GetRunningObjectTable
StringFromGUID2
ProgIDFromCLSID
CoUninitialize
CoInitializeSecurity
CoCreateInstance

oleaut32

VariantClear
GetErrorInfo
VarUI4FromStr
SystemTimeToVariantTime
CreateErrorInfo
VarBstrFromDate
SysStringByteLen
LoadTypeLi
RegisterTypeLi
SetErrorInfo
VariantChangeType
SysFreeString
SysAllocStringLen
SysReAllocStringLen
SysStringLen
VarBstrCat
SysAllocString
SysAllocStringByteLen

rpcrt4

UuidToStringW
RpcStringFreeW
UuidFromStringW
UuidCreate

Sections

.text
Size: 699KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Bindu Software/HASPUserSetup_8_15.exe
.exe windows:5 windows x86 arch:x86

fd98317ee4955ba02e0bbaaaf8eabd77

Code Sign

01:a0:a8:e5:5a:b3:cf:24:af:81:5e:b5:cd:cc:63:1a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/07/2020, 00:00

Not After

02/03/2021, 12:00

Subject

SERIALNUMBER=2177038,CN=Thales DIS CPL USA\, Inc.,O=Thales DIS CPL USA\, Inc.,L=Belcamp,ST=Maryland,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:20:07:0e:11:1f:a3:b9:ec:48:fb:d5:e5:a0:d9:b9:21:cc:16:ec:72:2b:34:7b:87:97:f3:44:27:4a:88:10
Signer

Actual PE Digest

79:20:07:0e:11:1f:a3:b9:ec:48:fb:d5:e5:a0:d9:b9:21:cc:16:ec:72:2b:34:7b:87:97:f3:44:27:4a:88:10

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\CodeBases\isdev\redist\Language Independent\i386\setup.pdb

Imports

comctl32

ord17

kernel32

LoadLibraryW
lstrcmpW
lstrcmpiW
GetSystemDefaultLangID
GetUserDefaultLangID
VerLanguageNameW
CompareFileTime
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
SetFileAttributesW
GetSystemTimeAsFileTime
GetPrivateProfileStringW
MoveFileW
LocalFree
FormatMessageW
GetSystemInfo
MulDiv
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryExW
GetVersion
GetLocalTime
IsValidLocale
GetCommandLineW
GetFileAttributesW
GlobalAlloc
GlobalFree
FlushFileBuffers
VirtualQuery
IsBadReadPtr
GetDiskFreeSpaceExW
GetDriveTypeW
GetExitCodeProcess
GetCurrentThread
GetLocaleInfoW
InterlockedExchange
LoadLibraryExA
GetModuleHandleW
GetProcAddress
GetSystemDirectoryA
LoadLibraryA
GetLastError
SetLastError
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
ReadFile
SetFilePointer
WriteFile
HeapAlloc
lstrcmpA
SystemTimeToFileTime
ResetEvent
SetEvent
FindResourceExW
OpenProcess
GetProcessTimes
ReadConsoleW
WriteConsoleW
SetStdHandle
GetCurrentDirectoryW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetTimeFormatW
GetDateFormatW
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
HeapReAlloc
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeLibrary
CompareStringA
CompareStringW
lstrcatW
GetVersionExW
InterlockedDecrement
InterlockedIncrement
CreateEventW
QueryPerformanceFrequency
GetTempFileNameW
CopyFileW
GetTickCount
GetExitCodeThread
CreateThread
FindResourceW
GlobalUnlock
GlobalLock
SizeofResource
LockResource
LoadResource
lstrcpyW
SetErrorMode
GetTempPathW
ExpandEnvironmentStringsW
MoveFileExW
WriteProcessMemory
VirtualProtectEx
GetWindowsDirectoryW
GetSystemDirectoryW
FlushInstructionCache
SetThreadContext
GetThreadContext
CreateProcessW
ResumeThread
TerminateProcess
ExitProcess
GetCurrentProcess
Sleep
WaitForSingleObject
DuplicateHandle
RemoveDirectoryW
DeleteFileW
SetCurrentDirectoryW
lstrlenW
lstrcpynW
GetModuleFileNameW
GetProcessHeap
HeapFree
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetCurrentThreadId
HeapSize
GetModuleHandleExW
GetStdHandle
GetFullPathNameW
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
LCMapStringW
DecodePointer
EncodePointer

user32

DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
RegisterClassW
PostQuitMessage
CharPrevW
SendDlgItemMessageW
wvsprintfW
LoadImageW
CreateDialogParamW
MoveWindow
SetCursor
GetWindow
GetDlgItemTextW
SetFocus
EnableWindow
SetForegroundWindow
SetActiveWindow
SetDlgItemTextW
IsDialogMessageW
FindWindowW
SubtractRect
IntersectRect
SetRect
FillRect
GetSysColorBrush
GetSysColor
GetWindowRect
GetDC
GetSystemMetrics
GetDlgCtrlID
CreateDialogIndirectParamW
DestroyWindow
IsWindow
SendMessageW
MessageBoxW
CharNextW
WaitForInputIdle
SetWindowLongW
GetWindowLongW
GetClientRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
SetWindowPos
SetWindowTextW
GetDlgItem
ExitWindowsEx
CharUpperW
EndDialog
DialogBoxIndirectParamW
ShowWindow
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageW
wsprintfW
LoadIconW
LoadCursorW
KillTimer
SetTimer
CreateWindowExW

gdi32

TranslateCharsetInfo
UnrealizeObject
CreateHalftonePalette
GetDIBColorTable
SelectPalette
RealizePalette
GetSystemPaletteEntries
CreatePalette
CreateFontW
GetObjectW
SetTextColor
SetBkMode
GetDeviceCaps
CreateSolidBrush
CreateFontIndirectW
SetStretchBltMode
StretchBlt
SelectObject
DeleteDC
CreateDIBitmap
CreateCompatibleDC
BitBlt
DeleteObject
GetStockObject

advapi32

GetTokenInformation
RegOpenKeyExW
RegOpenKeyW
RegOverridePredefKey
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
FreeSid
EqualSid
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
SetEntriesInAclW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CreateWellKnownSid
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExW
RegEnumValueW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW

shell32

SHGetMalloc
ShellExecuteExW
SHGetPathFromIDListW
SHGetFolderPathW
SHBrowseForFolderW
ShellExecuteW
CommandLineToArgvW

ole32

CoCreateInstance
CoCreateGuid
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoInitializeSecurity
CoUninitialize

oleaut32

UnRegisterTypeLi
RegisterTypeLi
SysAllocStringLen
SysFreeString
SysReAllocStringLen
SysStringLen
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VarBstrCat
VarBstrFromDate
VariantClear
VariantChangeType
GetErrorInfo
VarUI4FromStr
SystemTimeToVariantTime
LoadTypeLi

shlwapi

PathFileExistsW

rpcrt4

RpcStringFreeW
UuidCreate
UuidToStringW

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/HASPUserSetup_8_53.exe
.exe windows:5 windows x86 arch:x86

fd98317ee4955ba02e0bbaaaf8eabd77

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:b1:28:b9:01:7a:fc:bb:23:ac:2c:eb:8c:a5:27:2e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

22/02/2022, 00:00

Not After

06/04/2023, 23:59

Subject

SERIALNUMBER=2177038,CN=Thales DIS CPL USA\, Inc.,OU=Security Team,O=Thales DIS CPL USA\, Inc.,L=Austin,ST=Texas,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e8:56:21:2a:c0:80:98:4a:cd:c5:ce:3a:b6:14:fe:b1:3a:03:ec:23:33:95:f6:5e:88:ec:04:c1:fd:90:58:06
Signer

Actual PE Digest

e8:56:21:2a:c0:80:98:4a:cd:c5:ce:3a:b6:14:fe:b1:3a:03:ec:23:33:95:f6:5e:88:ec:04:c1:fd:90:58:06

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\CodeBases\isdev\redist\Language Independent\i386\setup.pdb

Imports

comctl32

ord17

kernel32

LoadLibraryW
lstrcmpW
lstrcmpiW
GetSystemDefaultLangID
GetUserDefaultLangID
VerLanguageNameW
CompareFileTime
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
SetFileAttributesW
GetSystemTimeAsFileTime
GetPrivateProfileStringW
MoveFileW
LocalFree
FormatMessageW
GetSystemInfo
MulDiv
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryExW
GetVersion
GetLocalTime
IsValidLocale
GetCommandLineW
GetFileAttributesW
GlobalAlloc
GlobalFree
FlushFileBuffers
VirtualQuery
IsBadReadPtr
GetDiskFreeSpaceExW
GetDriveTypeW
GetExitCodeProcess
GetCurrentThread
GetLocaleInfoW
InterlockedExchange
LoadLibraryExA
GetModuleHandleW
GetProcAddress
GetSystemDirectoryA
LoadLibraryA
GetLastError
SetLastError
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
ReadFile
SetFilePointer
WriteFile
HeapAlloc
lstrcmpA
SystemTimeToFileTime
ResetEvent
SetEvent
FindResourceExW
OpenProcess
GetProcessTimes
ReadConsoleW
WriteConsoleW
SetStdHandle
GetCurrentDirectoryW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetTimeFormatW
GetDateFormatW
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
HeapReAlloc
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeLibrary
CompareStringA
CompareStringW
lstrcatW
GetVersionExW
InterlockedDecrement
InterlockedIncrement
CreateEventW
QueryPerformanceFrequency
GetTempFileNameW
CopyFileW
GetTickCount
GetExitCodeThread
CreateThread
FindResourceW
GlobalUnlock
GlobalLock
SizeofResource
LockResource
LoadResource
lstrcpyW
SetErrorMode
GetTempPathW
ExpandEnvironmentStringsW
MoveFileExW
WriteProcessMemory
VirtualProtectEx
GetWindowsDirectoryW
GetSystemDirectoryW
FlushInstructionCache
SetThreadContext
GetThreadContext
CreateProcessW
ResumeThread
TerminateProcess
ExitProcess
GetCurrentProcess
Sleep
WaitForSingleObject
DuplicateHandle
RemoveDirectoryW
DeleteFileW
SetCurrentDirectoryW
lstrlenW
lstrcpynW
GetModuleFileNameW
GetProcessHeap
HeapFree
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetCurrentThreadId
HeapSize
GetModuleHandleExW
GetStdHandle
GetFullPathNameW
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
LCMapStringW
DecodePointer
EncodePointer

user32

DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
RegisterClassW
PostQuitMessage
CharPrevW
SendDlgItemMessageW
wvsprintfW
LoadImageW
CreateDialogParamW
MoveWindow
SetCursor
GetWindow
GetDlgItemTextW
SetFocus
EnableWindow
SetForegroundWindow
SetActiveWindow
SetDlgItemTextW
IsDialogMessageW
FindWindowW
SubtractRect
IntersectRect
SetRect
FillRect
GetSysColorBrush
GetSysColor
GetWindowRect
GetDC
GetSystemMetrics
GetDlgCtrlID
CreateDialogIndirectParamW
DestroyWindow
IsWindow
SendMessageW
MessageBoxW
CharNextW
WaitForInputIdle
SetWindowLongW
GetWindowLongW
GetClientRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
SetWindowPos
SetWindowTextW
GetDlgItem
ExitWindowsEx
CharUpperW
EndDialog
DialogBoxIndirectParamW
ShowWindow
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageW
wsprintfW
LoadIconW
LoadCursorW
KillTimer
SetTimer
CreateWindowExW

gdi32

TranslateCharsetInfo
UnrealizeObject
CreateHalftonePalette
GetDIBColorTable
SelectPalette
RealizePalette
GetSystemPaletteEntries
CreatePalette
CreateFontW
GetObjectW
SetTextColor
SetBkMode
GetDeviceCaps
CreateSolidBrush
CreateFontIndirectW
SetStretchBltMode
StretchBlt
SelectObject
DeleteDC
CreateDIBitmap
CreateCompatibleDC
BitBlt
DeleteObject
GetStockObject

advapi32

GetTokenInformation
RegOpenKeyExW
RegOpenKeyW
RegOverridePredefKey
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
FreeSid
EqualSid
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
SetEntriesInAclW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CreateWellKnownSid
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExW
RegEnumValueW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW

shell32

SHGetMalloc
ShellExecuteExW
SHGetPathFromIDListW
SHGetFolderPathW
SHBrowseForFolderW
ShellExecuteW
CommandLineToArgvW

ole32

CoCreateInstance
CoCreateGuid
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoInitializeSecurity
CoUninitialize

oleaut32

UnRegisterTypeLi
RegisterTypeLi
SysAllocStringLen
SysFreeString
SysReAllocStringLen
SysStringLen
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VarBstrCat
VarBstrFromDate
VariantClear
VariantChangeType
GetErrorInfo
VarUI4FromStr
SystemTimeToVariantTime
LoadTypeLi

shlwapi

PathFileExistsW

rpcrt4

RpcStringFreeW
UuidCreate
UuidToStringW

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bindu Software/SETUP.LST
Bindu Software/Setup.ico
Bindu Software/autorun.inf
Bindu Software/setup.exe
.exe windows:4 windows x86 arch:x86

9e36d5e1cceea0330fdd26492ec00ae2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetStockObject
SetTextColor
CreateFontIndirectA
DeleteObject
GetDeviceCaps
SetBkColor
SelectObject
GetTextMetricsA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc

user32

SendMessageA
CreateWindowExA
GetWindowLongA
MessageBoxA
CharNextA
DispatchMessageA
PeekMessageA
PostMessageA
PackDDElParam
DestroyWindow
CharPrevA
UpdateWindow
SetWindowTextA
BeginPaint
GetClientRect
EndPaint
DrawTextA
OffsetRect
IsWindow
PostQuitMessage
FindWindowA
GetSystemMetrics
ShowCursor
GetDC
ShowWindow
MoveWindow
ReleaseDC
BringWindowToTop
GetMessageA
TranslateMessage
LoadCursorA
SetFocus
wvsprintfA
InvalidateRect
LoadIconA
LoadStringA
wsprintfA
ExitWindowsEx
CharUpperA
RegisterClassA
UnpackDDElParam
DefWindowProcA
UnregisterClassA

comdlg32

GetOpenFileNameA

advapi32

AdjustTokenPrivileges
RegEnumKeyExA
OpenProcessToken
RegCloseKey
LookupPrivilegeValueA
RegSetValueExA
RegCreateKeyA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA

ole32

CoUninitialize
OleInitialize
OleUninitialize
CoCreateInstance
CoInitialize

oleaut32

LoadTypeLi
SysAllocStringLen
VariantChangeTypeEx
VariantClear
VariantTimeToDosDateTime
RegisterTypeLi

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
VerInstallFileA

kernel32

Sleep
GlobalFree
GlobalAlloc
SetFilePointer
GetACP
CreateFileA
LCMapStringW
LCMapStringA
GetCPInfo
VirtualAlloc
VirtualFree
GetCurrentProcessId
HeapDestroy
SetStdHandle
HeapCreate
SetHandleCount
SetEndOfFile
GetStdHandle
GetStartupInfoA
GetCommandLineA
GetLocalTime
GetSystemTime
GetCurrentDirectoryA
HeapFree
HeapAlloc
GetTimeZoneInformation
ExitProcess
FileTimeToLocalFileTime
TerminateProcess
GetFileType
FileTimeToSystemTime
GetFileAttributesA
GetVersionExA
GetVersion
GetSystemDirectoryA
DosDateTimeToFileTime
HeapReAlloc
LocalFree
GetWindowsDirectoryA
LocalFileTimeToFileTime
SetFileTime
GetModuleHandleA
GetDriveTypeA
SetErrorMode
LoadLibraryA
GetProcAddress
CreateProcessA
FreeLibrary
FlushFileBuffers
SetEnvironmentVariableA
CompareStringW
GetStringTypeW
GetStringTypeA
RtlUnwind
GetEnvironmentStringsW
GlobalAddAtomA
LocalAlloc
GlobalDeleteAtom
_lclose
GetFileSize
GetPrivateProfileStringA
LocalLock
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetOEMCP
lstrcatA
lstrcpyA
lstrlenA
lstrcmpiA
SetFileAttributesA
CopyFileA
GetModuleFileNameA
OpenFile
FindClose
IsDBCSLeadByte
WriteFile
CloseHandle
FindFirstFileA
_lread
_lwrite
LocalUnlock
DeleteFileA
MoveFileA
GetExitCodeProcess
GetFullPathNameA
lstrcpynA
GlobalUnlock
GlobalLock
GlobalFindAtomA
GetShortPathNameA
MoveFileExA
MultiByteToWideChar
WideCharToMultiByte
CompareStringA
ReadFile
GetTempFileNameA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTempPathA
GetCurrentProcess

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28b659576236be75a4bbcbfa9113e470

Headers

File Characteristics

Imports

ole32

user32

gdi32

kernel32

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 100KB

.data Size: 20KB - Virtual size: 25KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 5KB

5316dd1ba7417f578451f902c4b4f845

Headers

File Characteristics

Imports

ole32

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 972B

.reloc Size: 1024B - Virtual size: 906B

de62eb0090e2f591c9cb423686b9da71

Code Sign

Signer

Headers

File Characteristics

Imports

comctl32

kernel32

user32

ole32

advapi32

oleaut32

gdi32

Exports

Exports

Sections

.text Size: 102KB - Virtual size: 101KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 42KB - Virtual size: 41KB

.reloc Size: 7KB - Virtual size: 7KB

c8cebbf034d8c6304701e5ec3fae70a4

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10Certificate

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1dCertificate

Extended Key Usages

Key Usages

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5cCertificate

Key Usages

Signer

Headers

File Characteristics

Imports

version

comctl32

kernel32

user32

ole32

advapi32

oleaut32

comdlg32

gdi32

Exports

Exports

Sections

.text Size: 331KB - Virtual size: 330KB

.text
Size: 104KB - Virtual size: 100KB

.data
Size: 20KB - Virtual size: 25KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 5KB

.text
Size: 12KB - Virtual size: 12KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 972B

.reloc
Size: 1024B - Virtual size: 906B

.text
Size: 102KB - Virtual size: 101KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 42KB - Virtual size: 41KB

.reloc
Size: 7KB - Virtual size: 7KB

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

.text
Size: 331KB - Virtual size: 330KB

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 224KB - Virtual size: 224KB

.reloc
Size: 24KB - Virtual size: 23KB

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

.text
Size: 69KB - Virtual size: 68KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 51KB - Virtual size: 51KB

.reloc
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 616KB - Virtual size: 615KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 1KB - Virtual size: 5KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 21KB - Virtual size: 20KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 2.7MB - Virtual size: 2.7MB

.data
Size: - Virtual size: 20KB

.rsrc
Size: 204KB - Virtual size: 200KB