4e6875dca7cd0e0f0adf0b442d154e54_JaffaCakes118

resource
unpack001/$PLUGINSDIR/DLLWaitForKillProgram.dll
unpack001/$PLUGINSDIR/FILEDownPlug120308.dll
unpack001/$PLUGINSDIR/FILEDownPlug2.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsProcess.dll
unpack001/DTLiteExe.exe
unpack001/Lang/KOR.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 ad639bb9d966273c305fc59b2f2a661cfb77944cd4aa0c83e3333c65cc13a510
MD5 4e6875dca7cd0e0f0adf0b442d154e54
SHA1 51f2b36729ef9399012e4bcc7491e1a8db97e377
SHA512 8b202299e72db8aa75257924ed6f20e1f857fa734d99881097312410464ea32ea1d458e201261eeaed49456385ee167c1181968b1075414fb7409bf9598b9689
SSDEEP 393216:Z9NG/Al8lpkrA1qrbirvaMAPWm1r54a2JBDr+3ApNer:Z9Upku3rHAPneDK7r
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

6f:6e:d1:5c:df:4b:c7:3a:6f:e6:cc:35:f3:52:4f:db:02:49:5b:85

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=EbizNetWorks,O=EbizNetWorks,L=Gangnam-gu,ST=Seoul,C=KR

Chains

Jun 17, 2016

CN=EbizNetWorks,O=EbizNetWorks,L=Gangnam-gu,ST=Seoul,C=KR

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Minor OS version

0

Major OS version

4

Entry point

12491

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/DLLWaitForKillProgram.dll

IMPHASH 2e92645153848ef99816d61ac6e2a921
SHA256 ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548
MD5 9c4b8ec42d89f7557bfd90798ce52787
SHA1 2376dde426ea65aa27c30e304086310605382475
SHA512 17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7
SSDEEP 96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6176

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

944B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/FILEDownPlug120308.dll

IMPHASH 1b6303fba3c09e3c12e1f0a7f2cc93ca
SHA256 8bd1c61e9be2b8b07f6dac4782a96ee9e679c5f163133a51b57e1ecd72f3eff9
MD5 89c563060d908e5df6848ad15731e6d0
SHA1 404d8d41700ecc907e5b7c849a0dcde8edda1e72
SHA512 8eb86ed92ba4d3305a954d824a1ffc23d9aef02559c794c085f67583f32d8228834b09ad45edfd8a78b4634e62344f53e1106db64134b8dd2c5e0fae391da763
SSDEEP 384:UCpErQTFze4TRt19H9emlJfbyLx/etuFVclW:YkTA4n19H9jbZMKlW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4495

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/FILEDownPlug2.dll

IMPHASH 1b6303fba3c09e3c12e1f0a7f2cc93ca
SHA256 8bd1c61e9be2b8b07f6dac4782a96ee9e679c5f163133a51b57e1ecd72f3eff9
MD5 89c563060d908e5df6848ad15731e6d0
SHA1 404d8d41700ecc907e5b7c849a0dcde8edda1e72
SHA512 8eb86ed92ba4d3305a954d824a1ffc23d9aef02559c794c085f67583f32d8228834b09ad45edfd8a78b4634e62344f53e1106db64134b8dd2c5e0fae391da763
SSDEEP 384:UCpErQTFze4TRt19H9emlJfbyLx/etuFVclW:YkTA4n19H9jbZMKlW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4495

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078
MD5 eef9e469e8a30717974499f277d97e2a
SHA1 2d33c25984ebd9116beeb55cdde4c5c86c023e5d
SHA512 d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48
SSDEEP 192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 4b6da3f2bdb6c452fb493b98f6b7aa1171787dbd3fa2df2b3b22ccaeac88ffa0
MD5 c6f5b9596db45ce43f14b64e0fbcf552
SHA1 665a2207a643726602dc3e845e39435868dddabc
SHA512 8faa0204f9ed2721acede285be843b5a2d7f9986841bcf3816ebc8900910afb590816c64aebd2dd845686daf825bbf9970cb4a08b20a785c7e54542eddc5b09a
SSDEEP 192:qADKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQbVUSF:qAViJrtFRdbmXK8+WVUw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 135105f66687acbdc672d9c079069249e5e1ea4fa86818784337396bc054e31b
MD5 ac65c4d5ad2597c5e0e39f58ca080b98
SHA1 cd01ce15e81eeb3bd00eb2d46725ef8dd7c1c56f
SHA512 a69a238d73b91fc7cb1c4b9dd327409159afe67c7d027dd5f608a1b37ed3fe9529dc7b5012dd15395e0273e8d7f8bbcbec4e0bd026ccd32c02b659585e858e80
SSDEEP 1536:vAHqoZGoWoVqaCzkYg6I5QPmMYQuQtbMU71XGrf0rkEZzlKZVeYFz:vAg3VbMrf0rkEZzcZVeYFz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsProcess.dll

IMPHASH c9fc7f6df8fedf8f8f1f9f820c072664
SHA256 95fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89
MD5 05450face243b3a7472407b999b03a72
SHA1 ffd88af2e338ae606c444390f7eaaf5f4aef2cd9
SHA512 f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4255

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DTCommonRes.dll

IMPHASH 45004ad7f5ca79313ba8d7cee1894f6d
SHA256 948c2971233ea6372d250940c1b6a37681b9cf006d8f833eb71b04d70ba46e12
MD5 f973679126068dd2cc87242a93d0f685
SHA1 476b8395683925f8a08fa5f8c29d9f33e2827efb
SHA512 eafb2d61955c1477e133e799958660a1d1a93c250b0b4aeb8b6d14ec9e11f853220c064ec7c2e55be3acefe4d42690356450ffb8039efc1bb6d899a600abe5ef
SSDEEP 98304:s7ey4x9tgguSkllGCo5NyKNoSEB4Xk3SucbeXVTutFFFdp:sgcICyEB4X5ucgutFFFb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

4b:1b:f9:09:5b:c7:cf:13:32:f3:64:48:d1:7e:b7:08:51:63:69:06

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

Chains

Dec 7, 2015

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Minor OS version

1

Major OS version

5

Entry point

1541110

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\Projects\dtlite5\ui\DTProRes\Win32\Release\DTCommonRes.pdb

comctl32

_TrackMouseEvent ImageList_ReplaceIcon ImageList_AddMasked

user32

BeginPaint GetClientRect SendMessageW EndDialog FrameRect GetActiveWindow EnumWindows SetWindowLongW GetWindowLongW GetSysColorBrush EndPaint DialogBoxParamW SetWindowTextW GetDlgItem ShowWindow CreateWindowExW GetWindowRect ScreenToClient MoveWindow PostMessageW GetDC IsWindowVisible ReleaseDC MessageBoxW EnableWindow SetDlgItemTextW GetParent SetWindowPos CloseClipboard SetClipboardData EmptyClipboard LoadImageW DestroyIcon DrawIconEx LoadIconW SetCursor GetDlgItemTextW SetForegroundWindow OpenClipboard ExitWindowsEx RegisterClassExW IsWindowEnabled RedrawWindow AdjustWindowRect UpdateWindow CheckDlgButton DrawIcon GetWindowRgn DestroyCursor CreateMenu SubtractRect IsClipboardFormatAvailable TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar CharUpperBuffW RegisterClipboardFormatW ModifyMenuW SetMenuDefaultItem CopyIcon GetDoubleClickTime SetClassLongW LockWindowUpdate SetParent SetRect SetCursorPos CopyAcceleratorTableW DestroyAcceleratorTable CreateAcceleratorTableW GetKeyboardState ToUnicodeEx MapVirtualKeyExW IsCharLowerW GetKeyboardLayout WaitMessage PostThreadMessageW IsZoomed GetComboBoxInfo TrackMouseEvent ReuseDDElParam UnpackDDElParam InsertMenuItemW TranslateAcceleratorW LoadAcceleratorsW BringWindowToTop MonitorFromPoint UpdateLayeredWindow IsMenu UnionRect SetWindowRgn DrawFrameControl DrawEdge DrawStateW EnumDisplayMonitors SetLayeredWindowAttributes NotifyWinEvent InvertRect HideCaret EnableScrollBar GetIconInfo IsRectEmpty OffsetRect SetRectEmpty WindowFromPoint GetNextDlgGroupItem GetMenuDefaultItem CreatePopupMenu CharUpperW IsIconic DeleteMenu CopyImage GetMenuItemInfoW DestroyMenu IntersectRect RealChildWindowFromPoint MapDialogRect MapVirtualKeyW GetKeyNameTextW ShowOwnedPopups SendDlgItemMessageA LoadMenuW SetMenuItemInfoW GetMenuCheckMarkDimensions SetFocus LoadCursorW GetWindowTextW GetTopWindow GetWindow GetSystemMenu EnableMenuItem KillTimer SetTimer GetAsyncKeyState GetDlgCtrlID GetFocus CallNextHookEx SetWindowsHookExW UnhookWindowsHookEx GetKeyState GetClassNameW EnumChildWindows RegisterWindowMessageW LoadBitmapW GetSystemMetrics ClientToScreen InvalidateRect DrawTextW GetWindowTextLengthW CreateDialogParamW GetMessageW TranslateMessage DispatchMessageW GetUpdateRect DestroyWindow PostQuitMessage UnregisterClassW CallWindowProcW GetPropW ReleaseCapture InflateRect DrawFocusRect SetPropW PtInRect SetCapture RemovePropW GetCursorPos GetWindowThreadProcessId DefWindowProcW SetMenuItemBitmaps CheckMenuItem WinHelpW GetScrollInfo SetScrollInfo GetClassLongW EqualRect MapWindowPoints AdjustWindowRectEx ShowScrollBar GetScrollRange SetScrollRange GetScrollPos GetSysColor SystemParametersInfoW CopyRect MonitorFromWindow SetScrollPos ScrollWindow ValidateRect GetForegroundWindow TrackPopupMenu SetMenu GetMenu GetCapture EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement IsChild GetClassInfoExW GetClassInfoW RegisterClassW GetMessageTime GetMessagePos PeekMessageW GetLastActivePopup FillRect GetWindowDC TabbedTextOutW GrayStringW GetMonitorInfoW GetDialogBaseUnits DialogBoxIndirectParamW IsWindow DrawTextExW IsDialogMessageW GetMenuStringW GetMenuState GetSubMenu GetMenuItemID GetMenuItemCount InsertMenuW AppendMenuW RemoveMenu CreateDialogIndirectParamW GetNextDlgTabItem SetActiveWindow GetDesktopWindow MessageBeep

kernel32

VerSetConditionMask GlobalLock GlobalUnlock FindClose GetSystemTimeAsFileTime GetSystemInfo GetFileAttributesW VerifyVersionInfoW GetLocaleInfoA GetCurrentThread GetThreadTimes GlobalSize SetLastError OutputDebugStringA FreeResource GetModuleHandleA EncodePointer GetSystemDirectoryW GlobalDeleteAtom lstrcmpW LoadLibraryA GlobalFindAtomW lstrcmpA SetThreadPriority ResumeThread GetPrivateProfileIntW VirtualProtect FileTimeToLocalFileTime GetFileAttributesExW GetFileSizeEx GetFileTime FileTimeToSystemTime TlsAlloc TlsGetValue TlsSetValue TlsFree GlobalReAlloc GlobalHandle LocalAlloc LocalReAlloc SetErrorMode GlobalGetAtomNameW GlobalFlags CompareStringW FlushFileBuffers GetFullPathNameW GetVolumeInformationW LockFile SetEndOfFile SetFilePointer UnlockFile DuplicateHandle lstrcmpiW GetWindowsDirectoryW lstrcpyW GetProfileIntW SearchPathW ExitThread IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA RtlUnwind ExitProcess GetModuleHandleExW HeapQueryInformation VirtualAlloc VirtualQuery SetStdHandle GetFileType IsValidCodePage GetACP GetOEMCP GetCPInfo UnhandledExceptionFilter WritePrivateProfileStringW TerminateProcess GetStartupInfoW GetStringTypeW GetStdHandle GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetTimeZoneInformation LCMapStringW IsValidLocale EnumSystemLocalesW GetConsoleMode ReadConsoleW GetConsoleCP SetFilePointerEx OutputDebugStringW WriteConsoleW SetEnvironmentVariableA MulDiv SystemTimeToFileTime GetSystemTime FlushInstructionCache GetCurrentProcess GetVersionExW GetFileSize GetUserDefaultLCID GetUserDefaultUILanguage GetSystemDefaultUILanguage GlobalAddAtomW DeleteAtom GetLocaleInfoW InterlockedDecrement InterlockedIncrement DecodePointer InitializeCriticalSectionAndSpinCount GetCurrentThreadId FindFirstFileW RaiseException DeleteCriticalSection InitializeCriticalSection CreateFileW CreateDirectoryW DeleteFileW CreateEventA LeaveCriticalSection EnterCriticalSection CopyFileW LocalFree FormatMessageW GetCurrentDirectoryW MoveFileExW GetTempFileNameW GetTempPathW lstrlenW GetLogicalDriveStringsW GetModuleHandleW GetProcAddress LoadLibraryW GetModuleFileNameW DisconnectNamedPipe WriteFile ReadFile GetOverlappedResult WaitForMultipleObjects GetLastError SetEvent ConnectNamedPipe GetCurrentProcessId CreateNamedPipeW Sleep FreeLibrary LoadLibraryExW FindResourceExW GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy CreateThread MultiByteToWideChar WideCharToMultiByte FindResourceW LoadResource LockResource SizeofResource WaitForSingleObject GetTickCount CloseHandle CreateEventW GetPrivateProfileStringW GlobalFree SetUnhandledExceptionFilter GlobalAlloc FormatMessageA ResetEvent ReleaseSemaphore OpenEventA VirtualFree InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead

gdi32

GetTextFaceW GetViewportOrgEx LPtoDP GetWindowOrgEx GetBoundsRect FillRgn SetPaletteEntries ExtFloodFill SetPixelV PtInRegion FrameRgn CreateRoundRectRgn OffsetRgn GetRgnBox Rectangle Polyline Polygon CreatePolygonRgn GetTextColor Ellipse CreateEllipticRgn SetDIBColorTable StretchBlt SetPixel GetTextCharsetInfo EnumFontFamiliesW CreateDIBitmap CreateCompatibleBitmap GetBkColor RealizePalette GetSystemPaletteEntries GetPaletteEntries GetNearestPaletteIndex CreatePalette EnumFontFamiliesExW DPtoLP SetRectRgn CombineRgn GetTextMetricsW PatBlt CreateRectRgnIndirect ScaleWindowExtEx ScaleViewportExtEx OffsetWindowOrgEx OffsetViewportOrgEx SetWindowOrgEx SetWindowExtEx SetViewportOrgEx SetViewportExtEx TextOutW MoveToEx SetTextAlign SetROP2 SetPolyFillMode GetLayout SetLayout SetMapMode SelectPalette ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC RectVisible PtVisible LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetPixel GetObjectType GetClipBox ExcludeClipRect Escape CreateRectRgn CreatePatternBrush CreateHatchBrush CreateCompatibleDC CreateBitmap BitBlt CopyMetaFileW CreateDIBSection SetDIBitsToDevice SetDIBits GetBitmapBits CreatePen CreateSolidBrush DeleteDC CreateDCW RoundRect SetBkColor ExtTextOutW SetTextColor SetBkMode CreateFontIndirectW GetObjectW GetDeviceCaps DeleteObject GetStockObject GetTextExtentPoint32W SelectObject

msimg32

AlphaBlend TransparentBlt

comdlg32

GetSaveFileNameW GetOpenFileNameW

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegDeleteValueW RegSetValueExW RegCloseKey RegEnumValueW RegQueryValueW RegEnumKeyW SetNamedSecurityInfoW SetEntriesInAclW LookupPrivilegeValueW RegOpenKeyExW AllocateAndInitializeSid AdjustTokenPrivileges GetTokenInformation OpenProcessToken RegQueryValueExW RegEnumKeyExW RegDeleteKeyW RegCreateKeyExW

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFolderPathW SHAppBarMessage DragFinish SHGetDesktopFolder SHGetSpecialFolderLocation SHGetFileInfoW ShellExecuteExW ord680 DuplicateIcon ShellExecuteW DragQueryFileW

shlwapi

PathFindFileNameW PathRemoveFileSpecW PathFindExtensionW PathIsUNCW StrFormatKBSizeW PathStripToRootW PathFileExistsW

uxtheme

GetThemePartSize GetWindowTheme GetThemeSysColor IsThemeBackgroundPartiallyTransparent IsAppThemed GetCurrentThemeName DrawThemeText DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor

ole32

RevokeDragDrop RegisterDragDrop OleGetClipboard IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning DoDragDrop CreateStreamOnHGlobal CoDisconnectObject CoInitializeEx ReleaseStgMedium OleDuplicateData CoGetClassObject OleSetContainedObject CoTaskMemAlloc CoTaskMemFree CoCreateInstance CoUninitialize CoInitialize StringFromGUID2 CoCreateGuid CoLockObjectExternal

oleaut32

VarBstrFromDate VariantCopy VariantTimeToSystemTime SystemTimeToVariantTime VariantChangeType VariantInit VariantClear SafeArrayDestroy SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreateVector VarBstrCat LoadTypeLi SysStringByteLen SysAllocStringByteLen VarBstrCmp SysStringLen SysAllocString SysAllocStringLen SysFreeString

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

gdiplus

GdiplusShutdown GdipAlloc GdipFree GdiplusStartup GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipDrawImageRectI GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat

imm32

ImmReleaseContext ImmGetContext ImmGetOpenStatus

winmm

PlaySoundW

??0?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@QAE@XZ ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCRequestSimple@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCRequestSimple@DTNet@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCResponseCommon@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCResponseCommon@DTNet@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51 ??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ@51 ??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@3@XZ@51 ?DevicesListDialog@@YGJPAUHWND__@@KVCComBSTR@ATL@@AAV23@PAUIDaemonProEngine@@PAX@Z ?EditBox@@YGHPAUHWND__@@PB_W1PA_WK2H@Z ?GetComputerNameDialog@@YGHPAUHWND__@@PAUIDaemonProEngine@@PA_WJH@Z ?GetUserNameAndPassword@@YGHPAUHWND__@@PAUIDaemonProEngine@@PA_W2@Z ?IsDeviceInfoShowed@@YGHXZ ?IsDeviceParametersShowed@@YGHXZ ?IsEraseDialogShowed@@YGHXZ ?MessageBoxChecked@@YGIPAUHWND__@@PB_W1PAH@Z ?MessageBoxExt@DTProRes@@YGIPAUHWND__@@PB_W1111IPAUHICON__@@@Z ?ProcessingInProgress@@YGHXZ ?ReleaseDTProResObjects@@YGXXZ ?SelectImageCatalogFolder@@YGHPAUHWND__@@PAUIDaemonProEngine@@PAUITreeItems@@PAPAU3@@Z ?SetInvisibleWaitDialog@@YGX_N@Z ?ShowBurnImageDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PA_WHPAVIAttachedProgress@@2@Z ?ShowConvertImagesDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PA_WPAVIAttachedProgress@@@Z ?ShowCreateTrueCryptDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAX@Z ?ShowCreateVHDDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAX@Z ?ShowCreateWritableROMDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAX@Z ?ShowDeviceInfo@@YGXPAUHWND__@@PAUIPhysicalDevice@@PAUIDeviceInfo@@@Z ?ShowDeviceParameters@@YGHPAUHWND__@@PAUTDeviceParametersDlg@@PAX@Z ?ShowEraseDiskDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAUIPhysicalDevice@@@Z ?ShowGrabDiskDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAUIPhysicalDevice@@PAVIAttachedProgress@@@Z ?SplashSetMessageText@@YGXPA_W@Z ?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCRequestSimple@DTNet@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UCRequestSimple@DTNet@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCResponseCommon@DTNet@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UCResponseCommon@DTNet@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@23@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@23@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@UCRequestSimple@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCRequestSimple@DTNet@@@23@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@UCResponseCommon@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCResponseCommon@DTNet@@@23@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@23@XZ ?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?instance@?$singleton@V?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@23@A ?instance@?$singleton@V?$extended_type_info_typeid@UCRequestSimple@DTNet@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UCRequestSimple@DTNet@@@23@A ?instance@?$singleton@V?$extended_type_info_typeid@UCResponseCommon@DTNet@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UCResponseCommon@DTNet@@@23@A ?instance@?$singleton@V?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@23@A ?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@3@A ?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@3@A ?instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@0AAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@A ?instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@0AAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@A ?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A ?instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@A ?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@3@A ?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@3@A ?is_destroyed@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UCRequestHandShake@DTNet@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCRequestSimple@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCRequestSimple@DTNet@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UCRequestSimple@DTNet@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCResponseCommon@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCResponseCommon@DTNet@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UCResponseCommon@DTNet@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UCResponseHandShake@DTNet@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseCommon@DTNet@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@UCResponseHandShake@DTNet@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@4@XZ@4V?$singleton_wrapper@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@734@A ?t@?1??get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@4@XZ@4V?$singleton_wrapper@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@734@A ?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestHandShake@DTNet@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@UCRequestSimple@DTNet@@@detail@archive@boost@@@634@A CheckForUpdateCommand ShowFileDialogEx ShowInstallationNameDialogCommand ShowLicenseDialogCommand _AboutDialogShow@8 _CheckForUpdateCommandAsync@16 _CheckLicenseCommand@16 _CheckLicenseOwnWaitCommand@16 _CheckSPTDInstallation@20 _SplashHide@0 _SplashShow@4

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

470KB

Virtual Size

470KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

50KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

150KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

DTGadget32.dll

IMPHASH b0d82e80d5509dba479bde88efc70fd7
SHA256 c2c78c4ea56e80bcc00ccdee2914b3cff8acb469dd215206a3b39a779fe3d083
MD5 9d19eebac50b6897d5013eaa7ed39cfa
SHA1 af79e9fc28437fc924d70e0de3f0f80006bf2eda
SHA512 ca1b601e3fd7c2e34763676f1687e64593d90d426b541e6d58d1816a62b34bd6928df722ed5ce0fc65ec39e3f3ad08ba618d1c117a3f1a9bab252435b1852b32
SSDEEP 6144:mqHW8/N8wn0nY3NtF+WqZ6vT0KzZfqqDL60xlkeshE7/92jdOc5:mL8/N8wj3NtaUT0KzZCqn65eLhQdOc5
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

1f:39:84:2a:82:c2:dd:9e:03:8b:2c:d5:b7:72:f7:2c:d8:60:8c:b9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

Chains

Oct 1, 2015

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Minor OS version

0

Major OS version

6

Entry point

170089

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\Projects\dtlite5\ui\Gadget\Release\Win32\DTGadget.pdb

mpr

WNetAddConnection3W

gdi32

GetBitmapBits GetObjectW DeleteObject

wininet

InternetCloseHandle InternetOpenUrlA InternetReadFile HttpQueryInfoA InternetOpenW

kernel32

LeaveCriticalSection GetCurrentProcessId GetModuleFileNameW WaitForSingleObject EncodePointer DecodePointer RaiseException GetLastError InitializeCriticalSectionEx DeleteCriticalSection FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryExW lstrcmpiW GetThreadLocale SetThreadLocale SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW CreateFileW DeleteFileW FindFirstFileW FindNextFileW WriteFile OutputDebugStringW InitializeCriticalSection SetEvent OpenEventW GetPrivateProfileStringW GetCurrentThreadId TerminateThread WideCharToMultiByte VerSetConditionMask HeapDestroy GetCurrentProcess InitializeCriticalSectionAndSpinCount GetSystemTimeAsFileTime EnterCriticalSection VerifyVersionInfoW IsProcessorFeaturePresent GetLocaleInfoA GetUserDefaultLCID WritePrivateProfileStringW Sleep FlushFileBuffers SetStdHandle SetFilePointerEx FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetModuleFileNameA GetFileType GetOEMCP GetACP IsValidCodePage GetConsoleCP GetConsoleMode GetStdHandle GetModuleHandleExW ExitProcess EnumSystemLocalesW IsValidLocale GetLocaleInfoW LCMapStringW CloseHandle WriteConsoleW IsDebuggerPresent GetStringTypeW MultiByteToWideChar FindResourceW SizeofResource LockResource LoadResource FindResourceExW CreateThread GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc RtlUnwind LocalFree GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetCommandLineA

user32

DialogBoxParamW GetDlgItem SetDlgItemTextW SendMessageW CharNextW MessageBoxW EndDialog LoadImageW DestroyIcon GetIconInfo SetWindowTextW SetForegroundWindow GetDlgItemTextW

advapi32

SetEntriesInAclW AllocateAndInitializeSid ConvertStringSecurityDescriptorToSecurityDescriptorW RegQueryValueExW RegDeleteKeyExW SetSecurityDescriptorSacl SetSecurityDescriptorDacl InitializeSecurityDescriptor GetSecurityDescriptorSacl RegSetValueExW RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegCloseKey SetNamedSecurityInfoW

shell32

ShellExecuteExW SHGetFolderPathW ExtractIconExW ShellExecuteW

ole32

CoTaskMemAlloc CoInitialize CoCreateGuid StringFromGUID2 CoCreateInstance CoTaskMemFree CoTaskMemRealloc CoUninitialize

oleaut32

VarBstrCmp LoadTypeLi LoadRegTypeLi VarUI4FromStr RegisterTypeLi UnRegisterTypeLi SysStringByteLen SysAllocStringByteLen SysStringLen SysAllocStringLen SysAllocString VarBstrCat SysFreeString

shlwapi

PathFileExistsW

DTGadget64.dll

IMPHASH c7cf52dbc86d40ad44223d4085deed3b
SHA256 365daf7571d0976fd42f6cea44c08f85ab94705851e770ee7e64d4d95f5b383c
MD5 72f7eae5ff8544f5ed2f8e20f10d8089
SHA1 b3e84f951b1330ba8691e936e436f4e61ce28b41
SHA512 be70f7d1b1e741bd4fec6a4cd670c88365b312d39f8d60868d1414a90e1b99aa7ae243924403774a326e61a9df309dbf06ed9ad9fde60a6f304a5253e3d6cbda
SSDEEP 6144:oFnOxKVA8CQfpHPqnRhRpe/ua0ovvkWKZWlumr+TFApTR+5eqqDL60xlzlfb3gxo:FKVaG5CnJAcovsdzAu57qn6e6x4l
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x64 arch:x64

NSIS installer

installer

Digest

fd:bf:ed:d9:d3:1e:9c:ce:cf:30:19:8f:89:6e:3e:0d:29:09:2e:f9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

Chains

Oct 1, 2015

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Minor OS version

0

Major OS version

6

Entry point

198884

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\Projects\dtlite5\ui\Gadget\Release\x64\DTGadget.pdb

mpr

WNetAddConnection3W

gdi32

DeleteObject GetBitmapBits GetObjectW

wininet

InternetCloseHandle InternetOpenUrlA InternetReadFile HttpQueryInfoA InternetOpenW

kernel32

HeapReAlloc HeapFree HeapSize GetProcessHeap InitializeCriticalSectionAndSpinCount DeleteCriticalSection WaitForSingleObject GetCurrentProcess GetSystemTimeAsFileTime FindResourceExW FreeLibrary GetModuleFileNameW GetModuleHandleW GetProcAddress LoadResource LockResource SizeofResource LocalFree FindResourceW VerifyVersionInfoW MultiByteToWideChar WideCharToMultiByte GetLocaleInfoA GetUserDefaultLCID CreateDirectoryW EnterCriticalSection LeaveCriticalSection GetCurrentProcessId EncodePointer InitializeCriticalSectionEx LoadLibraryExW HeapAlloc GetThreadLocale SetThreadLocale SetCurrentDirectoryW GetCurrentDirectoryW OutputDebugStringW InitializeCriticalSection SetEvent OpenEventW GetPrivateProfileStringW GetCurrentThreadId GetCommandLineA WritePrivateProfileStringW Sleep IsDebuggerPresent WriteConsoleW FlushFileBuffers SetStdHandle SetFilePointerEx FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetModuleFileNameA GetFileType GetConsoleCP GetConsoleMode GetStdHandle GetOEMCP GetACP RtlPcToFileHeader IsValidCodePage GetModuleHandleExW ExitProcess EnumSystemLocalesW IsValidLocale GetLocaleInfoW LCMapStringW VerSetConditionMask RtlLookupFunctionEntry RtlUnwindEx HeapDestroy GetLastError RaiseException CloseHandle DecodePointer WriteFile FindNextFileW FindFirstFileW DeleteFileW lstrcmpiW CreateFileW CreateThread TerminateThread GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind IsProcessorFeaturePresent GetStringTypeW GetCPInfo RtlCaptureContext

user32

SendMessageW GetIconInfo SetWindowTextW SetForegroundWindow GetDlgItemTextW SetDlgItemTextW GetDlgItem EndDialog CharNextW MessageBoxW LoadImageW DestroyIcon DialogBoxParamW

advapi32

RegQueryInfoKeyW RegEnumKeyExW RegDeleteValueW SetNamedSecurityInfoW SetEntriesInAclW ConvertStringSecurityDescriptorToSecurityDescriptorW RegSetValueExW RegQueryValueExW RegOpenKeyExW RegDeleteKeyW RegCreateKeyExW RegCloseKey SetSecurityDescriptorSacl SetSecurityDescriptorDacl InitializeSecurityDescriptor GetSecurityDescriptorSacl AllocateAndInitializeSid RegDeleteKeyExW

ole32

CoTaskMemAlloc CoInitialize CoCreateGuid StringFromGUID2 CoCreateInstance CoTaskMemFree CoTaskMemRealloc CoUninitialize

shell32

ShellExecuteW ShellExecuteExW SHGetFolderPathW ExtractIconExW

oleaut32

VarUI4FromStr RegisterTypeLi UnRegisterTypeLi SysStringByteLen SysAllocStringByteLen VarBstrCat LoadRegTypeLi VarBstrCmp SysStringLen SysFreeString SysAllocStringLen SysAllocString LoadTypeLi

shlwapi

PathFileExistsW

DTHelper.exe

IMPHASH ca82b347ae5257f190f23d5cd502a21d
SHA256 6a0a774fc3dc75b27ff7b9904551e548f11f0a990dd0faa4a44cf7fedc25c768
MD5 1e116630ee6aaf7d608a0fb39cc3a6f5
SHA1 e3fa88af16dfc2f082042e863b739327b5356ed7
SHA512 3064eba59f1573b66bd1c9e19c8f9f50c048fa8ab46347b9e90299fb13c28acffbe812c8aa10422996f48d4126b8846102f8e1941c34720b2b6ae755d0054747
SSDEEP 6144:va31QFNDQ+mP7HFLjAhWE75Ynnet/R4KnM6Y:v9FNDQ+mzljAhdUU54Kny
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

50:e3:f5:29:70:b3:79:c6:c4:3b:b0:ed:a9:28:4d:5a:88:ca:33:d1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

Chains

Dec 4, 2015

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Minor OS version

1

Major OS version

5

Entry point

19045

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\Projects\dtlite5\ui\Helper\Release\DTHelper.pdb

kernel32

DeleteCriticalSection VerSetConditionMask LocalFree GetCurrentProcess FindClose GetSystemTimeAsFileTime FindFirstFileW VerifyVersionInfoW DecodePointer MultiByteToWideChar WideCharToMultiByte WriteConsoleW FlushFileBuffers SetStdHandle LCMapStringW SetFilePointerEx GetConsoleMode GetConsoleCP LoadLibraryExW GetStringTypeW GetCPInfo GetOEMCP GetACP IsValidCodePage GetLastError InitializeCriticalSectionAndSpinCount RaiseException FindResourceW FindResourceExW LoadResource LockResource SizeofResource GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy LoadLibraryW GetModuleHandleW WaitForSingleObject GetModuleFileNameW WriteFile CloseHandle DisconnectNamedPipe ReadFile CreateFileW WaitNamedPipeW GetProcAddress TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess Sleep SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW GetFileType GetStdHandle GetCurrentThreadId SetLastError GetModuleHandleExW IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection EncodePointer GetCommandLineW IsProcessorFeaturePresent RtlUnwind ExitProcess

user32

DestroyWindow AllowSetForegroundWindow LoadIconW SendMessageW CreateWindowExW MessageBoxW

advapi32

GetTokenInformation OpenProcessToken RegCloseKey RegSetValueExW RegCreateKeyExW

shell32

ord680 ShellExecuteExW SHChangeNotify

ole32

CoCreateInstance CoInitializeSecurity

oleaut32

SysFreeString

DTLite.gadget

SHA256 12efafcda5e7b6cadec4ce6014553cd90f0dfe6d6650fdc62b3bc316251e27d8
MD5 c18c143b6820826e52a707da12269d57
SHA1 e736dd000f1ea286958163d90a7ca5dfbb1424d4
SHA512 ece1e4729ee153b0697f741e6c94b61a93b064269e4bc43ec7274b557738e81fbdb63174613283c11250921ea8bf19e14faa3e1eb57796f047179a6ffa70385d
SSDEEP 3072:fpwSWcwM5cDvgC+N9NiV2hsrNy8rKAlsLfr0:BX0zrXS4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

gadget.html

SHA256 cda12ce5dc43e497a8178af29640c7ce68c9d705cbff4f8dfb1a6ee88b8c3d92
MD5 4464c90fda3793b1d2a052924f101630
SHA1 6d345ddbee572c72fafe8a2ae38a58ee964b8141
SHA512 786c41e4230e7ddd4c205810f4d2563e226fc0a457349be57a1da2c1cf8b3a57d61d1cf4b25a129973864a11fc785263b61158207b7a0776da002e9b161d0af8
MD5 SHA1 SHA512

NSIS installer

installer

gadget.xml

SHA256 cd93ff7bb2717668d30d0ce4fd8e9783deb9c5f50e5846e86060bbfa20d08f7a
MD5 6a2ab122079e45d2beb17495c0ce7efa
SHA1 10eec91617d7489ffa7abda4ecbf2451f41df5ab
SHA512 ba6c14dfa60acfd7a5b661df78573e8a02f7617a80f0303aa7ba18d5f1a363c4a1af4fb2f1cd82d497a8b5982bb71c782ace9366bafa40394e51828340d9a44b
MD5 SHA1 SHA512

NSIS installer

installer

images/DTGadget_icon.png

SHA256 da126bc35649ec8559ab1508508f035af1d5dd196016c5de2ce9b1681e08f38b
MD5 177f639fab418f65a25b5d41452b65fa
SHA1 4df6c9c3bcc318e77117165ca5c7c4e491f22c8c
SHA512 7e5a7cd6f6ecb0568d391e5298368ad759bbc774376c97ef3184e8ed679baa418d61291a2d0aa181227c84961eddc8537873939585474d56e8a09cfdef7dba00
SSDEEP 192:GSDS0tKg9E05Ti0/PkxJFFqL5mOQoQRrF6Y1JXrzFjbJ5suQG2W3B4iSSq:pJXE05O0/cxJWL5mO4BFd1hdbzsJGR3Q
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

images/btn-message-h.png

SHA256 f7198de1ea7ee66788a6aefccd6c3c5ab62d5716d53056693e9acc30f3c82f39
MD5 ec24f16bf24df0df40dbc6015f99283c
SHA1 eb6233a27572f6bb8e419d0374d2fc53d5b5b153
SHA512 c4082604a16329a6b0e1fdf159dee5e15215a175222c5482b0bb765eb630c38ba0141617b13f8f2ea17ff7a563c8a601477e958b9f2e9ed781977e9b03cc296b
MD5 SHA1 SHA512

NSIS installer

installer

images/btn-message-p.png

SHA256 d83a6cf5d612a9835c3423f1f4dd243b78917a859b974e95db66a6c08027ed09
MD5 646603786c717504bb0f95c6230e6163
SHA1 34ebbdc761c2156eda9a1aa0fe961021cb4c94d7
SHA512 13a5898f8bd8737f4c304cde99c43d68666183bce06b8f078ab267df064acdba3492ff25fbad34d17175791dec4fe5df84c5e36a9fe963fd7c3ea902d0295bd4
MD5 SHA1 SHA512

NSIS installer

installer

images/btn-message.png

SHA256 e0a57e76b67f976009aa9bf45c84effc1d580b9cd28fe59fc52820d89d56c46d
MD5 a90e2397ccc3ad28e2eade24a33c820e
SHA1 241039ed724027447af16cd5bc5cf1ec22fef216
SHA512 3fcc60baf935aa36eac4e60a8a4f65d786b6f5ce28b4dc197bb05f0435056b1f206b1a96f0d587d22f8004b2f02f4bb793c8ca16c4f51de29856c95c9837c503
MD5 SHA1 SHA512

NSIS installer

installer

images/btn-next-disabled.png

SHA256 0c4e4613162c7d455637ecc59eff9d14c66743093d3276ec20c14362bf2a45cb
MD5 17af6af867255535a190ce7c0556c07f
SHA1 2a0f9236a2345c673bb6c8df82687d37b91deaf8
SHA512 074b99018212d7328b2aef54d5e0527efdef18e6d5341015d0b396efa252e0d86b9ce0ffa88b24b0298ff3177ef260bcb4959a19f677554e7ef691afeb9e82a6
MD5 SHA1 SHA512

NSIS installer

installer

images/btn-next-h.png

SHA256 57caec3bc888073564fce1c93d63c0079ea06cf1046be884ae56b18aa82a9b58
MD5 88ae03a33e3d792634c25b06f3d14782
SHA1 fe586bede93281d65948725cef5e67cc57f9fb67
SHA512 1950f76b369a8c94a6d5c015958616c2d69f0a5c36efd1bfd421875a23caab7fedff96766eeb32f0dcfc34163bb476b01548c97ed57239423520b83f95cbb776
MD5 SHA1 SHA512

NSIS installer

installer

images/btn-next-p.png

SHA256 19da4270e68ea3fcd1283dd00e379ad36535fe4d043ef58f3b26a80e33205fc6
MD5 f62da3ff4394d14442b7f533e11f2304
SHA1 c4d67975f9fb33d5e6f3857d3d287f12f40f6482
SHA512 11a1fd9f4d0a29c229c0ca1a135c13addc5dd99589d3e8b75b061a939a9c46aceb4328371f8f97967f88a0c7b041b957b9427f181fcbe755bd3a1de06e5aee80
MD5 SHA1 SHA512

NSIS installer

installer

images/btn-next.png

SHA256 47346d72f617de106dcbad872b6e89863da33f5441ef94b779d3bf9e94fe7f0e
MD5 820b4ef0446cac25e1bdf535012ca7bc
SHA1 cdcc95d50944b0b68957fa95a725aa9f4aa1cae4
SHA512 03f1eed32c980e5447ee94ae40344af837ca2319e056531c346efe5905db2e974f4de496e22dd3c02b1bdde8452bdfc454a9f95608e33c50c47b975d5e40bc20
MD5 SHA1 SHA512

NSIS installer

installer

images/btn-prev-disabled.png

SHA256 adbd7e3ba343dfe2525d10fdef4a620a5297e57cd6d8d644d33396f824c1b221
MD5 898a2749802d6f738a8db99755945f86
SHA1 397c49100140fe87bbea80e6406525b20ea7977d
SHA512 ed7aab5a2bb190aa885673f712e5361a2b83d8e8862203abb5314c506a97e196408fa4a75282df80d87ac32efae6b18496b7aa9d02508f42c0c72ce65caae59c
MD5 SHA1 SHA512

NSIS installer

installer

images/btn-prev-h.png

SHA256 7a2736b60d1e795576a25cc739563bf959a47288e8e06af06b21d9bab48af25d
MD5 e01f2b958df734fc851599ab3c9b14bb
SHA1 8e2d59448b292be61e5c518ea855d2175c86e98f
SHA512 6c460e59ac9b3fd0f3ed604e4ff5bc2367b39d160d108675c69d46db2323fb2d6f4072c9ec47b363bd3604fd949548196ba7c918d2be9f9d1bde9c8e49a00dec
MD5 SHA1 SHA512

NSIS installer

installer

images/btn-prev-p.png

SHA256 6c7d11a7a9c8d864935976c756aab7e431ee5ba427d8fad2e53b706bce10f109
MD5 559d60797a45dc7c84c59d1c5b7e4b87
SHA1 c5f39e20a869f14069c1d7c39a1f0eec164328ff
SHA512 f740d8c2fa0f261905e57b66b861beb53d6047f6b75890089ad99ce4457d231526d70eea4a36d7ad2af8738b3bb38380cfae0d3a022fba9c0e3e9f63871b2e46
MD5 SHA1 SHA512

NSIS installer

installer

images/btn-prev.png

SHA256 d0012ebc003459c61af17b30aad25ac9fe17d711fd4e9c46678066f1ff58b23b
MD5 82d6374e52976594c0bc660cd824b7cb
SHA1 92749b7325dab9d636f0f42e7f2eea908d2425f3
SHA512 402dcd55cbb611b370da85a36ea14f9912df31f0f6c692d47fb7a24edaf652c853b26f1f7be04ec93b7a8f8efadfeb99d43ef7005f5cbabc4c0dd805a3d26cbc
MD5 SHA1 SHA512

NSIS installer

installer

images/container-0.png

SHA256 cc0f27155278a1e2c2166b81488f817d7ff8a7933d1ebf1deab1b76690af20d6
MD5 21b9f173e89e6b4d5dc95b1808c673f0
SHA1 927123cbc07bcf3f076929727c6db1192c6e58d4
SHA512 82c3c636de41e76c0d7b3fa12f2321050bca92531cd89e8df7feb691f2804d9a157b74cd10846d99a286c2cc6419dd6d2f6ba211b74e3ff99949836da7b2272e
MD5 SHA1 SHA512

NSIS installer

installer

images/container-1.png

SHA256 a14838d0a94f097ada0eee448083243443f593a05ff3880ca3aa5c3c13808214
MD5 f12df3fe939c974e32ea321466e2447a
SHA1 f8426dfbf4781c020de81bfe900022bf5aa65278
SHA512 f60199e504a837a19b6f8281340f4ac774ec3ae71514d3fd5540979e57a738115e3fc086dd7b347398ff32051a4ea30d313d37280cb0522afb046cf8b36aa334
MD5 SHA1 SHA512

NSIS installer

installer

images/container-2.png

SHA256 463c9c81919fcd33fc84bb426753854c46d0546aec3d800cff95ef668b62cc63
MD5 4fc2297992f604161502563f738999d2
SHA1 3d7c3e7952ff439583ca708ee8d75de92cf35aa9
SHA512 2db79c8000afefb559362ea3743585001690bb35d65ee7b416d2b5476553ce37ec241f19f9c1c104bd93a2bd314cf1679206dbcec5840b4d90898955b06ba3fd
MD5 SHA1 SHA512

NSIS installer

installer

images/container-3.png

SHA256 32326053f712814f97513a56013803f5bb059bab07c3b0dad759d2dfd8372324
MD5 ce46ab65610e3ed81cc70730075b05b4
SHA1 ed41dfa14c5e1c5f443e7cc8dca1248c0cc53bf8
SHA512 877b5bbf4f1a84f714327944658947f75b3bb50f16a28b948c5bf8506ac7f7cd851637cae197a566dde64d083995a21d0da453e12d655d8370704126cfa1144e
SSDEEP 96:gZ/I09Da01l+gmkyTt6Hk8nTeWAl789cZT9S:gS0tKg9E05TmlI9c+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

images/container-4.png

SHA256 581d06c0360648633dcd62ce2e9bab4c56b4adc490fd2ddbbda39c4b6b098e1d
MD5 d8758ab03560862fe74a5d2de8621e03
SHA1 0bfd7ccb7ab4f1b77ee2cb634f737a8f2baa0781
SHA512 2cf9173a12abd947702046eb237202c278ef719c7c461f146db7ba5c4af78e5f2dbc2052a597b4eb28df21cf253c1f96d3a26ed7643ab6816285682a377367d0
SSDEEP 48:hocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODce3Ghny+Mj8Y:hZ/I09Da01l+gmkyTt6Hk8nT/2hycPQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

images/container-c.png

SHA256 7efa7721eba1acc16cd5fdfc17257c9a2c1b201c212b55f121dfb53021c9fbfb
MD5 7fbeb85f09db7c6eb5aca9e2705bee37
SHA1 353c052153417981b64920308482fdfacc3ad34a
SHA512 c259272ad34c1220e76df82df845bc6b8268feeac8f7499a42be983bff293131bce37c2feb6ed3b4d8da268ff7828a49b6a9f58fb8ec02c7012af834e3e752df
MD5 SHA1 SHA512

NSIS installer

installer

images/device-bd.gif

SHA256 751e21a7208613bd7b4d529b53b9eaede631aa5a4b3e0efecb5d1d450f3d908c
MD5 0a90d2a589b78e5e5b82895a05f4f0e7
SHA1 84a130a6d4c61547d6afaa2074c2ed69ba160775
SHA512 8e6eca6ac02e684e60567942ee58b820485a999f7efcdc8bb24fe2297c40e5ea34027d41f641a3fb3c9bc4cfb57d80908f2174c152cc2f85fe5f2b31822ce174
MD5 SHA1 SHA512

NSIS installer

installer

images/device-cd.gif

SHA256 0d25afebb71b3946a8f1b522949deeaa4764880575f87442a67422799fe37ef6
MD5 6abeaef6eeb41e2b977278504c6aa187
SHA1 c53ac844e3c9c0cba320ebb099d5536911eb532b
SHA512 527802fa26ce4a0dbae536436d81a762b17b654e16bcf9b0076ea61fbce8b37dce701466c4f224915d43d9492f7b21193a7f4508764ff0c00dbd4e160ca0f112
MD5 SHA1 SHA512

NSIS installer

installer

images/device-dvd.gif

SHA256 ee0ec407f5b4c57b542c41d0097be1754b0c96a68207e9a51feef7492b08abe0
MD5 0d6cc2e1d2470f873558887c13607b3a
SHA1 e0bd9157014bf2c43d5ed5f783eab3971d841256
SHA512 1d109892f3a22b21cb3002602a79b0990eae9a0ec9094c9145fbc6c83b1219aa11e7541f8461dbb0d6c8b8485cea32ad54e5b1cac3784fe090404d4309eb33d4
MD5 SHA1 SHA512

NSIS installer

installer

images/device-hdd.gif

SHA256 431301058cbe1f60f416ce8608fbb3a254bd02d0b7b17c05416489ce948fbbf2
MD5 62eaad53fd4169ebfcb8c1555f656f32
SHA1 49afadf509f3b5f68549387eca3848bff43c74de
SHA512 4beb2e8a900e91ab0105267dd197cb79be62f451d7e854cfe69747d398a9cfad55109fd91262067169e8f5630568d39873e0bbc89c99106de3babca618aaf766
MD5 SHA1 SHA512

NSIS installer

installer

images/device-shine.png

SHA256 17ece7da26d35f0ac9f600ebbabed1d889899623f99c7897e5f651092badd660
MD5 42b6b0138c0dddb9f54a485573f85681
SHA1 94b964e53544ee75d6730bdece09d603bc149f6a
SHA512 8b9e51e36014b31f62828cb393660b462e599e1261a5ff5e0689391f07b74ad4488f50f31a9fc308e5be9275a2c9ec27751f32369eac9a5755aead2352849ae5
MD5 SHA1 SHA512

NSIS installer

installer

images/device-type-back.png

SHA256 34cf235db258ddbdcec5cce2d552538802d0b210419ecc3d2c2bf9daafea6b93
MD5 e7321228f25f887c28c99e67fc37010e
SHA1 2fda59cd91710aa18a7aea3e41bcb7030ee9f263
SHA512 f97af4c1c27c49b0b49442848ce33db76d942a578dea36bdb24b1ac2a83ccefa783075268054132bb76c51d02f6908e1850c57cbadbbbd548c154e9caf3e054b
MD5 SHA1 SHA512

NSIS installer

installer

images/device-usb.gif

SHA256 85d3524e4a7ceb3c3743a7e6e7916c3c28f89b42582c534211a5891f1beca92c
MD5 3b7aac73a0f13c7b454e4ad2ef5e236d
SHA1 27b74d87efbaf6bf03ada863f0074db28a8a43df
SHA512 a596aa1f9cf00d310bb014ea96e9681ef6cc06e1b6d83527ed092ed32020ea1fee7ddc8880f9650b984a030e38f520d9688b7accaf51d63444a09b2481ac8df0
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-add-device-clicked.png

SHA256 eb609198dc0ae9a9e616b737a6dc6e50157f77b9140a2cf7389a95d3ee3c6674
MD5 2e17ac0c932a9d1aa014e7165c03d8dc
SHA1 32c6ac5c44f07cda8243f8a91d20bd2c8dc8428d
SHA512 b7cc393e0f187a53a25ab15035d00ac00d32797e4f265ebe90ba9497d476afffd9334956e2363b5b136553de78c17de8409afad78f4475c382f43eaf6ce09300
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-add-device-hover.png

SHA256 da49dcc3ae0d33736af4a73d7bb4c5f544343eeb5238c6a32759c569e4deed03
MD5 9bbf43bdce905d411a7f782ee5e1cedd
SHA1 ac61615845f58929901852de41dfe0f5e7f9738d
SHA512 0a34061d793a2fbeb6b61be2f307ed76e0bcd6a95da00721073995fd3f3237c49165573d265ed1e156ce603050e47ada5fda39df0d5cf3ce5c2282277dcfd237
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-add-device.png

SHA256 b513bc12ca63b1b630b5870133437a12203edd8cb85c0a9716fea9f861283b50
MD5 4edca73301f44201363062752b7ed3a5
SHA1 4e5b84b617722a0b9358b4915a9a994588e7a9db
SHA512 d7d502a745386725279f312798ab04237ee43db7a177e013ba9f6826a01bb2cc6e6a830ffcdabf4570f1257fdf58b541c9edcbb2216d8b3b3c393a733fe79f7e
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-add-drive-to-empty-h.png

SHA256 c6900e529c89a1e9e1d406ae3bf4df5bb8a292c8b1cf5f2a5763b58994528693
MD5 11cdffb7f477ef7c57306b816a8cf98a
SHA1 01dcf34c4af9e54c0aae12b62ba65323cb62c0fc
SHA512 cb8e18998867d0a4a1f842cec2052ca9b818e646f8de757a1f235df78d26ae2b1666c1ccc172557e351b438ae2b087c91aeac2e612329570906607d030dcb56d
SSDEEP 96:jSDZ/I09Da01l+gmkyTt6Hk8nTb05qve077bRNVLKw3Qj8jMRdddA7UvMM7sEmUG:jSDS0tKg9E05Tw5qm0HhB3QSMRfdQ9Mw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

images/ico-add-drive-to-empty-p.png

SHA256 2af58c49312d766af6e29409649b2b21cb3c1a8c850356f62a00bc60cda3185e
MD5 ce232216b0a671d4c2ab7ad70efd6970
SHA1 203848b9a7c1af6da76d970064648e854c9730b0
SHA512 4f47b232c566e78dd8a0bdc8f52eca3f8f7db951189a93f1960adbc014266450f3534ccf4bd3797f8f81ccc8346b4f75acc010fd4007a1995150c3ef6610d2d3
SSDEEP 96:jSDZ/I09Da01l+gmkyTt6Hk8nT3Nk9aKqz6c6AMnMSQ3T4nljIHPj7v7GWTO09:jSDS0tKg9E05T9kYz6wMMVsnlkHzGWOW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

images/ico-add-drive-to-empty.png

SHA256 666ac9cf1be7db9196f827f2bfd0ab6524bead21a4ee2cf896690f9bd1f12131
MD5 a6b553cd986f0a0a93cee6b2a09bc453
SHA1 b54c3b61ef5309930815d51ffbe50a32962c6317
SHA512 d40f4bbbee9359b29f93948bb1263b10e44570af94d260f3d3c05a663fec2fcf727e1735be52cbb566ec4c8e194c4509a9ba3367d5f6d42166869084ec508cbf
SSDEEP 96:jSDZ/I09Da01l+gmkyTt6Hk8nTSc41+fb1TarY/wC0WIZfel+f9LY4sGf:jSDS0tKg9E05Ti18b1TsqwCKZfele90S
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

images/ico-cd-dvd-no-disc.png

SHA256 f3384518eaa2b2329402d99155172345aff48770e8930668a85cfaae2d75c096
MD5 1f8c182a262e6e28422c3753417bd750
SHA1 4a8ba7895857ddf2b42ebfc4e1cadbcbc18c8772
SHA512 eb26c022d1bb8fb17bf17d7c0f53007759ccb4238ca4bdc88714c49b9b87a8efcc5cd33e9ea4af05edf612ceefaa4fb83037bb5d57184587f0084b027eaf5c80
SSDEEP 96:KXHt+JcNgOSiS4XsAYNpf2ESNwSb22ZtjSTBe0HerPe/N:OoONgOLPXsAYnDSbv8VlHkPe/N
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

images/ico-cd-dvd.png

SHA256 da5f82ef8acd75a8ba460897db2d6060303efc5e7a62729c5fe8cf5ea7a20a42
MD5 c7ecafa07d3726019b25637bf2849629
SHA1 a631685a211b67babd0d98e45d151317eae023ee
SHA512 bbdaafd4276d315a6e4868a4d44295371292758a885bc7c3e306cefe57ee3f71ff85768b0a5e6d9168a8c74c023380fc566c962fa11ea0293f8e3845dec9ca2f
SSDEEP 192:3SDS0tKg9E05T7AC6P2qxI2pZX7d1ZsDS7:iJXE05vAC+2qxI2frdaw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

images/ico-delete-device-h.png

SHA256 5ec4a16c0d56345a7f670692ebe01c525728fd5eec3df57af144335e4e856311
MD5 be08aa5b560f653f0ccdb2d912a58939
SHA1 94ad8f4ecd82858d8710db05b85bdd9f0d65199c
SHA512 7781e035722da74b120dee89f479d0d226702d9b0a9c6023b3bdbfa864848d260809ba0d864e375fe7a97f3b522aaeb87f1db0ac594aee25b051edcc89929615
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-delete-device-p.png

SHA256 c5e51b39f5d3b3e029d73c96cb6779a416974dec6b5f532e222bb0a98e6348a2
MD5 7cb52bdf96152cf165745aa12980bf94
SHA1 cdc7fa74882ea308d6348ebf9fde3e938dc9145d
SHA512 a5b573e72b20f661eac18a166db03e0750b7a490b46899d1004f1d57b929a298cb4b24e45cfea381a94dd31aea0b8887a209960a5bf63f2c69a2c12e55450abe
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-delete-device.png

SHA256 4d4c61c686e33663f8a01b015a49775bb2e020656058dc686d5bfe3b705bbe29
MD5 9dfb31445953314d61bcfed1ceda4de8
SHA1 dbc9196801a74a5c969f526a06be9d3f57007dcd
SHA512 d7be202d0fb80f62c333f8515a17fb07f29c6940147d51014840192d054b67e7a35db6cd441230821b6fc3a66378e315fb2fa83c3aa0f0ac91b619233be3ae63
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-hdd.png

SHA256 88805655f8d696ac596057027b013f5ca6cf229b4e4b9f1a16127a06b480fc64
MD5 35ace57b45acbd53f20e34531bed4995
SHA1 5532067d9c8020e525a8372f4bf1089dba296290
SHA512 5690773acb36668c305becf2ee0a37d1c609b01eacf0ad39829c765b977562fa103546b6799d50da583a73ab10b53caa9a1157bfed3ea9d12727e6b272402898
SSDEEP 96:5qIEZYhZ2mSIsV3BEVn94g05RarP1L8ecNIfto+FV5:5qaZ2/3By94g0u71L1ftxV5
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

images/ico-msg-unmount-all.png

SHA256 96d9ab1861ca67e04f02d438907a8225193186426ec41fe68b2ad1895d10ad35
MD5 eed9e95c94a028608fe1cb57ce3c68f4
SHA1 3c4ef90806899c2b842cbef506eea88f517bd0d3
SHA512 9ff4d4c3f72905ace2725984207928ebf32dccbf9a10a7757cd84aa87fd53533b67a163f1dbfbb364a393e96b0f8fa5310be248e114e485439b639b9e2c4082c
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-run-dtpro-clicked.png

SHA256 805631f32f1eb5ac8f39666fd3b21b71a6c65240ebad0c32c9627aa17810e5c4
MD5 e21dfe81e96d11bef4b92a8ab0899a4c
SHA1 58c939c2f4653d5e1fc4603aead6d6987c611a68
SHA512 b41d20dc5ea8ae62a54b63eff1707cd900f9309cd8c2e9617424845e71b066990aa6f266b6b55e0bbb16c589deef439f6a73292961df426085b44967cd53daa7
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-run-dtpro-hover.png

SHA256 59ea11fac6a4779eb8b352358b4f349cd728f4c7da5339343d1dd604380c906f
MD5 8729e4947b24791c2f84d7d6d7f0a048
SHA1 9a57c379452c12ae2f8062189f10efb67ff5d5a0
SHA512 23b8c429ebef71b93abea4a49ebcc60d0a2e9c223963e32476260fad260e05ab8b42b996b815281fd80ae301c94e876a971604c5c9947564de306b59b43eeae9
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-run-dtpro.png

SHA256 6d2b7d2decbf8395728ea6c66d899985216d2103f8efc74873e0f3f3a9e095ba
MD5 59bb7e3d9a948e47b67702e9f1ba1006
SHA1 f69c351f1ae0790cb73f2d4f30590e1a530c4f3f
SHA512 ade4eef66b2fa3872fc4255b72d95c204c9e621ce049f95c125631323cc7aab15aabb526d9d9157af261c77597de3525c04791402f2a6a46f9c04717ad29305c
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-to-bottom.png

SHA256 0a5e084096b326982cdd7cdf893168d2ce5c4fd0904a89c52e588b9ccb5b35f2
MD5 c7f745d0aea2d4ba8567bcf9ce74ac76
SHA1 0e7b5735716ab9068f788b773440010819f728d8
SHA512 ed8b6a574b3769f5fca19d6637e24318d35c4ca705d6c565f86e87a41f4e6d1b357afc01ad44e8972e304dfe4ec03ae3236700e81f22075b99cd24ac781fef3f
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-to-top.png

SHA256 ec22fcf84aaf32f15e53aa587df66d35394757a3cf412a1318fa92ebc6a39699
MD5 61591b5478847d95b85e5d34221e88f8
SHA1 0e2156b86f915614abddf0e338ad7b9681ac29f4
SHA512 c7ae0b75ab9e34110b7e5720078f3c41e95feaca6177996a1d216d83b57a4257a90a6cf7c0ddb0bc994e120fad74b6afa24790d5598a62261603a6ac430c77f9
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-unmount-all-clicked.png

SHA256 4317546575fb40fdc92ae0020da7b823b7573796657691f26a42f9f5481df208
MD5 33a72477c241a4ee3155642b62e06610
SHA1 86f75dd55e12feb2651d5567ead6e0cf46b8c32c
SHA512 781bb1802cce347be63956969b8ee5f6b356115134499ee619f908f29e261555a1bf8ca8e293333fc010437f2ee2b10ed2f800010b5efa9b7fa3462eba6af88a
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-unmount-all-hover.png

SHA256 9186510c4586dbcabb1ae4ae266560e23acc9a3674f3dac2283a320c25746906
MD5 d8dade59388e69b66cd3036d8d3d0683
SHA1 55afaad30394181bc0d45a5dfd0eb5d3c0529d7b
SHA512 2cc83f2345a2fe194ace5291529f032012635b66c0dcc7f780eed26d67759eb7b3b9f86b0d0de9aee736ebd8f248d839e5af17cc1254d944adc9e1e2d15eb41a
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-unmount-all.png

SHA256 ce9a3da8b1ded9d1267a491a397eaf0b22e2beb02dfbd51d8774a7645fa6b21a
MD5 b7f83ca7d748bc4b93a3c956aa512314
SHA1 092f90d22989c581321323891aa5334c7eeb9396
SHA512 05284f7e387ea1ed1f9496018732c3ab87a6237b29cee52b826afd96ee4cfd15f137813b825c8eaccac7ab7c885e51b96100d74cd75760a9af5ba6d5a8306183
MD5 SHA1 SHA512

NSIS installer

installer

images/ico-usb.png

SHA256 8c83e4633de5a8580c32b0cdc36058e4ca1ae827715593ee23a84bb2391b2870
MD5 18273555f513628a23c3643f50fe52f0
SHA1 1cce573d6082417978d44511ddd42a405fd6aa01
SHA512 eac072967ccac7cbf70d2d9a06c11d5521ac3f1868b8fc94fbc506bf70794d28a204039ba71c37c1b99080f4fc73a855a6f15248e0ae8feb6fb9c17c915b6961
MD5 SHA1 SHA512

NSIS installer

installer

images/logo-dtpro.png

SHA256 418b86b21bc12a2861de06534d11ce2f225957bbe2cff0e91edbead62051c854
MD5 660a289c9923d413937f29c9ae2ef051
SHA1 24254a3b40c55833f78e460fc93d16212212fd64
SHA512 60e960090c5d5a9bf85ad3959215697976b35437db59f4500759afd03a97e618a80c6d6cc772603b0731c98abe52669b88bb00c4094e773a74a58db06fb58e6f
SSDEEP 96:62SDZ/I09Da01l+gmkyTt6Hk8nTKt3qALw3fncAvTi8PIoQgwXanueUUwgKlBVOa:RSDS0tKg9E05TKt3fwUoTPPI9neURBJt
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

images/message-wnd.png

SHA256 75a89cda72a88181bffb2d184d170a0103e59439b93cddd6c18eded8534b3ab5
MD5 a13be0a879928006ddcc7e42aa23537c
SHA1 549dd0e4c20c49484a8827f385c4b6c672207923
SHA512 7148382aa910b059ec12b0f44db2a7a064cc2bd75f6ba1dfb6b0265b5c73466532b96bf199d5f28a6a65e616b4e77f4554b5a474e57448a356c519ad3218b879
SSDEEP 96:oSDZ/I09Da01l+gmkyTt6Hk8nTZz91WwJKJDKSBepdHE0pPR:oSDS0tKg9E05TZz917WKzR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

images/scroll-dragger-hovered.png

SHA256 e9f9cbd1aae974c9f3304c242995a214e87e31d5eb9c031c95a6543ce6e4a0bc
MD5 2c5a658c5a1eec463d7a08ff4c3db74e
SHA1 4aa159d1c39809da3cc4d4c7a51701e24734b151
SHA512 20b1d5db94b99333e30124669ccd56ff02ba95f436cc0b0bece2814a56c085fff5835388fbc1c155445d5abcc44432947249c4ef314d8ba4879d424a9edcba74
MD5 SHA1 SHA512

NSIS installer

installer

images/scroll-dragger.png

SHA256 ef165f06ae452d8d098634006a9ff7e41068a85a7b97d8c4a48824e7e6e5640a
MD5 ae3a5c4db633d42e6704805003c33fbf
SHA1 6271b10276dc26a343e3e944c3b3aa09226854ea
SHA512 7156e4e12175709336fa76d3b08a6e83f7151dcd06aa9b86239ff8b4933277e896227de577dc592cc2b993c97c0ae45e166dc8f6b7bd9595094a34f3198e641c
MD5 SHA1 SHA512

NSIS installer

installer

images/switcher-block-h.png

SHA256 fc31702ab700bc4a996bf09e6c3fba8c2f2b156be6fcbfa37ae602b4c81a9a66
MD5 3c90d9a9de03ebac7845eb2c52dbe42d
SHA1 224deeeb82ca63482fc31d75bcd4a920e048bfb9
SHA512 4f46a8b2db2d5523fd3927a4fc4334799708d0471c7d1594b886792be0fc4049a5f6e535891dd86bcd84d4993c48a95f7363c2d8109a7d8bd97da38b3d78e56b
MD5 SHA1 SHA512

NSIS installer

installer

images/switcher-block-p.png

SHA256 93f671175b55a0d02a3581b65e8eb5fadf43e54874627f8306e653261af97c4a
MD5 bebb10482805d5cc7c90518d2ced3d8e
SHA1 f5a4ce837bf55a4dd6f959c4cd721de95e2be0a2
SHA512 6a8c0c225480b0dd9b53a029146280ce2831e068f830064dd7f206cc12cf3611f48602feac425750e348d6860a37bd86ae985bfca94be20f1e8807100d8d1670
MD5 SHA1 SHA512

NSIS installer

installer

images/switcher-block.png

SHA256 3fa8b4348caee0e49105d26919bb05f06ad1af6a409866de6c02df7196ac42e1
MD5 171512e6e376049d2b859cfd9aba595c
SHA1 a27241cb762acbfe8c747a54479c5b02e6a4e6fd
SHA512 488d0e8e88a7230817f3900be37375d15cbb35a9821f60c4477d2daba01ca34cb4e08cc6db31fca55819c0a5bf12cb63f5b7d12c5699ac7e42ac891a34a333fe
MD5 SHA1 SHA512

NSIS installer

installer

jquery/jquery.min.js

SHA256 4332316d0fe4e2c7a9e213afa4d9cbf983ad5bf80cb47d98c9cacd5470e35889
MD5 acc0adc6c188845a409bf158d2de4451
SHA1 881a17148bea7a96d05063d035f74bd6353fbb3e
SHA512 cf3549dcaecaaa87b2b24b0624c9ec31704bd4f84deaf62548230958c7ab4e3861d03f4aeaaaf708da9f953c8c557700f38ead32ffa4e021dbcc6a84e8cb0b6f
SSDEEP 1536:lYRKUfAjtled3TmtaFyQHGvCXseUOgRc9izzr4yff8teLvHHEjam7WuX3yzSiLnM:cUbCGvCD0932o2skAieW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

jquery/newfunctions.js

SHA256 5f00c0fd897258a9952116f2247d75dd746f07382a97764e4def4558b9db2594
MD5 15dd54020cbfea21cc3465ed9d3fdc1a
SHA1 6dd3308af38c8f7a2b9e34c373499c4d525002e5
SHA512 9559a7a7c00646ce30b1ba4505d42597109679d04a2ebae5185f048d58aeb52d20623aca97762c847bd818f96c0b0b20551aabdb1f9266ad556a17ebbf3c896a
SSDEEP 96:0uGZhkt9jvnOwnlnV3jJ3lQqaGHd2hqbjSA5NiDyF+bxbyqCKg:jGZhkPjPOKlKaNi2+VcKg
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

jquery/newgadget.js

SHA256 53c232b5e959a2b5599f55969bc9a3f193ed60b8f3514f018dbb52463f914f65
MD5 d197873734e0b958c0c43409e0229e1c
SHA1 7d61314cd72b1770fcbcf9000c54b9958a58c9b6
SHA512 7785f6f79ea6939c1065ddbf3e9fee03fbf8d9b05fbe7ddf7146a6ba6516584e51924fe679046b181d011b711e192b6acaa712f8b85fb28f79896880cd54e12f
SSDEEP 768:Q7Kh0rV44mqVikpqMO/0zcdj5E3QiVMgUfM:uKhOtmqgKMvM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

message.html

SHA256 c843216b0cdc055a58c80cdd91bb5b1ca9b456afc79e96fa9ab63f572cd354bc
MD5 5c27d1b43a2783d71118c29467a2a305
SHA1 723b21dd0543917c7c1d683a3d071abd4efd034d
SHA512 23b1d99891a6367dba6615369576963b96999ee269a1da68fd18f122d7d1da1ea5415bec14cf03e647ec930fc92b7d7e67f01986038caa4bde72c87eabf20627
MD5 SHA1 SHA512

NSIS installer

installer

newstyle.css

SHA256 779883e3180201b88dc8d7cc43c10c41dd3b7f1cbbd31bcb252789d0507848ca
MD5 531028a8264e7c3fe80e0458585a1827
SHA1 ac9582878898d5cc3fead2c69328e72106c7263c
SHA512 217f3673fd35b4e478f69749cb671ab1da46a4e0b1db6cc7f91a525b2bcb6dc895292855e07445f88a7e9eab5dcc85f536e639c1e4332237a318dfa616e5eddb
SSDEEP 192:TLx0LtDFH6O+yrnfPSAJGwAqVYV85RTbtUsjmNEvibvBjRSOHiHZH/1r1qMWDZNp:iDFl+afKK/+QosHyH/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

DTLiteDLL.dll

IMPHASH f2c55ef7a4c72e3b5b79bb50d0f6aabb
SHA256 4ba224c2f22fafabbefb6d60e03e3aabb6fa802f297dfda065917975d65d246b
MD5 389fe16fe2718d2cedb085fce1039c10
SHA1 e27c2a4f331445b7046e0b703f333063354d1be1
SHA512 915dd22affb268d6dc44d9846cde84395256b0bc5f7939b4f4d1bebf64dd2a258506f2b0b5b198ded2e0ca63436569365487617fa7a43d026edc9161ebc154ee
SSDEEP 98304:bJmELC3fyhQ7167q0GLZnZHnHan/FnMG6M8ndS1aWuJeXVhEmHu+G:VhBu6L6M8nquwEmHu+G
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

e4:fc:36:fe:0a:cd:03:9e:65:b5:3c:6e:5a:bb:da:e7:b1:a5:e1:3d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

Chains

Dec 7, 2015

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Minor OS version

1

Major OS version

5

Entry point

1713197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\Projects\dtlite5\ui\tray\Tray\Win32\Release\DTLiteDLL.pdb

uxtheme

IsThemeActive DrawThemeText OpenThemeData CloseThemeData GetWindowTheme GetThemeSysColor GetCurrentThemeName GetThemeColor DrawThemeParentBackground IsAppThemed IsThemeBackgroundPartiallyTransparent GetThemePartSize DrawThemeBackground

dtcommonres

?EditBox@@YGHPAUHWND__@@PB_W1PA_WK2H@Z ?SetInvisibleWaitDialog@@YGX_N@Z _CheckSPTDInstallation@20 ?MessageBoxExt@DTProRes@@YGIPAUHWND__@@PB_W1111IPAUHICON__@@@Z ?ShowDeviceParameters@@YGHPAUHWND__@@PAUTDeviceParametersDlg@@PAX@Z ?IsDeviceInfoShowed@@YGHXZ ?IsDeviceParametersShowed@@YGHXZ ?ReleaseDTProResObjects@@YGXXZ _AboutDialogShow@8 ?ShowGrabDiskDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAUIPhysicalDevice@@PAVIAttachedProgress@@@Z ?ShowBurnImageDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PA_WHPAVIAttachedProgress@@2@Z ?ShowConvertImagesDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PA_WPAVIAttachedProgress@@@Z ?ShowEraseDiskDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAUIPhysicalDevice@@@Z ?ShowCreateVHDDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAX@Z ?ShowCreateTrueCryptDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAX@Z ?ShowCreateWritableROMDialog@@YGXPAUIDaemonProEngine@@PAUHWND__@@PAX@Z ?ShowDeviceInfo@@YGXPAUHWND__@@PAUIPhysicalDevice@@PAUIDeviceInfo@@@Z

mpr

WNetAddConnection3W

kernel32

LCMapStringW EnumSystemLocalesW GetConsoleMode ReadConsoleW GetConsoleCP SetFilePointerEx OutputDebugStringW WriteConsoleW SetEnvironmentVariableA MultiByteToWideChar SizeofResource LockResource LoadResource FindResourceW WideCharToMultiByte FindFirstFileW lstrlenW GetCurrentThreadId IsValidLocale CreateThread CloseHandle HeapDestroy HeapSize HeapReAlloc HeapFree QueryPerformanceCounter HeapAlloc GetProcessHeap FindResourceExW CreateEventW SetEvent EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetProcAddress GetModuleHandleW CreateNamedPipeW GetCurrentProcessId ConnectNamedPipe GetLastError WaitForMultipleObjects GetOverlappedResult ReadFile WriteFile DisconnectNamedPipe LoadLibraryW FreeLibrary FindResourceA InitializeCriticalSectionAndSpinCount GetFileAttributesW RaiseException GetCurrentDirectoryW SetCurrentDirectoryW GetModuleFileNameA GetStdHandle PeekNamedPipe GetFileInformationByHandle GetTimeZoneInformation GetOEMCP GetACP IsValidCodePage GetStringTypeW DecodePointer DeleteCriticalSection Sleep CreateMutexW FreeEnvironmentStringsW WaitForSingleObject GetEnvironmentStringsW InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList VirtualFree OpenEventA ReleaseSemaphore ResetEvent GetStartupInfoW TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetFileType SetStdHandle HeapQueryInformation GetModuleHandleExW ExitProcess VirtualQuery VirtualAlloc RtlUnwind ExitThread GetCommandLineA SystemTimeToTzSpecificLocalTime FindFirstFileExW IsProcessorFeaturePresent IsDebuggerPresent VirtualProtect SearchPathW GetWindowsDirectoryW GlobalFlags GetLocaleInfoW CompareStringW GlobalGetAtomNameW SetErrorMode LocalReAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc lstrcmpiW DuplicateHandle FormatMessageA GetCommandLineW UnlockFile SetFilePointer SetEndOfFile OpenEventW OpenMutexW ResumeThread LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers GetProfileIntW GetPrivateProfileIntW SuspendThread SetThreadPriority GetFileTime GetFileSizeEx GetFileAttributesExW GlobalFindAtomW LoadLibraryA lstrcmpW GlobalDeleteAtom GetModuleHandleA GetSystemDirectoryW EncodePointer OutputDebugStringA SetLastError CopyFileW GlobalSize GetThreadTimes GetCurrentThread WritePrivateProfileStringW GetLocaleInfoA VerifyVersionInfoW lstrcpynW MoveFileW RemoveDirectoryW FormatMessageW GetSystemInfo GetSystemTimeAsFileTime VerSetConditionMask GetCPInfo GlobalAddAtomW DeleteAtom MulDiv SystemTimeToFileTime GetSystemTime FlushInstructionCache GetCurrentProcess GlobalFree MoveFileExW GetTickCount GetFileSize GetTempFileNameW GetTempPathW GetUserDefaultLCID GetUserDefaultUILanguage GetSystemDefaultUILanguage LoadLibraryExW GetDriveTypeW GetLocalTime GetVersionExW FileTimeToSystemTime FileTimeToLocalFileTime lstrcmpA InterlockedIncrement InterlockedDecrement LocalFree lstrcpyW LocalAlloc GetPrivateProfileStringW GlobalUnlock GlobalLock GlobalAlloc FreeResource CreateEventA FindClose FindNextFileW GetVersion DeleteFileW CreateDirectoryW InitializeCriticalSection CreateFileW

user32

SetWindowRgn DrawFrameControl DrawStateW EnumDisplayMonitors SetLayeredWindowAttributes UnionRect NotifyWinEvent InvertRect HideCaret EnableScrollBar GetMenuDefaultItem GetNextDlgGroupItem CopyAcceleratorTableW ReuseDDElParam UnpackDDElParam InsertMenuItemW TranslateAcceleratorW LoadAcceleratorsW BringWindowToTop IsIconic PostThreadMessageW RealChildWindowFromPoint CopyImage MapDialogRect IntersectRect CharUpperW IsZoomed ShowOwnedPopups RegisterClipboardFormatW SendDlgItemMessageA MapVirtualKeyW GetKeyNameTextW DestroyMenu GetWindowDC GetNextDlgTabItem CreateDialogIndirectParamW GetMenuCheckMarkDimensions SetMenuItemBitmaps CheckMenuItem IsDialogMessageW WinHelpW GetScrollInfo SetScrollInfo GetLastActivePopup GetClassNameW EqualRect MapWindowPoints AdjustWindowRectEx ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow ValidateRect GetForegroundWindow SetActiveWindow TrackPopupMenu SetMenu GetMenu GetKeyState IsMenu DeferWindowPos BeginDeferWindowPos SetWindowPlacement IsChild GetClassInfoExW GetClassInfoW RegisterClassW GetMessageTime PeekMessageW GetMenuStringW EmptyClipboard SetClipboardData CloseClipboard OpenClipboard ExitWindowsEx GrayStringW DrawTextExW SetMenuItemInfoW DeleteMenu RemoveMenu CreateMenu GetMenuState InsertMenuW AppendMenuW GetMenuItemInfoW DrawEdge TabbedTextOutW SetRectEmpty IsRectEmpty SetRect SetParent RemovePropW SetPropW GetPropW IsWindowEnabled GetDlgItemTextW AdjustWindowRect SetFocus CheckDlgButton MessageBeep DialogBoxIndirectParamW GetDialogBaseUnits GetMonitorInfoW MonitorFromWindow DrawFocusRect GetWindowTextLengthW DrawTextW SystemParametersInfoW CallWindowProcW SetDlgItemTextW EnableMenuItem GetSystemMenu RegisterClassExW DefWindowProcW GetWindowThreadProcessId MoveWindow EndPaint GetSysColorBrush BeginPaint GetDoubleClickTime LoadMenuW UpdateLayeredWindow MonitorFromPoint TrackMouseEvent GetComboBoxInfo WaitMessage GetKeyboardLayout IsCharLowerW MapVirtualKeyExW LockWindowUpdate ToUnicodeEx GetKeyboardState CreateAcceleratorTableW DestroyAcceleratorTable SetCursorPos SetClassLongW CopyIcon CharUpperBuffW DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel IsClipboardFormatAvailable GetUpdateRect SubtractRect WindowFromPoint LoadBitmapW CopyRect FrameRect RedrawWindow SetMenuDefaultItem CreatePopupMenu FillRect ReleaseCapture DestroyCursor GetWindowRgn DrawIcon EndDeferWindowPos SetCapture PtInRect ClientToScreen GetCapture GetSysColor ReleaseDC DrawIconEx GetIconInfo GetDC ShowWindow GetWindowPlacement UpdateWindow GetMessagePos InvalidateRect SetForegroundWindow SetWindowPos SetWindowLongW GetWindowLongW GetDesktopWindow GetGUIThreadInfo IsWindowVisible PostQuitMessage SetCursor GetClientRect GetCursorPos LoadCursorW IsWindow AllowSetForegroundWindow DestroyWindow SetTimer GetMessageW RegisterWindowMessageW LoadImageW UnregisterClassW PostMessageW KillTimer DialogBoxParamW TranslateMessage LoadIconW EndDialog CreateWindowExW GetSystemMetrics SetWindowTextA DestroyIcon DispatchMessageW OffsetRect ScreenToClient InflateRect MessageBoxW SetWindowTextW GetWindowTextW GetWindow GetTopWindow GetSubMenu ModifyMenuW GetMenuItemID GetMenuItemCount UnhookWindowsHookEx SetWindowsHookExW GetParent GetWindowRect GetDlgItem GetActiveWindow SendMessageW CallNextHookEx GetFocus GetDlgCtrlID GetAsyncKeyState EnableWindow GetClassLongW

gdi32

RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectPalette SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextAlign MoveToEx SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateRectRgnIndirect CombineRgn SetRectRgn GetBkColor GetTextColor GetRgnBox CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo StretchBlt SetDIBColorTable CreateEllipticRgn CreatePolygonRgn LineTo Polyline EnumFontFamiliesExW OffsetRgn CreateRoundRectRgn FrameRgn PtInRegion SetPixelV ExtFloodFill SetPaletteEntries FillRgn GetBoundsRect GetWindowOrgEx LPtoDP GetViewportOrgEx Escape TextOutW RectVisible PtVisible CreateHatchBrush CreateDIBSection Ellipse GetBkMode PatBlt DPtoLP CreatePen CreateSolidBrush CreateDCW CreateCompatibleDC SelectObject GetBitmapBits GetPixel SetPixel DeleteObject DeleteDC CreateCompatibleBitmap Rectangle BitBlt GetStockObject GetTextExtentPoint32W GetDeviceCaps GetTextMetricsW GetTextFaceW CreateFontIndirectW GetObjectW ExtTextOutW SetBkColor IntersectClipRect GetWindowExtEx GetViewportExtEx GetObjectType GetClipBox ExcludeClipRect CreateRectRgn CreatePatternBrush CreateBitmap CopyMetaFileW SetDIBits Polygon SetTextColor OffsetViewportOrgEx RoundRect SetBkMode

msimg32

TransparentBlt AlphaBlend

comdlg32

GetSaveFileNameW GetOpenFileNameW

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegDeleteValueA InitializeSecurityDescriptor SetSecurityDescriptorDacl RegCreateKeyExW RegQueryValueExW RegCloseKey RegOpenKeyExW RegDeleteValueW ConvertStringSecurityDescriptorToSecurityDescriptorW GetSecurityDescriptorSacl SetSecurityDescriptorSacl OpenProcessToken GetTokenInformation AdjustTokenPrivileges AllocateAndInitializeSid FreeSid LookupPrivilegeValueW RegEnumValueW RegQueryValueW RegEnumKeyW RegSetValueExA RegQueryValueExA RegOpenKeyExA CheckTokenMembership RegCreateKeyA RegEnumKeyExW SetNamedSecurityInfoW SetEntriesInAclW RegDeleteKeyW RegSetValueExW

shell32

ShellExecuteExW SHChangeNotify ord190 SHCreateShellItem ord155 ShellExecuteW SHGetDiskFreeSpaceExW SHAppBarMessage SHBrowseForFolderW SHGetDesktopFolder SHGetSpecialFolderLocation SHGetPathFromIDListW DragFinish DragQueryFileW SHGetFileInfoW ord680 ExtractIconExW DuplicateIcon Shell_NotifyIconW SHGetFolderPathW SHGetSpecialFolderPathW

comctl32

ord17 ImageList_ReplaceIcon _TrackMouseEvent ImageList_Draw ImageList_GetImageCount ImageList_AddMasked ImageList_GetIcon ImageList_GetIconSize

shlwapi

PathRemoveFileSpecW PathFileExistsW PathFindFileNameW PathIsUNCW PathStripToRootW PathFindExtensionW StrFormatKBSizeW

ole32

DoDragDrop OleUninitialize OleInitialize CoFreeUnusedLibraries ReleaseStgMedium OleDuplicateData CoTaskMemAlloc OleFlushClipboard OleIsCurrentClipboard GetRunningObjectTable CreateClassMoniker CoInitializeEx CoGetClassObject CoDisconnectObject CoRevokeClassObject CoRegisterMessageFilter CreateStreamOnHGlobal OleLockRunning OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator OleGetClipboard CoLockObjectExternal OleSetContainedObject RevokeDragDrop RegisterDragDrop CoTaskMemFree CLSIDFromString CoInitializeSecurity CoCreateInstance CoUninitialize CoInitialize StringFromGUID2 CoCreateGuid

oleaut32

VariantChangeType VariantCopy SafeArrayDestroy SafeArrayAccessData SafeArrayCreateVector VariantInit VariantClear VarBstrCat VarBstrFromDate SystemTimeToVariantTime VariantTimeToSystemTime SysStringByteLen SysAllocStringByteLen LoadTypeLi LoadRegTypeLi SysAllocString SysAllocStringLen VarBstrCmp SysStringLen SysFreeString SafeArrayUnaccessData

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

gdiplus

GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipDrawImageRectI GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdiplusShutdown GdipCreateBitmapFromStream GdipAlloc

imm32

ImmReleaseContext ImmGetContext ImmGetOpenStatus

winmm

PlaySoundW

Name

.text

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

489KB

Virtual Size

489KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

50KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

162KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=3, id=225, productName=VS2013 UPD3 build 30723, version=30723,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=18, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=53, id=223, version=20806,

count=255, id=224, version=20806,

count=411, id=225, version=20806,

count=2, id=221, productName=VS2013 build 21005, version=21005,

count=19, id=224, productName=VS2013 build 21005, version=21005,

count=21, id=225, productName=VS2013 build 21005, version=21005,

count=43, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=905, id=1, productName=Unmarked objects,

count=67, id=229, version=21005,

count=1, id=220, productName=VS2013 build 21005, version=21005,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=2, id=151,

count=1, id=222, productName=VS2013 build 21005, version=21005,

DTLiteExe.exe

IMPHASH a2af468124c063f956f8fc4d50f427e1
SHA256 14e0d4ef50267296e87d03f1fb808363c9107cf657dd5e1f77196bf8152c31bf
MD5 69ae839ea2e4aefc515c25d188d9ac6e
SHA1 b14c42503955f66a598a07874f40308ba8716463
SHA512 06d08f125ff2732bad656983c712ccbdc520fcdd49054f6b8d17b8304becff85a9c476a649126a3a8932d1eb6a19553b3d665f8ff8f873aa9d8c12149c903047
SSDEEP 1536:OZdEhJ6rOyFEBXrx0hu6BEmjW6cSX0sWjcdsFuxkzWZ4R:UErPyKBbxxmjWi7sYxkzWZQ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

6

Entry point

9682

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\Projects\DTLiteKor\bin\DTLiteExe.pdb

DiscSoftBusService.exe

IMPHASH 17e732420e3f74bbe372ba823918c7fe
SHA256 b966ed7a585bac801e3a5411723015e846737744e5e64cbf6585701a258ffda8
MD5 6dd0d22a3b36e6ad5c52e2bc607afd49
SHA1 0129f9b4efa613efbb5ccf65f97e836c2946538d
SHA512 08f4be129ed4b29934587c5b1f6ca375e80a87a68c182a3c5fcecdeb08a753b6cdc5c9f77d6fed4cdad2eb0bc6c676fd08b2a4207b157d5c79274421d062abd8
SSDEEP 24576:lcWfQkzB8Ang/x6QOlv9fFNyoGX+P/DPGuS333Ir+6a3:yezBOY+Iav3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

8e:a5:e5:5b:86:e2:e8:c5:24:ee:2c:fc:ed:7b:aa:8c:72:07:39:37

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

Chains

Dec 7, 2015

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Minor OS version

1

Major OS version

5

Entry point

605094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\Projects\dtlite5\service\DiscSoftBusService\Win32\Release\DiscSoftBusService.pdb

kernel32

DeviceIoControl SetVolumeMountPointW DeleteVolumeMountPointW QueryDosDeviceW GetVolumeInformationW FindFirstVolumeW FindNextVolumeW FindVolumeClose GetVolumePathNamesForVolumeNameW CreateEventA InitializeCriticalSection GetTickCount LoadLibraryW GetFileSize SetThreadPriority GetPrivateProfileStringW LocalFree OpenProcess GetCurrentThread DeleteFileW GetFileAttributesW SetFileAttributesW MultiByteToWideChar FindResourceExW FindResourceW GetCommandLineW GetModuleHandleW GetModuleFileNameW LoadLibraryExW CreateEventW CreateMutexW lstrcmpiW WideCharToMultiByte LocalAlloc GetComputerNameW FormatMessageA SizeofResource LoadResource Sleep WaitForSingleObject SetEvent DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection GetCurrentThreadId CreateThread RaiseException GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetProcAddress FreeLibrary LockResource InterlockedCompareExchange InterlockedExchange InterlockedDecrement InterlockedIncrement DecodePointer CreateFileW CloseHandle SetFileTime GetFileTime ReadFile WriteFile GetLastError ResumeThread ReleaseSemaphore OpenEventA WriteConsoleW FlushFileBuffers SetStdHandle GetConsoleMode GetConsoleCP GetOEMCP GetACP IsValidCodePage FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId GetFileType GetStdHandle GetModuleHandleExW ExitProcess EnumSystemLocalesW IsValidLocale GetLocaleInfoW LCMapStringW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo ExitThread RtlUnwind IsProcessorFeaturePresent EncodePointer GetStringTypeW OutputDebugStringW IsDebuggerPresent LoadLibraryExA GetCurrentProcess ReleaseMutex GetSystemWindowsDirectoryW GetOverlappedResult ResetEvent WaitForMultipleObjects CancelIo InterlockedExchangeAdd VerSetConditionMask FindClose GetSystemTimeAsFileTime GetSystemInfo CreateDirectoryW FindFirstFileW FindNextFileW VerifyVersionInfoW GetUserDefaultLCID WritePrivateProfileStringW GetSystemTime SystemTimeToFileTime lstrlenA GetThreadTimes GetProcessAffinityMask SetThreadAffinityMask WaitForSingleObjectEx CreateWaitableTimerW SetWaitableTimer CancelWaitableTimer QueryPerformanceCounter QueryPerformanceFrequency VirtualAlloc VirtualFree SetLastError GetFileSizeEx SetFilePointerEx GetModuleHandleA GetDiskFreeSpaceW SetFilePointer LocalFileTimeToFileTime GetCurrentDirectoryW GetFileAttributesExW FileTimeToSystemTime AllocateUserPhysicalPages FreeUserPhysicalPages MapUserPhysicalPages SetEndOfFile InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList SleepEx

user32

CharUpperBuffW CharLowerBuffW DestroyWindow CreateWindowExW GetClassInfoExW RegisterClassExW DefWindowProcW PostMessageW SendMessageW LoadStringW MessageBoxW CharNextW CharUpperW PostThreadMessageW DispatchMessageW TranslateMessage GetMessageW

advapi32

OpenProcessToken ImpersonateLoggedOnUser SetThreadToken RevertToSelf DuplicateToken TraceMessage GetTraceEnableFlags GetTraceEnableLevel GetTraceLoggerHandle UnregisterTraceGuids RegisterTraceGuidsW StartServiceCtrlDispatcherW SetServiceStatus RegisterServiceCtrlHandlerW OpenServiceW OpenSCManagerW DeleteService CreateServiceW ControlService CloseServiceHandle RegSetValueExW RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegCloseKey ReportEventW RegisterEventSourceW DeregisterEventSource AdjustTokenPrivileges AllocateAndInitializeSid FreeSid InitializeSecurityDescriptor SetSecurityDescriptorDacl LookupPrivilegeValueW CheckTokenMembership SetEntriesInAclW GetTokenInformation SetNamedSecurityInfoW OpenThreadToken

ole32

StringFromGUID2 CoUninitialize CoRevertToSelf CoImpersonateClient CoCreateGuid StringFromCLSID CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoInitialize CoCreateInstance CoInitializeSecurity CoReleaseServerProcess CoAddRefServerProcess CoResumeClassObjects CoRevokeClassObject CoRegisterClassObject CoInitializeEx

oleaut32

RegisterTypeLi SysAllocStringLen VarBstrCmp SysAllocString SysFreeString SysStringLen VarUI4FromStr LoadTypeLi LoadRegTypeLi SysAllocStringByteLen UnRegisterTypeLi SysStringByteLen

ws2_32

WSASetEvent WSASend WSASocketW WSAWaitForMultipleEvents WSACloseEvent WSAResetEvent WSARecv WSAHtons WSAHtonl WSAGetOverlappedResult WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSAConnect FreeAddrInfoW WSAGetLastError shutdown setsockopt ntohl WSAStartup WSACleanup GetAddrInfoW closesocket

imgengine

ord5 ord2 ord8 ord9 ord3 ord7 ord10

sptdintf

ord6

shlwapi

PathFileExistsW

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW ord680

winmm

timeEndPeriod timeBeginPeriod

setupapi

CM_Get_DevNode_Registry_PropertyW CM_Get_Device_IDW CM_Get_Child SetupDiSetSelectedDevice SetupDiSetClassInstallParamsW SetupDiSetDeviceInstallParamsW CM_Get_DevNode_Status CM_Get_Sibling CM_Query_And_Remove_SubTreeW CMP_WaitNoPendingInstallEvents SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailW SetupDiCreateDeviceInfoW SetupDiGetINFClassW CM_Request_Device_EjectW SetupDiCreateDeviceInfoList SetupDiOpenDeviceInfoW SetupDiGetDeviceInstallParamsW SetupDiSetDeviceRegistryPropertyW SetupDiGetDeviceRegistryPropertyW SetupDiCallClassInstaller SetupDiGetClassDevsW SetupDiDestroyDriverInfoList SetupDiSetSelectedDriverW SetupDiEnumDriverInfoW SetupDiBuildDriverInfoList SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo

rpcrt4

UuidCreate

Name

.text

Size

727KB

Virtual Size

726KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

150KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

39KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp0

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Engine.dll

IMPHASH 338a8444058b4187dcef15eeba80c86d
SHA256 af651834af2a5c106b925bd6fa73b65e933b5d88171a6ebb3d3b3b006b1761b2
MD5 e879ee9c02e5f2aa0fee6da4e10e9c63
SHA1 2bf0ab7fa4b25c59491a02a468db1456ab14f597
SHA512 96873ff0d20951161c758103df0b66db19b1b232b1b8ce2a4e14d69fc37a888b93392848faa1df6b2b3bc0b4471b79e74b89be33cae5561e2fc53c3895ed9841
SSDEEP 49152:DlTZruhQ4xvwwgmEBK+FVJcMFSR78/k3R/:pTZMQAwW+FVfSR4/k39
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

64:7a:29:ff:33:1d:3f:74:27:0e:64:95:8d:f6:b7:4b:ab:ff:a9:6d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

Chains

Dec 7, 2015

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Minor OS version

1

Major OS version

5

Entry point

645465

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\Projects\dtlite5\service\engine\Win32\Release\Engine.pdb

advapi32

TraceMessage RegCloseKey RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegDeleteValueW RegSetValueExW LookupAccountNameW ConvertSidToStringSidW InitializeSecurityDescriptor SetSecurityDescriptorDacl SetSecurityDescriptorSacl GetSecurityDescriptorSacl ConvertStringSecurityDescriptorToSecurityDescriptorW RegEnumKeyExW RegQueryInfoKeyW RegisterTraceGuidsW UnregisterTraceGuids GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags AllocateAndInitializeSid SetEntriesInAclW SetNamedSecurityInfoW

user32

CharNextW CreateWindowExW GetClassInfoExW RegisterClassExW DefWindowProcW DispatchMessageW TranslateMessage GetMessageW UnregisterDeviceNotification RegisterDeviceNotificationW PostMessageW RegisterWindowMessageW LoadImageW DestroyIcon CharLowerBuffW GetWindowDC ReleaseDC GetDesktopWindow CreateIconFromResourceEx wsprintfW CharUpperBuffW MessageBoxW GetIconInfo IsCharAlphaNumericW GetSystemMetrics LoadStringW

shell32

SHGetFolderPathW ord165 ExtractIconExW SHGetFileInfoW ord75

setupapi

SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailW SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList

gdi32

GetObjectW GetBitmapBits DeleteObject GetDeviceCaps

rpcrt4

UuidCreate

kernel32

OutputDebugStringW ReadConsoleW EnumSystemLocalesW IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW SetStdHandle GetEnvironmentStringsW GetModuleFileNameA TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetTimeZoneInformation GetConsoleMode GetConsoleCP FlushFileBuffers GetStartupInfoW GetStringTypeW GetStdHandle GetOEMCP GetACP IsValidCodePage GetModuleHandleExW ExitProcess GetCommandLineA IsProcessorFeaturePresent IsDebuggerPresent GetFullPathNameW ExitThread GetCurrentThreadId GetCPInfo RtlUnwind SetEndOfFile GetDiskFreeSpaceW GetModuleHandleA GetFileSizeEx SetLastError GetThreadTimes DosDateTimeToFileTime DuplicateHandle GetFileType WriteConsoleW SetEnvironmentVariableA LoadLibraryExA OpenEventA ReleaseSemaphore ResetEvent ResumeThread FormatMessageA FreeEnvironmentStringsW lstrlenA LockResource HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap CreateThread LoadResource SizeofResource CloseHandle FindResourceW FindResourceExW MultiByteToWideChar WaitForSingleObject GetTickCount CreateEventW WideCharToMultiByte InterlockedIncrement InterlockedDecrement GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetFileSize ReadFile CreateFileW CreateEventA DecodePointer GetProcAddress RaiseException Sleep WriteFile DeviceIoControl lstrcmpW LoadLibraryW GetModuleHandleW GetDriveTypeW CreateDirectoryW CreateFileA CopyFileW SetFilePointerEx InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetFileTime SetFileTime FreeLibrary LocalAlloc LocalFree GetSystemDirectoryA GetSystemDirectoryW GetVolumeInformationW GetComputerNameExW GetVersionExW GetSystemTimeAsFileTime GetSystemDefaultUILanguage GetUserDefaultUILanguage GetSystemDefaultLangID GetUserDefaultLCID GetCurrentProcessId SetEvent ReleaseMutex FindClose CreateMutexW OpenEventW DeleteFileW FindFirstFileW FindNextFileW SetFilePointer GetTempPathW GetTempFileNameW LoadLibraryExW GetPrivateProfileStringW VirtualAlloc VirtualFree CreatePipe SetThreadExecutionState OpenMutexW GetModuleFileNameW SystemTimeToFileTime FileTimeToSystemTime GetFileAttributesExW GetSystemTime QueryPerformanceCounter QueryPerformanceFrequency GetCurrentThread SetThreadPriority SetCurrentDirectoryW GetCurrentDirectoryW InterlockedCompareExchange WaitForMultipleObjects EncodePointer lstrcmpiW GetThreadLocale SetThreadLocale VerSetConditionMask GlobalAlloc GlobalFree GetCurrentProcess GetSystemInfo RemoveDirectoryW MoveFileW VerifyVersionInfoW GetLocaleInfoA WritePrivateProfileStringW

ole32

CoTaskMemRealloc CoFileTimeNow CoTaskMemAlloc CoInitialize CoUninitialize IIDFromString CoTaskMemFree StringFromCLSID CoCreateGuid StringFromGUID2 CoCreateInstance

oleaut32

SysAllocStringLen LoadRegTypeLi UnRegisterTypeLi RegisterTypeLi LoadTypeLi VarUI4FromStr VarBstrCat VariantTimeToSystemTime SystemTimeToVariantTime VariantClear SysAllocStringByteLen SysStringByteLen VarBstrCmp SysStringLen SysFreeString SysAllocString

shlwapi

PathFindFileNameW PathRemoveFileSpecW PathFileExistsW StrToIntW

sptdintf

ord4 ord5 ord6 ord2 ord3

??4VDriveEngine@@QAEAAV0@ABV0@@Z ??_B?1??get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51 ??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ@51 ?get_const_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?get_mutable_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@0AAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@A ?instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@0AAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@A ?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A ?instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@A ?is_destroyed@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ ?t@?1??get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@4@XZ@4V?$singleton_wrapper@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@734@A ?t@?1??get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@4@XZ@4V?$singleton_wrapper@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@734@A ?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@detail@34@A DllCanUnloadNow DllGetClassObject DllRegisterServer DllUnregisterServer GetDTEngine _GetOSDisplayString@0

Name

.text

Size

822KB

Virtual Size

822KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

314KB

Virtual Size

314KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

66KB

Virtual Size

144KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text0

Size

423KB

Virtual Size

423KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

51KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Lang/KOR.dll

SHA256 3a22e00a77ebc8027882524c33829b9167a63e65e5dfbe06701769d06a44e2e2
MD5 7a4ffeb75f8bfecc757f37cc8b13c569
SHA1 8b1c78fa74151df4d73a7ecb6a19e17784ba18c8
SHA512 6d78c8d28b7435e5b12444c0d94efc9b8cd2470daeef503f2920afaebb3f802971320ff0b6bad4970e3f1433cfdd9bb8cd945bfb22ce774b5553be1b2ac2ab80
SSDEEP 1536:Zd+V8pbX7tD8OkM5fuDXPZMYdiEud7lmt:Zd+sXeOR4DXPZMYdGd7lm
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

SPTD2inst-x86.exe

IMPHASH a6f99c0acd8b3748d620a67a46984917
SHA256 1232a981827034f13f73aa64337e7581e21e76e803990955c3234c4d4f96e022
MD5 21572169fef4fc242ca75b783dcbcaa8
SHA1 9b1c1358da782c8f7b1b05cf77cb7e9cafbf7caf
SHA512 c414bd506d7356b896796020fe996ba94c3d1b12faa75023895713a6e2eb879207cd2f9f64781f8c2097d31f337d8eb8428618bfdbf7ddacd6722d488252fc68
SSDEEP 6144:Bd42Y7d6PtHEkZpMWknFVaxvvyf5HA8a1e:s2Q8FkQfvvu5HALA
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

cb:b0:d2:56:ca:86:57:ee:d9:38:82:5c:cb:fd:69:f6:a4:b1:02:49

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Chains

Nov 30, 2015

Minor OS version

0

Major OS version

6

Entry point

11978

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

SPTD2inst.pdb

setupapi

SetupDiOpenClassRegKey

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

kernel32

GetModuleHandleW VerifyVersionInfoW GetSystemWindowsDirectoryW IsWow64Process SetEndOfFile VerSetConditionMask HeapSize WriteConsoleW SetFilePointerEx FlushFileBuffers LocalFree GetProcAddress FindResourceW LoadResource CreateThread LoadLibraryW CloseHandle LockResource GetLastError Sleep ReleaseMutex CreateFileW LocalAlloc WaitForSingleObject CreateMutexW DeviceIoControl GetCurrentProcess GetCommandLineW SizeofResource ReadFile ReadConsoleW DecodePointer RaiseException HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess GetModuleFileNameW InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MoveFileExW DeleteFileW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc GetFileAttributesExW GetConsoleCP GetConsoleMode GetFileType FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW SetStdHandle GetStringTypeW GetProcessHeap

user32

EndDialog MessageBoxW GetDlgItem DialogBoxParamW EnableWindow SendDlgItemMessageW SendMessageW

advapi32

SystemFunction036 SetSecurityDescriptorDacl CreateServiceW RegGetKeySecurity RegCloseKey CloseServiceHandle OpenSCManagerW RegDeleteKeyW AllocateAndInitializeSid ChangeServiceConfig2W SetEntriesInAclW RegCreateKeyExW RegSetKeySecurity RegSetValueExW FreeSid CheckTokenMembership InitializeSecurityDescriptor RegOpenKeyExW RegGetValueW QueryServiceConfigW ChangeServiceConfigW QueryServiceConfig2W OpenServiceW BuildSecurityDescriptorW QueryServiceStatusEx

SPTDinst-x86.exe

IMPHASH eac80491b8034417923fbf2bf773701a
SHA256 25c38106a47aa07e7cf0db0770ba450316833531bd069c31c65a5237532f673c
MD5 a3a83d5eae4b2f5888251c3d6c98e862
SHA1 4a1de02c427c64d5e9b56161ce6adb5b87876cfb
SHA512 c87e1fb4f226a6a67f45840ee58983ad652440c732d58a59e28c251d4b59ee885996d85218553eb2b9c34ceed79dc6b50ad6114efb30ea230ac531d2c729ed50
SSDEEP 12288:X1a4KjbYn5qawvKieJtNlHbUCOGUBPK8hp:XxEEn4ameJtgQUBi8P
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

17:89:5c:0b:84:f6:3a:52:79:92:e8:30:7f:66:e4:b2:ba:e8:6a:7f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Chains

Dec 11, 2014

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:52:d7

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 13, 2011 - Jan 28, 2028

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=GlobalSign TSA for MS Authenticode - G1,O=GMO GlobalSign Pte Ltd,C=SG

Serial Number

11:21:40:5c:1f:0e:d2:58:88:2b:e5:4d:86:86:ba:11:ea:45

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 23, 2013 - Sep 23, 2024

Subject

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Serial Number

11:21:35:2e:0b:20:23:d1:a7:51:88:6d:cb:e9:7d:37:79:5e

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 21, 2014 - May 30, 2015

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:0b:7f:6b:00:00:00:00:00:19

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 23, 2006 - May 23, 2016

Minor OS version

1

Major OS version

6

Entry point

532484

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\svn\sptd\setup\objfre_wxp_x86\i386\SPTDinst.pdb

advapi32

FreeSid EqualSid GetTokenInformation OpenProcessToken OpenThreadToken AllocateAndInitializeSid SetSecurityDescriptorDacl InitializeSecurityDescriptor RegCloseKey RegSetKeySecurity RegGetKeySecurity RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegQueryValueExA RegDeleteKeyA

kernel32

GetCurrentProcess GetLastError GetCurrentThread LoadLibraryA GetSystemDirectoryA VerSetConditionMask GetProcAddress GetModuleHandleA LocalFree CreateMutexA LocalAlloc HeapFree HeapAlloc HeapReAlloc CloseHandle CreateThread ReleaseMutex GetTickCount WaitForSingleObject GetCommandLineA VirtualFree VirtualAlloc GetProcessHeap UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter SetUnhandledExceptionFilter RtlUnwind GetStartupInfoA InterlockedCompareExchange Sleep InterlockedExchange

user32

MessageBoxA EnableWindow GetDlgItem SendDlgItemMessageA SendMessageA DialogBoxParamA EndDialog

msvcrt

rand memmove srand _except_handler3 memset __getmainargs _cexit _exit _XcptFilter _ismbblead exit _acmdln _initterm _amsg_exit __setusermatherr __p__commode __p__fmode __set_app_type ?terminate@@YAXXZ _controlfp _fsopen sprintf ??3@YAXPAX@Z ??2@YAPAXI@Z _mbsnbicmp _mbsicmp _tempnam rename _errno free _unlink fwrite fclose

Name

.text

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

323KB

Virtual Size

325KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sptd0

Size

159KB

Virtual Size

159KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

CODEINIT

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

CODESIGN

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VDriveLib.dll

IMPHASH 9ad33ded8e8fa8cef97e3002aeae8832
SHA256 24b688f307183233255d7e5fa0f4d00e671c6a70154f4f1a6753bc12623efd43
MD5 db59ee94f7632cab8a750a64620b059e
SHA1 9dbf91161cf014a4828c57fc521b4eb8ca802e5f
SHA512 869f395913dacbbad698d0410ce6003ecab04fd7f8a618de6b71d8e79d5ed5711c433d376b124c03b96b1eb967b2f12590614997e25f18d2d132cbc98a5090af
SSDEEP 12288:gK+Ayeljra4jlJtrtnoVCoIOsXHJtVzocqL10Bs7Y:gKl/3hPtoVCoYHJtdocg0Gs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

f0:57:26:31:55:68:9a:29:a4:a3:70:f6:49:28:a4:b8:39:74:bb:0b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

Chains

Dec 7, 2015

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Minor OS version

1

Major OS version

5

Entry point

80197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VDriveLib.pdb”

advapi32

TraceMessage RegOpenKeyExW RegEnumKeyW RegQueryValueExW RegDeleteKeyW RegCloseKey RegCreateKeyExW GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegisterTraceGuidsW UnregisterTraceGuids AllocateAndInitializeSid SetEntriesInAclW InitializeSecurityDescriptor SetSecurityDescriptorDacl FreeSid RegEnumKeyExW RegOpenKeyExA RegSetValueExA RegSetValueExW

user32

RegisterDeviceNotificationW UnregisterDeviceNotification RegisterWindowMessageW

setupapi

CMP_WaitNoPendingInstallEvents SetupDiGetDeviceRegistryPropertyW SetupDiDeleteDevRegKey SetupDiDestroyDeviceInfoList SetupDiOpenDeviceInfoW CM_Get_Device_IDW SetupDiCreateDeviceInfoList CM_Get_Sibling CM_Get_Child SetupDiSetSelectedDevice CM_Get_DevNode_Status CM_Locate_DevNodeW SetupDiRemoveDevice SetupDiSetClassInstallParamsW

imgengine

ord8 ord3

kernel32

SetEnvironmentVariableW ReadConsoleW ReadFile SetEndOfFile OutputDebugStringW GetCurrentDirectoryW GetDriveTypeW FreeLibrary CreateFileW LocalAlloc DeviceIoControl GetLastError LocalFree CloseHandle HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap SizeofResource LockResource LoadResource FindResourceW FindResourceExW Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection WaitForSingleObject GetVolumeInformationW InterlockedIncrement InterlockedDecrement WideCharToMultiByte DeleteVolumeMountPointW SetVolumeMountPointW MultiByteToWideChar InitializeCriticalSectionAndSpinCount RaiseException DecodePointer GetModuleHandleA GetSystemDirectoryW GetProcAddress ReleaseMutex CreateMutexW GetModuleFileNameW GetCurrentProcess WriteFile FindClose GetSystemTimeAsFileTime FormatMessageW GetModuleHandleW GetFileAttributesW DeleteFileW FindFirstFileW FindNextFileW MoveFileExW EncodePointer IsDebuggerPresent IsProcessorFeaturePresent CreateThread GetCurrentThreadId ExitThread LoadLibraryExW GetFullPathNameW GetCommandLineA RtlUnwind ExitProcess GetModuleHandleExW UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW IsValidCodePage GetACP GetOEMCP GetCPInfo GetFileAttributesExW GetConsoleCP GetConsoleMode GetStdHandle GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW CompareStringW LCMapStringW SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers

shlwapi

wnsprintfW

??0CSPTDDeviceInfo@@IAE@XZ ??0CSPTDDeviceInfo@@QAE@ABV0@@Z ??0CSPTDDeviceInfo@@QAE@PAUDEVICE_INFO_POINTER@DeviceEnumerator@@PAVCSPTDDeviceInfoEvents@@@Z ??0CSPTDDevices@@QAE@ABV0@@Z ??0CSPTDDevices@@QAE@PAUHWND__@@@Z ??0VDriveEngine@@AAE@XZ ??1CSPTDDeviceInfo@@UAE@XZ ??1CSPTDDevices@@QAE@XZ ??1VDriveEngine@@QAE@XZ ??4CSPTDDeviceInfo@@QAEAAV0@ABV0@@Z ??4CSPTDDevices@@QAEAAV0@ABV0@@Z ??4VDriveEngine@@QAEAAV0@ABV0@@Z ??_7CSPTDDeviceInfo@@6B@ ??_7CSPTDDevices@@6B@ ?AddDevice@CSPTDDevices@@QAE_NHAAVTSPTDDeviceInfo@@@Z ?AddHandler@CSPTDDevices@@QAEXPAX0@Z ?ClearDevices@CSPTDDevices@@AAEXXZ ?CloseVolumeHandle@CSPTDDeviceInfo@@IAEXXZ ?DaemonAdapterDeviceControl@VDriveEngine@@SAKKKKPA_WPAK@Z ?DaemonAdapterDeviceInfo@VDriveEngine@@SAKKKPAKPA_W@Z ?DaemonAdapterGetDeviceMap@VDriveEngine@@QAEKKPAU_DAEMON_DEVICE_MAP@1@@Z ?DaemonAdapterGetDeviceParams@VDriveEngine@@QAEKKPAU_DAEMON_DEVICE_PARAMS@@K@Z ?DaemonAdapterMount@VDriveEngine@@QAEKKKPA_W00PAK@Z ?DaemonAdapterSetDeviceMap@VDriveEngine@@QAEKKKPAU_DAEMON_DEVICE_MAP@1@PA_WPAK@Z ?DaemonAdapterSetDeviceParams@VDriveEngine@@QAEKKKPAU_DAEMON_DEVICE_PARAMS@@PA_WPAK@Z ?DaemonAdapterUninstall@VDriveEngine@@QAEKKKPA_WPAK@Z ?DaemonGetMask@VDriveEngine@@QAEKPAK@Z ?DaemonSetMask@VDriveEngine@@QAEKPAK@Z ?DeleteDriverService@VDriveEngine@@SAXXZ ?DeleteMountPointsForAdapter@CSPTDDevices@@AAEXH@Z ?DeleteVDriveEngine@VDriveEngine@@SAXXZ ?DoEvent@CSPTDDeviceInfo@@QAEX_N@Z ?GetATAPIDeviceInfo@CSPTDDevices@@QAE_NHAAVTSPTDDeviceInfo@@@Z ?GetATAPIDeviceInfoById@CSPTDDevices@@QAE_NAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAVTSPTDDeviceInfo@@@Z ?GetATAPIDevicesCount@CSPTDDevices@@QAEHXZ ?GetAttachedDevice@CSPTDDevices@@QAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAVTSPTDDeviceInfo@@@Z ?GetDaemonFlags@VDriveEngine@@QAEKXZ ?GetDevNotify@CSPTDDeviceInfo@@QAEPAXXZ ?GetDeviceInfo@CSPTDDevices@@QAE_NHAAVTSPTDDeviceInfo@@@Z ?GetDeviceInfoById@CSPTDDevices@@QAE_NAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAVTSPTDDeviceInfo@@@Z ?GetDeviceInfoByIdP@CSPTDDevices@@AAE?AV?$shared_ptr@VCSPTDDeviceInfo@@@std@@AAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z ?GetDeviceInfoP@CSPTDDevices@@AAE?AV?$shared_ptr@VCSPTDDeviceInfo@@@std@@H@Z ?GetDevicesCount@CSPTDDevices@@QAEHXZ ?GetEngine@VDriveEngine@@SAPAV1@XZ ?GetSPTDVersion@SPTD@@YA_NPAK0@Z ?GetVirtualAdapterStatus@CSPTDDevices@@AAE?AW4DTProAdapterStatus@@H@Z ?InitExternalInterfaces@VDriveEngine@@SAXP6A?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@ZP6AXXZ@Z ?InitVolumeNameFromSymLinks@CSPTDDeviceInfo@@IAEXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAD@Z ?Initialization@CSPTDDeviceInfo@@QAE_NPAUHWND__@@@Z ?InternalGetString@VDriveEngine@@2P6A?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@ZA ?IsAdapterEnabled@VDriveEngine@@QAEKK@Z ?IsNewDeviceAllowed@CSPTDDevices@@QAE_NH@Z ?IsSPTDExist@SPTD@@YA_NXZ ?Mount@CSPTDDeviceInfo@@QAEIAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0HW4MediaType@@@Z ?Mount@CSPTDDevices@@QAEIAAVTSPTDDeviceInfo@@AAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@1HW4MediaType@@@Z ?OnDeviceChanged@CSPTDDevices@@UAEXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z ?OnWMDeviceChangedEvent@CSPTDDevices@@QAEXIPAU_DEV_BROADCAST_HANDLE@@@Z ?OpenVolumeHandle@CSPTDDeviceInfo@@IAE_NXZ ?RaiseEvent@CSPTDDevices@@AAEXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z ?RefreshDevices@CSPTDDevices@@QAEXXZ ?RefreshInternal@CSPTDDeviceInfo@@IAE_NXZ ?RefreshMediaStateAsync@CSPTDDeviceInfo@@QAEXW4DEVICE_STATE@TSPTDDeviceInfo@@@Z ?RefreshMediaStateInternal@CSPTDDeviceInfo@@QAE_NW4DEVICE_STATE@TSPTDDeviceInfo@@@Z ?RefreshMediaStateInternalBase@CSPTDDeviceInfo@@IAE_NW4DEVICE_STATE@TSPTDDeviceInfo@@@Z ?RefreshMountPointAsync@CSPTDDeviceInfo@@QAEXXZ ?RefreshMountPointInternal@CSPTDDeviceInfo@@IAE_NXZ ?RemoveAllVirtualDevices@CSPTDDevices@@QAEIH@Z ?RemoveDevice@CSPTDDevices@@QAEIAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z ?RemoveHandler@CSPTDDevices@@QAEXPAX0@Z ?SPTDEnum@SPTD@@YA_NKPAKPAPAX00@Z ?SPTDEnum@VDriveEngine@@2P6A_NKPAKPAPAX00@ZA ?SPTDEnumFree@SPTD@@YAXPAX@Z ?SendGlobalEvent@VDriveEngine@@2P6AXXZA ?SetAdditionalParams@CSPTDDeviceInfo@@QAEIAAUTSPTDSetDeviceParameters@@@Z ?SetDeviceParameters@CSPTDDevices@@QAEIAAVTSPTDDeviceInfo@@AAUTSPTDSetDeviceParameters@@@Z ?StartRefreshingThread@CSPTDDeviceInfo@@IAEXXZ ?SwitchAdapter@CSPTDDevices@@AAEHHHH@Z ?SyncDeviceList@CSPTDDevices@@AAEXAAV?$vector@UDEVICE_INFO_POINTER@DeviceEnumerator@@V?$allocator@UDEVICE_INFO_POINTER@DeviceEnumerator@@@std@@@std@@KAAV?$vector@V?$shared_ptr@VCSPTDDeviceInfo@@@std@@V?$allocator@V?$shared_ptr@VCSPTDDeviceInfo@@@std@@@2@@3@@Z ?ThreadRefreshDeviceInfo@CSPTDDeviceInfo@@KGIPAX@Z ?UninstallAdapters@CSPTDDevices@@QAE_NXZ ?UpdateDevice@CSPTDDeviceInfo@@QAE_NPAUDEVICE_INFO_POINTER@DeviceEnumerator@@@Z ?UpdateMediaLabel@CSPTDDeviceInfo@@IAE_NXZ ?WaitExportVirtualDevice@CSPTDDevices@@AAE?AV?$shared_ptr@VCSPTDDeviceInfo@@@std@@HE@Z ?g_pSPTDExists@VDriveEngine@@2PAHA A0DB34FC6FE35D429A28ADDE5467D4D7

Name

.text

Size

143KB

Virtual Size

143KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.stext

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

43KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vdrv0

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

261KB

Virtual Size

261KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

dtlitescsibus.cat

SHA256 2dca6b2b7b15054eeef11391f70dc60a59c896c6c8a057663925e47a6083fa8e
MD5 eae2d5ec18fbf41122b75eb5ec91a23e
SHA1 c015477f4039660fe4d2f58f326d8e0258c71f79
SHA512 793017ff8892790b9ae4e7f918d30e3050b356d17f559e8efd4bcec54ee24d70ea6c9df0153997dccb3d28ef5838e3b546310b69b7837664ac732b09f69d40cc
SSDEEP 192:1YF7dgtVkUTgBxe1HCjjopmhh6ql0iLC8jSJUbueq2fbw0/SQ:OXOIKpw15LCdUb+2fbZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

dtlitescsibus.inf

SHA256 66e632e0d9da7086d267229afe106e35247d3c16feb6f8a06dd5e3b25f19fd5e
MD5 53ddf1a8a10a75ceb4e868394503d64e
SHA1 a04b251c85ea6804c1d9ba1dfeb59cb457450293
SHA512 f6ea2288bf4aaacbf0fd17dd092f4e36196094316eed5378f981d2da77e6f20879dfe3404ea0f35278b60e27be01682a17103ccafa5594b8107d8c6c636f486b
MD5 SHA1 SHA512

NSIS installer

installer

dtlitescsibus.sys

IMPHASH 94b3e1cd96ab0222d1934251e1a68f03
SHA256 12edf69927494a06a2a7a41e2721cb65b56b497f5bef2596e51873a66e71568d
MD5 4f3d9183a9a4203ed29f7ae1d0b55923
SHA1 22db4f8ef09dbc4298cbe222200d5337a4584f3a
SHA512 d1a6e17aff3c71453450e8a1de3d03954228a1b006356c103536dd029eec964814ea7ca1227017186ad2abaa224517dafdc2da36ec1ae28447c7eb29435ff02e
SSDEEP 768:bsfZrDB+VvklBEWaGoaefRkw2CnJHDCgFwgIxRiU:bipsRkiHDfcRiU
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

71:8c:cb:92:d7:6e:91:01:53:7d:72:19:24:7c:06:05:83:a3:00:d3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Chains

Dec 8, 2014

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:52:d7

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 13, 2011 - Jan 28, 2028

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=GlobalSign TSA for MS Authenticode - G1,O=GMO GlobalSign Pte Ltd,C=SG

Serial Number

11:21:40:5c:1f:0e:d2:58:88:2b:e5:4d:86:86:ba:11:ea:45

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 23, 2013 - Sep 23, 2024

Subject

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Serial Number

11:21:35:2e:0b:20:23:d1:a7:51:88:6d:cb:e9:7d:37:79:5e

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 21, 2014 - May 30, 2015

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:0b:7f:6b:00:00:00:00:00:19

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 23, 2006 - May 23, 2016

Minor OS version

1

Major OS version

6

Entry point

14208

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

dtlitescsibus.pdb

dtsoftbus01.cat

SHA256 6509128e7d4a05ed038c56e97d636f79cc42708f6286494df0025cb92dae73a6
MD5 59780bbe1d7fa8ef8712188cde7bcde1
SHA1 1a473d97776ced18aaec993f083b876dff5ebac4
SHA512 ec4c9753708d569ba0752598e6512d15cd528643224b9dd054aafb96e1f998aea134c015a924ab03ce2850c51f94f1f300c738fbdd1ad36b2c5e927ad0d278d9
SSDEEP 192:PTwjITWdayowJL/zcHvd+ebCfEQpkqs1I5Zgjl55hZb2:bwOKaYJL8vzbCe1M6jjZq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

dtsoftbus01.inf

SHA256 421a2f548fa0634336890bbcd7123b8de5ffecd1e7aa687072919fc2683e4ceb
MD5 b82ad3d0dd54ca132cfc6e235716fc9d
SHA1 9afd9107ed09ee8310499f58cf3d42d85614c48b
SHA512 556078d694bf45aa1e1f8ee6c1d3ad64898b56cfd09d87260e3e528d2265af954f140091d6221db5c92a50d7a1caeb6be9c1f6992bcf89fb2ab3fe6ab7dce910
MD5 SHA1 SHA512

NSIS installer

installer

dtsoftbus01.sys

IMPHASH 75fcd38af5b56894d2b21eb425579d2e
SHA256 7e40ac82b8d3367d4a11c8b69b48ebfb6578f5b4cb9acc299c975bf72c4e1742
MD5 9aed5ad4dd91dbefd5d50f837bc8aa38
SHA1 8092abb077204451dc4452b733652006b408ebb6
SHA512 181be330f3190498e46568990bbc5673a26bc878b260fe326238f7f3d2951e08133713ebd92e06c3699ec8bb9238af126ed30bca7acff12c25d48b7335fb89cf
SSDEEP 6144:1yt+JBxrdqONBZdw1etAUfC/ohqqDfWwdOTHBWCOR:1k+JBRBIetZYocqbW9HBs
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

4f:51:50:b3:c3:ae:3d:f5:8e:40:49:82:c6:36:17:7f:e8:e3:41:4c

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Chains

Jun 11, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:35:5c

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 13, 2011 - Apr 13, 2019

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Serial Number

11:21:35:64:05:60:9a:b9:5f:8d:db:13:16:4b:82:f9:6d:e5

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 29, 2012 - May 30, 2015

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:0b:7f:6b:00:00:00:00:00:19

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 23, 2006 - May 23, 2016

Minor OS version

1

Major OS version

6

Entry point

242693

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\work\projects\working\service\vdrive\dtsoftbus\objfre_win7_x86\i386\dtsoftbus01.pdb

ntoskrnl.exe

IofCompleteRequest IofCallDriver KeClearEvent KeSetEvent IoCreateUnprotectedSymbolicLink IoCreateDevice RtlCopyUnicodeString KeInitializeEvent PoSetPowerState IoSetDeviceInterfaceState IoDeleteDevice ObfDereferenceObject KeWaitForSingleObject ObReferenceObjectByPointer ZwClose ObReferenceObjectByHandle PsCreateSystemThread IoInvalidateDeviceRelations IoDetachDevice IoGetDeviceProperty IoAttachDeviceToDeviceStack IoRegisterDeviceInterface ObfReferenceObject IoDeleteSymbolicLink PoCallDriver PoStartNextPowerIrp IoBuildSynchronousFsdRequest IoGetAttachedDeviceReference MmMapLockedPagesSpecifyCache KeInsertQueueDpc IoFreeWorkItem IoAllocateWorkItem KeDelayExecutionThread KeReleaseMutex MmIsAddressValid MmProbeAndLockPages MmUnlockPages IoFreeMdl IoAllocateMdl MmUserProbeAddress ExInterlockedPopEntrySList ExInterlockedPushEntrySList KeQuerySystemTime _alldiv IoWMIRegistrationControl ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList KeQueryInterruptTime _aulldiv MmMapLockedPagesWithReservedMapping IoBuildPartialMdl MmUnmapReservedMapping KeFlushQueuedDpcs MmFreeMappingAddress IoQueueWorkItem KeInitializeTimer KeInitializeDpc MmAllocateMappingAddress KeInitializeMutex ZwOpenKey IoReleaseCancelSpinLock KefReleaseSpinLockFromDpcLevel KefAcquireSpinLockAtDpcLevel KeSetTimerEx PsTerminateSystemThread ExfInterlockedRemoveHeadList ZwReadFile KeSetPriorityThread KeGetCurrentThread ZwSetValueKey ZwCreateKey ZwQueryValueKey RtlAnsiStringToUnicodeString RtlInitAnsiString ZwQueryVolumeInformationFile IoCreateFile RtlAppendUnicodeStringToString RtlAppendUnicodeToString ExfInterlockedInsertTailList KeTickCount KeBugCheckEx RtlUnwind RtlCompareMemory RtlInitUnicodeString MmGetSystemRoutineAddress memset memcpy ExAllocatePoolWithTag IoWMIWriteEvent KeCancelTimer ExFreePoolWithTag ZwSetSecurityObject ObOpenObjectByPointer IoDeviceObjectType RtlGetDaclSecurityDescriptor RtlGetSaclSecurityDescriptor RtlGetGroupSecurityDescriptor RtlGetOwnerSecurityDescriptor _snwprintf RtlLengthSecurityDescriptor SeCaptureSecurityDescriptor SeExports IoIsWdmVersionAvailable _wcsnicmp RtlAddAccessAllowedAce RtlLengthSid wcschr RtlAbsoluteToSelfRelativeSD RtlSetDaclSecurityDescriptor RtlCreateSecurityDescriptor RtlFreeUnicodeString RtlUnicodeToMultiByteN RtlAnsiCharToUnicodeChar _allmul memmove _aullrem _allrem

hal

ExAcquireFastMutex KeGetCurrentIrql KfAcquireSpinLock KfReleaseSpinLock ExReleaseFastMutex

wmilib.sys

WmiSystemControl WmiCompleteRequest

Name

.text

Size

177KB

Virtual Size

177KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

PAGE

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

876B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

imgengine.dll

IMPHASH 853f0c52a5f84afe1374009eada05d08
SHA256 ac0042e8825fc0e6cf7d38fad23bf55dbc3ee6ddf48ebe21938772c50cdaff78
MD5 4f3cfd0fc36edc8f3c967c6398f7aa2a
SHA1 3075afb5421d14ad7c8f52e700f39311af6d29fb
SHA512 0801043a4958a728a0a9b70a8ad9bbf98afa9a054ec7ce19bbcbc8049c2c929f6eb80aa609b7df376b8c5ce88959756b7f6156cdd04ac689d87a6981d99d938a
SSDEEP 6144:pnJHlq+spZ8Xs42H8QZY0Lcz7yGnvwywXiJBGu1nZtkuPOkP1VfM4fpaAof2mGEc:LHlDsW7QS0LEmWXwAxxZtkqX04kW6Jdg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

06:97:c4:08:4c:bb:53:a8:d7:ac:c3:98:99:5d:3a:cd:58:4d:92:ac

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

Chains

Dec 7, 2015

CN=Disc Soft Ltd,O=Disc Soft Ltd,POSTALCODE=BZ,STREET=Belama Phase 1+STREET=16 Albert Hoy Avenue\,,L=Belize City,ST=Belize,C=BZ,2.5.4.18=#130d502e4f2e20426f782032323834

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Minor OS version

1

Major OS version

5

Entry point

892467

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

InterlockedCompareExchange VirtualAlloc VirtualFree GetLastError InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent WaitForSingleObject GetFileSize WriteFile ReadFile SetFilePointer CloseHandle GetTickCount CreateEventW GetDiskFreeSpaceW CreateFileW MultiByteToWideChar WideCharToMultiByte GetCommandLineA GetCurrentThreadId HeapFree HeapAlloc GetFullPathNameW RaiseException RtlUnwind SetLastError GetCurrentThread EncodePointer DecodePointer ExitProcess GetModuleHandleExW GetProcAddress GetProcessHeap GetStdHandle GetFileType GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsProcessorFeaturePresent IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetCPInfo GetModuleFileNameW LoadLibraryExW HeapReAlloc GetStringTypeW LCMapStringW OutputDebugStringW GetDriveTypeW GetCurrentDirectoryW HeapSize GetConsoleMode ReadConsoleW FlushFileBuffers GetConsoleCP SetStdHandle SetFilePointerEx WriteConsoleW GetThreadTimes GetModuleFileNameW GetModuleHandleA LoadLibraryA LocalAlloc LocalFree GetModuleFileNameA ExitProcess

Name

.text

Size

Virtual Size

383KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.img0

Size

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.img1

Size

437KB

Virtual Size

437KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

848B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

sptdintf.dll

IMPHASH 0c0e25218d1b9d2451a916055dd8d7a8
SHA256 d3dba40e3ed800fd1219afe30d02f6aed2fc4da2acc104b73fbd9d6d6554efe8
MD5 7359e803ab1d5ed1a5b3015aebee6d7e
SHA1 c2530406b2b008807d41c1d215ee499ae8b14aad
SHA512 272ef49ece15374d52de1044c9573781b50a5643e660da91befa27ef9b77ab1194af6fa1271e3795aba56b78fc0d1c2add7ab048a4aa71f2c7e8df59efda0bf3
SSDEEP 1536:5+tdFOIpxuFjkfDi7xuq1wryQWIFFr4B:5+DF7xuJSidH1PEo
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

39:08:f3:af:c5:05:e6:88:2a:6d:e6:9c:62:d7:ad:35:35:c9:bf:61

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Disc Soft Ltd,O=Disc Soft Ltd,L=Belize city,ST=Belize,C=BZ,1.2.840.113549.1.9.1=#0c1366696e707240646973632d736f66742e636f6d

Chains

Feb 18, 2015

Minor OS version

1

Major OS version

5

Entry point

4533

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.stext

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

326B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp0

Size

31KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

592B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer