5c05c76fb5dc9a63e481ac7b878ff8fd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5c05c76fb5dc9a63e481ac7b878ff8fd_JaffaCakes118
Size

97.5MB
MD5

5c05c76fb5dc9a63e481ac7b878ff8fd
SHA1

aa516cbd39d79ac942c3b0c59182132ffbe1cbe2
SHA256

58bbbdcae366284667f5b1ebedf7f014b24b1480eac0f6ba2e66f3d6ecfcfa4d
SHA512

ef8bb4a3cdb7e5a0336e57c8e3e0ac95f9747d4692c2a2c60c04f2c049958dc933111dc2aea302926803fe24fa21a752eea326eaf121e7a8c1e9622e3b24abfa
SSDEEP

3145728:gTx1nWhFT7P3ROJTBchpNwTlSJTTcTY3PyZvkVDANuJ8PDDo:+PnWT7P3ROJTBchpNwTlSJTTcTY3PyZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 59 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Chrome-bin/28.0.1500.75/Locales/am.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/ar.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/bg.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/bn.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/ca.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/cs.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/da.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/de.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/el.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/en-GB.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/en-US.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/es-419.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/es.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/et.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/fa.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/fi.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/fil.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/fr.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/gu.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/he.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/hi.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/hr.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/hu.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/id.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/it.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/ja.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/kn.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/ko.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/lt.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/lv.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/ml.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/mr.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/ms.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/nb.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/nl.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/pl.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/pt-BR.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/pt-PT.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/ro.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/ru.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/sk.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/sl.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/sr.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/sv.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/sw.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/ta.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/te.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/th.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/tr.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/uk.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/vi.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/zh-CN.dll
unpack001/Chrome-bin/28.0.1500.75/Locales/zh-TW.dll
unpack001/Chrome-bin/28.0.1500.75/chrome_frame_helper.exe
unpack001/Chrome-bin/28.0.1500.75/chrome_launcher.exe
unpack001/Chrome-bin/28.0.1500.75/delegate_execute.exe
unpack001/Chrome-bin/28.0.1500.75/nacl64.exe
unpack001/Chrome-bin/app_host.exe
unpack001/Chrome-bin/wow_helper.exe

Files

5c05c76fb5dc9a63e481ac7b878ff8fd_JaffaCakes118
.7z
Chrome-bin/28.0.1500.75/Extensions/external_extensions.json
Chrome-bin/28.0.1500.75/Locales/am.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\am.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/am.pak
Chrome-bin/28.0.1500.75/Locales/ar.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\ar.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/ar.pak
Chrome-bin/28.0.1500.75/Locales/bg.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\bg.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/bg.pak
Chrome-bin/28.0.1500.75/Locales/bn.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\bn.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/bn.pak
Chrome-bin/28.0.1500.75/Locales/ca.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\ca.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/ca.pak
Chrome-bin/28.0.1500.75/Locales/cs.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\cs.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/cs.pak
Chrome-bin/28.0.1500.75/Locales/da.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\da.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/da.pak
Chrome-bin/28.0.1500.75/Locales/de.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\de.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/de.pak
Chrome-bin/28.0.1500.75/Locales/el.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\el.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/el.pak
Chrome-bin/28.0.1500.75/Locales/en-GB.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\en-GB.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/en-GB.pak
Chrome-bin/28.0.1500.75/Locales/en-US.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\en-US.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/en-US.pak
Chrome-bin/28.0.1500.75/Locales/es-419.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\es-419.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 123B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/es-419.pak
Chrome-bin/28.0.1500.75/Locales/es.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\es.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/es.pak
Chrome-bin/28.0.1500.75/Locales/et.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\et.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/et.pak
Chrome-bin/28.0.1500.75/Locales/fa.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\fa.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/fa.pak
Chrome-bin/28.0.1500.75/Locales/fi.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\fi.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/fi.pak
Chrome-bin/28.0.1500.75/Locales/fil.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\fil.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/fil.pak
Chrome-bin/28.0.1500.75/Locales/fr.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\fr.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/fr.pak
Chrome-bin/28.0.1500.75/Locales/gu.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\gu.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/gu.pak
Chrome-bin/28.0.1500.75/Locales/he.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\he.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/he.pak
Chrome-bin/28.0.1500.75/Locales/hi.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\hi.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/hi.pak
Chrome-bin/28.0.1500.75/Locales/hr.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\hr.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/hr.pak
Chrome-bin/28.0.1500.75/Locales/hu.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\hu.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/hu.pak
Chrome-bin/28.0.1500.75/Locales/id.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\id.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/id.pak
Chrome-bin/28.0.1500.75/Locales/it.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\it.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/it.pak
Chrome-bin/28.0.1500.75/Locales/ja.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\ja.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/ja.pak
Chrome-bin/28.0.1500.75/Locales/kn.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\kn.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/kn.pak
Chrome-bin/28.0.1500.75/Locales/ko.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\ko.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/ko.pak
Chrome-bin/28.0.1500.75/Locales/lt.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\lt.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/lt.pak
Chrome-bin/28.0.1500.75/Locales/lv.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\lv.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/lv.pak
Chrome-bin/28.0.1500.75/Locales/ml.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\ml.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/ml.pak
Chrome-bin/28.0.1500.75/Locales/mr.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\mr.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/mr.pak
Chrome-bin/28.0.1500.75/Locales/ms.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\ms.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/ms.pak
Chrome-bin/28.0.1500.75/Locales/nb.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\nb.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/nb.pak
Chrome-bin/28.0.1500.75/Locales/nl.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\nl.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/nl.pak
Chrome-bin/28.0.1500.75/Locales/pl.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\pl.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/pl.pak
Chrome-bin/28.0.1500.75/Locales/pt-BR.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\pt-BR.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/pt-BR.pak
Chrome-bin/28.0.1500.75/Locales/pt-PT.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\pt-PT.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/pt-PT.pak
Chrome-bin/28.0.1500.75/Locales/ro.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\ro.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/ro.pak
Chrome-bin/28.0.1500.75/Locales/ru.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\ru.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/ru.pak
Chrome-bin/28.0.1500.75/Locales/sk.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\sk.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/sk.pak
Chrome-bin/28.0.1500.75/Locales/sl.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\sl.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/sl.pak
Chrome-bin/28.0.1500.75/Locales/sr.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\sr.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/sr.pak
Chrome-bin/28.0.1500.75/Locales/sv.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\sv.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/sv.pak
Chrome-bin/28.0.1500.75/Locales/sw.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\sw.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/sw.pak
Chrome-bin/28.0.1500.75/Locales/ta.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\ta.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/ta.pak
Chrome-bin/28.0.1500.75/Locales/te.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\te.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/te.pak
Chrome-bin/28.0.1500.75/Locales/th.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\th.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/th.pak
Chrome-bin/28.0.1500.75/Locales/tr.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\tr.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/tr.pak
Chrome-bin/28.0.1500.75/Locales/uk.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\uk.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/uk.pak
Chrome-bin/28.0.1500.75/Locales/vi.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\vi.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/vi.pak
Chrome-bin/28.0.1500.75/Locales/zh-CN.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\zh-CN.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/zh-CN.pak
Chrome-bin/28.0.1500.75/Locales/zh-TW.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\locales\zh-TW.dll.pdb

Sections

.rdata
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/Locales/zh-TW.pak
Chrome-bin/28.0.1500.75/VisualElements/logo.png
.png
Chrome-bin/28.0.1500.75/VisualElements/smalllogo.png
.png
Chrome-bin/28.0.1500.75/VisualElements/splash-620x300.png
.png
Chrome-bin/28.0.1500.75/chrome.dll
.dll windows:5 windows x86 arch:x86

556d94d54301e451b27ca78bbf5e4278

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:09:db:bc:73:2d:4b:58:f7:a8:8e:ba:cf:32:34:17
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

09-12-2011 00:00

Not After

06-02-2014 23:59

Subject

CN=LLC Mail.Ru,O=LLC Mail.Ru,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

a1:48:7d:50:fc:68:f3:cb:3d:5c:c7:7a:f3:88:00:9a:68:af:94:1d
Signer

Actual PE Digest

a1:48:7d:50:fc:68:f3:cb:3d:5c:c7:7a:f3:88:00:9a:68:af:94:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\chrome.dll.pdb

Imports

kernel32

ExitThread
FindFirstFileExA
FindFirstFileExW
SetFileAttributesA
CompareStringW
GlobalGetAtomNameW
GlobalAddAtomW
GlobalDeleteAtom
MulDiv
GetUserDefaultUILanguage
GetOverlappedResult
GetTimeFormatW
GetNumberFormatW
GetCurrencyFormatW
CreateWaitableTimerW
lstrlenA
SetCommState
GetCommState
SetCommTimeouts
GetCommModemStatus
EscapeCommFunction
MapViewOfFileEx
GetLocalTime
TerminateThread
SetErrorMode
LoadLibraryW
LoadLibraryA
GetProcessHeap
GetNamedPipeHandleStateW
SetNamedPipeHandleState
DisconnectNamedPipe
PeekNamedPipe
FileTimeToLocalFileTime
WaitForDebugEvent
ContinueDebugEvent
SetThreadContext
GetThreadSelectorEntry
ReadProcessMemory
WriteProcessMemory
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
Module32Next
Module32First
SwitchToThread
HeapSize
HeapCreate
HeapFree
HeapAlloc
HeapReAlloc
DefineDosDeviceW
DeviceIoControl
SetThreadExecutionState
FlushInstructionCache
OpenThread
GetThreadContext
GetTempFileNameA
IsBadWritePtr
GetSystemDirectoryA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleW
ExitProcess
GetCurrentThreadId
GetCommandLineA
IsProcessorFeaturePresent
GetLastError
SetConsoleCtrlHandler
InterlockedIncrement
InterlockedDecrement
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
InterlockedExchange
GetLocaleInfoW
WriteFile
GetStdHandle
GetModuleFileNameW
Sleep
SetHandleCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetStdHandle
WriteConsoleW
CreateFileW
CloseHandle
FlushFileBuffers
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InterlockedCompareExchange
GetComputerNameExW
FreeConsole
AllocConsole
SetConsoleTextAttribute
ReadConsoleW
CreateEventW
DuplicateHandle
VirtualAllocEx
GetGeoInfoW
GetUserGeoID
GetLongPathNameW
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
ExpandEnvironmentStringsW
Process32NextW
OpenProcess
Process32FirstW
SetThreadAffinityMask
QueryPerformanceFrequency
GetSystemInfo
GetProcessAffinityMask
GetExitCodeProcess
WaitForSingleObject
GetProcessId
CreateMutexW
GetDiskFreeSpaceExW
QueryDosDeviceW
GetDriveTypeW
GetVolumeInformationW
GetVolumeNameForVolumeMountPointW
GetVolumePathNameW
FindVolumeClose
FindNextVolumeW
GetVolumePathNamesForVolumeNameW
FindFirstVolumeW
InterlockedExchangeAdd
DebugActiveProcess
LocalFree
FormatMessageW
GetFileAttributesW
ReleaseMutex
GetCommandLineW
OutputDebugStringA
SetEvent
OpenEventW
GetFileTime
RaiseException
LoadLibraryExW
GetConsoleDisplayMode
AttachConsole
lstrcmpiW
SystemTimeToFileTime
lstrlenW
SizeofResource
LoadResource
FindResourceW
GetModuleHandleA
ReadFile
GetFileSize
GetThreadTimes
GetUserDefaultLangID
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
ResetEvent
CreateProcessW
FormatMessageA
DeleteFileW
GetEnvironmentVariableW
GetTempFileNameW
FindFirstFileW
MapViewOfFile
UnmapViewOfFile
MoveFileExW
GetLogicalDriveStringsW
CreateDirectoryW
CopyFileW
ReplaceFileW
GetTempPathW
GetCurrentDirectoryW
MoveFileW
FindClose
CreateFileMappingW
SetCurrentDirectoryW
RemoveDirectoryW
FindNextFileW
GetFileAttributesExW
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SetEnvironmentVariableW
RtlCaptureStackBackTrace
TryEnterCriticalSection
GetModuleHandleExW
GetNativeSystemInfo
GetVersionExW
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
LocalAlloc
VirtualQuery
OpenFileMappingW
SetPriorityClass
GetModuleHandleExA
GetProcessIoCounters
VirtualQueryEx
GetProcessTimes
AssignProcessToJobObject
HeapSetInformation
ResumeThread
FindFirstChangeNotificationW
FindCloseChangeNotification
GlobalMemoryStatusEx
SetThreadPriority
CreateThread
WaitForMultipleObjects
SetEndOfFile
SetFilePointerEx
SetFileTime
GetFileInformationByHandle
RegisterWaitForSingleObject
UnregisterWaitEx
lstrcmpiA
VirtualProtect
QueueUserWorkItem
GetSystemDirectoryW
GetWindowsDirectoryW
GetSystemPowerStatus
GetEnvironmentVariableA
CreateSemaphoreA
SuspendThread
InitializeCriticalSection
ReleaseSemaphore
CreateFileA
DeleteFileA
GetDriveTypeA
GetFullPathNameA
MoveFileA
CreateDirectoryA
LockFile
UnlockFile
GetSystemTime
CreateFileMappingA
SetEnvironmentVariableA
GetTempPathA
GetDiskFreeSpaceA
GetVolumeInformationA
GetComputerNameA
GetLogicalDrives
GlobalMemoryStatus
AreFileApisANSI
LockFileEx
UnlockFileEx
GetFileAttributesA
VirtualAlloc
VirtualFree
GetFullPathNameW
GetDiskFreeSpaceW
GetThreadLocale
GetTimeZoneInformation
CancelIo
GetFileSizeEx
ConnectNamedPipe
CreateNamedPipeW
GetNamedPipeInfo
LockResource
VerifyVersionInfoW
VerSetConditionMask
GetShortPathNameW
GetDateFormatW
WTSGetActiveConsoleSessionId
QueryInformationJobObject
IsProcessInJob
GlobalAlloc
GetPrivateProfileStringW
CreateSemaphoreW
SleepEx

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification
WTSQuerySessionInformationW
WTSQueryUserToken
WTSFreeMemory

wintrust

WinVerifyTrust
WTHelperProvDataFromStateData

userenv

FreeGPOListW
RegisterGPNotification
LeaveCriticalPolicySection
EnterCriticalPolicySection
DestroyEnvironmentBlock
CreateEnvironmentBlock
GetAppliedGPOListW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

usp10

ScriptXtoCP
ScriptCPtoX
ScriptLayout
ScriptJustify
ScriptStringAnalyse
ScriptStringFree
ScriptItemize
ScriptFreeCache
ScriptShape
ScriptGetFontProperties
ScriptStringOut
ScriptPlace

psapi

GetModuleFileNameExW
QueryWorkingSet
GetProcessMemoryInfo
EnumProcessModules
GetMappedFileNameW

winmm

timeKillEvent
waveOutGetNumDevs
waveInGetNumDevs
waveInMessage
waveOutPause
waveInUnprepareHeader
waveInAddBuffer
waveInStart
waveInReset
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
waveInPrepareHeader
waveInClose
waveInOpen
waveInGetDevCapsW
waveOutPrepareHeader
timeSetEvent
waveOutReset
waveOutClose
waveOutWrite
waveOutOpen
waveOutRestart
timeGetTime
waveOutUnprepareHeader

shlwapi

SHGetValueA
PathFileExistsW
UrlCreateFromPathW
PathFileExistsA
PathFindFileNameW
SHDeleteEmptyKeyW
PathIsUNCA
UrlCreateFromPathA
PathFindExtensionW
PathIsUNCW
SHStrDupW
SHDeleteKeyW
SHCopyKeyW
PathGetCharTypeW
PathRemoveExtensionW

user32

IsZoomed
SetLayeredWindowAttributes
LoadCursorW
FillRect
EnumDisplayDevicesW
GetProcessWindowStation
OpenWindowStationA
SetProcessWindowStation
CloseWindowStation
CharNextW
PostThreadMessageW
DestroyIcon
OpenInputDesktop
GetUserObjectInformationW
CloseDesktop
GetLastInputInfo
GetWindowRect
MonitorFromRect
IntersectRect
EqualRect
GetWindowThreadProcessId
SendMessageTimeoutW
IsWindow
EnumThreadWindows
FindWindowExW
LoadIconW
IsWindowVisible
SetForegroundWindow
GetForegroundWindow
GetParent
GetAncestor
GetGuiResources
PeekMessageW
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageW
UnregisterDeviceNotification
RegisterDeviceNotificationW
FindWindowW
MonitorFromWindow
TrackMouseEvent
SetWindowRgn
AllowSetForegroundWindow
GetDC
EnumDisplayMonitors
GetDesktopWindow
ReleaseDC
SystemParametersInfoW
RegisterClassExW
CreateWindowExW
SetWindowLongW
GetWindowLongW
DefWindowProcW
DestroyWindow
UnregisterClassW
IsRectEmpty
GetUpdateRect
EndPaint
ShowWindow
ReleaseCapture
GetWindowRgn
GetMessageTime
ClientToScreen
GetClientRect
GetKeyState
MapWindowPoints
EnumChildWindows
SetParent
IsChild
GetActiveWindow
GetSystemMetrics
NotifyWinEvent
GetSysColor
CopyRect
OffsetRect
RedrawWindow
EnableMenuItem
SendMessageW
EnableWindow
GetWindow
SetWindowPos
SetWindowPlacement
IsIconic
FlashWindowEx
SetWindowTextW
UpdateLayeredWindow
ValidateRect
UnhookWindowsHookEx
CallNextHookEx
GetWindowPlacement
SetCapture
IsWindowEnabled
SetWindowsHookExW
GetMessagePos
GetSystemMenu
InvalidateRect
UnionRect
GetWindowDC
SetRectEmpty
AdjustWindowRectEx
SetFocus
MessageBoxW
wsprintfW
WaitForInputIdle
PostMessageW
MsgWaitForMultipleObjectsEx
CallMsgFilterW
GetQueueStatus
WaitMessage
KillTimer
PostQuitMessage
SetTimer
MoveWindow
GetShellWindow
RegisterClipboardFormatW
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetClipboardSequenceNumber
IsClipboardFormatAvailable
CreateIconIndirect
DrawIconEx
GetIconInfo
LoadImageW
TrackPopupMenu
GetClassNameW
UnregisterHotKey
GetMessageW
SendInput
RegisterHotKey
MapVirtualKeyW
WindowFromPoint
GetKeyboardLayout
DestroyCaret
GetKeyboardState
SetCaretPos
CreateCaret
GetKeyboardLayoutList
GetMessageExtraInfo
ScreenToClient
BeginPaint
GetClassInfoExW
GetCursorPos
MonitorFromPoint
GetWindowInfo
GetCursor
GetPropW
RemovePropW
SetWindowLongA
DefWindowProcA
SetPropW
RealGetWindowClassW
RegisterClassW
EndDialog
SendMessageCallbackW
GetDoubleClickTime
GetMenuInfo
EndMenu
GetSubMenu
GetMenuState
SetMenuInfo
CreatePopupMenu
DestroyMenu
DrawTextExW
GetComboBoxInfo
CopyImage
GetCursorInfo
SetThreadDesktop
SetRect
EnumDisplaySettingsW
MessageBoxA
GetAsyncKeyState
GetCaretBlinkTime
DrawFrameControl
DrawFocusRect
InflateRect
FrameRect
GetSysColorBrush
DrawEdge
InvertRect
DrawTextW
GetWindowTextW
GetDlgItem
CreateDialogIndirectParamW
RegisterWindowMessageW
LoadAcceleratorsW
GetFocus
CopyAcceleratorTableW
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
GetMenuItemCount
DeferWindowPos
EndDeferWindowPos
BeginDeferWindowPos
GetWindowTextLengthW
UpdateWindow
HideCaret
ShowCaret
PtInRect
CallWindowProcW
GetCaretPos
ActivateKeyboardLayout
MessageBeep
EnumWindows
GetClassLongW
IsHungAppWindow
SendNotifyMessageW
SetScrollInfo
GetUpdateRgn
ScrollWindowEx
ClipCursor
ShowCursor
SetCursorPos
RealChildWindowFromPoint
GetClipCursor
ScrollDC
AttachThreadInput
GetCapture
CharUpperW
SetCursor
GetThreadDesktop
UnregisterClassA
GetMonitorInfoW

gdi32

GetEnhMetaFileHeader
SetWorldTransform
GdiComment
GetEnhMetaFileBits
PlayEnhMetaFile
CloseEnhMetaFile
SetEnhMetaFileBits
GetEnhMetaFileW
CreateEnhMetaFileW
DeleteEnhMetaFile
SetGraphicsMode
CreateDIBSection
GetStockObject
SelectObject
DeleteObject
EnumEnhMetaFile
ExtEscape
PlayEnhMetaFileRecord
BitBlt
SaveDC
EndPage
ModifyWorldTransform
Rectangle
SetAbortProc
StartDocW
CreateDCW
EndDoc
DeleteDC
CancelDC
CreateDCA
SetPixelFormat
ChoosePixelFormat
SwapBuffers
GetBkColor
GetBitmapBits
GetICMProfileW
GetFontData
GetDeviceCaps
GetCurrentObject
GetObjectW
CreateCompatibleDC
CreatePolygonRgn
RestoreDC
PatBlt
SetICMMode
GetRegionData
PtInRegion
MoveToEx
LineTo
CreateRoundRectRgn
RoundRect
StretchBlt
GetCharWidthI
EnumFontFamiliesW
SetRectRgn
CombineRgn
SetDIBits
CreateBitmap
SetDIBitsToDevice
CreateCompatibleBitmap
GetTextExtentPoint32W
CreateFontW
RemoveFontMemResourceEx
GetOutlineTextMetricsW
GetTextExtentPointI
GetFontUnicodeRanges
GetCharABCWidthsW
AddFontMemResourceEx
GetTextFaceW
EnumFontFamiliesExW
GetGlyphOutlineW
SetTextAlign
GetGlyphIndicesW
StrokePath
ExtCreatePen
SetMiterLimit
ExtTextOutW
CreatePen
GetStretchBltMode
GetTextColor
StrokeAndFillPath
BeginPath
SetTextColor
AbortPath
SetBrushOrgEx
SetDCBrushColor
SetBkColor
SetArcDirection
SetBkMode
SelectClipRgn
EndPath
SetDCPenColor
SetPolyFillMode
SetStretchBltMode
PolyBezier
SetROP2
PathToRegion
GdiFlush
GdiAlphaBlend
GetTextMetricsW
SetMapMode
GetRgnBox
CreateRectRgn
CreateRectRgnIndirect
EqualRgn
ExcludeClipRect
CreateFontIndirectW
CreateSolidBrush
RectInRegion
GetWorldTransform
StretchDIBits
StartPage

advapi32

RegDeleteValueW
RegOverridePredefKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
CryptHashData
CryptImportKey
CryptGenKey
CryptExportKey
CryptDestroyKey
CryptAcquireContextW
OpenEventLogW
ReadEventLogW
CloseEventLog
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidW
RegEnumValueW
RegNotifyChangeKeyValue
GetSidSubAuthority
GetSidSubAuthorityCount
CreateProcessAsUserW
GetTraceEnableFlags
GetTraceLoggerHandle
TraceEvent
UnregisterTraceGuids
GetTraceEnableLevel
RegisterTraceGuidsW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegOpenKeyExA
RegQueryValueExA
CryptContextAddRef
CryptReleaseContext
CryptDestroyHash
CryptSignHashW
CryptSetHashParam
CryptGetHashParam
CryptCreateHash
SetFileSecurityW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetFileSecurityW
ConvertSecurityDescriptorToStringSecurityDescriptorW
GetUserNameW

ole32

OleUninitialize
OleInitialize
StringFromCLSID
RegisterDragDrop
ReleaseStgMedium
OleDuplicateData
CoSetProxyBlanket
CoCreateGuid
StringFromGUID2
RevokeDragDrop
CreateStreamOnHGlobal
GetHGlobalFromStream
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
CoInitializeEx
CoTaskMemFree
CLSIDFromString
PropVariantClear
CoCreateInstance
DoDragDrop

oleaut32

SafeArrayGetVartype
SystemTimeToVariantTime
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnlock
SafeArrayLock
SafeArrayDestroy
SafeArrayRedim
SafeArrayCreate
SysFreeString
VariantTimeToSystemTime
VarUI4FromStr
VariantClear
VariantInit
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocString

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

comctl32

InitCommonControlsEx

secur32

CompleteAuthToken
AcquireCredentialsHandleA
InitializeSecurityContextA
InitializeSecurityContextW
QuerySecurityPackageInfoW
FreeCredentialsHandle
DeleteSecurityContext
FreeContextBuffer
AcquireCredentialsHandleW

rpcrt4

UuidToStringW
UuidCreateSequential
RpcStringFreeW

Exports

Exports

ChromeMain
RelaunchChromeBrowserWithNewCommandLineIfNeeded
_ovly_debug_event
nacl_global_xlate_base
nacl_thread_ids
nacl_user

Sections

.text
Size: 31.2MB - Virtual size: 31.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 493KB - Virtual size: 897KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unwante
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/chrome_100_percent.pak
.js
Chrome-bin/28.0.1500.75/chrome_frame_helper.dll
.dll windows:5 windows x86 arch:x86

df3285f47c49f600099b0ffc32e229c0

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:09:db:bc:73:2d:4b:58:f7:a8:8e:ba:cf:32:34:17
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

09-12-2011 00:00

Not After

06-02-2014 23:59

Subject

CN=LLC Mail.Ru,O=LLC Mail.Ru,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ab:9e:56:9f:f0:eb:3d:0c:9e:85:3c:5a:83:fb:8c:54:20:12:80:51
Signer

Actual PE Digest

ab:9e:56:9f:f0:eb:3d:0c:9e:85:3c:5a:83:fb:8c:54:20:12:80:51

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\chrome_frame_helper.dll.pdb

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId
RaiseException
FlushFileBuffers
CloseHandle
CreateFileW
IsProcessorFeaturePresent
WriteConsoleW
SetStdHandle
GetStringTypeW
GetModuleFileNameW
lstrcmpiW
EncodePointer
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
HeapAlloc
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
WriteFile
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LCMapStringW

ole32

CoCreateInstance
StringFromGUID2

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear

user32

SetWinEventHook
UnhookWinEvent
GetWindowThreadProcessId
GetParent
GetWindowTextW
GetClassNameW
RegisterWindowMessageW
SendMessageW
IsWindow
EnumChildWindows

shlwapi

PathFindFileNameW

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

Exports

Exports

StartUserModeBrowserInjection
StopUserModeBrowserInjection

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/chrome_frame_helper.exe
.exe windows:5 windows x86 arch:x86

96c995cdfd7bb49e723aeecefa202113

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\chrome_frame_helper.exe.pdb

Imports

kernel32

CloseHandle
lstrcmpiW
GetProcAddress
LocalAlloc
LoadLibraryW
GetModuleHandleW
CreateProcessW
FreeLibrary
GetCommandLineW
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
FlushFileBuffers
WaitForSingleObject
ReleaseSemaphore
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
GetProcessId
VirtualQueryEx
CreateFileW
GetCurrentProcess
InterlockedDecrement
DeleteCriticalSection
RtlCaptureContext
CreateThread
CreateSemaphoreW
InitializeCriticalSection
InterlockedIncrement
WaitNamedPipeW
GetLastError
WaitForMultipleObjects
SetEvent
ResetEvent
WriteFile
TransactNamedPipe
GetCurrentProcessId
SetNamedPipeHandleState
GetModuleFileNameW
LocalFree
GetTempPathW
RegisterWaitForSingleObject
CreateEventW
UnregisterWaitEx
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
ExitProcess
RaiseException
HeapFree
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
HeapAlloc
Sleep
InterlockedExchange
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
RtlUnwind
HeapSize
HeapReAlloc
LoadLibraryA

advapi32

RegOpenKeyExW
GetTokenInformation
OpenProcessToken
RegQueryValueExW
RegNotifyChangeKeyValue
RegCloseKey
ConvertSidToStringSidW

user32

GetMessageW
PostQuitMessage
UnregisterClassW
PostMessageW
EnumWindows
TranslateMessage
RegisterClassExW
GetWindowTextW
CreateWindowExW
DefWindowProcW
DispatchMessageW
GetClassNameW

ole32

StringFromGUID2

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/chrome_launcher.exe
.exe windows:5 windows x86 arch:x86

47a63892af948f551e6bde17632dc115

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\chrome_launcher.exe.pdb

Imports

shlwapi

PathAppendW
PathFileExistsW
PathRemoveFileSpecW
PathGetArgsW

kernel32

LocalFree
GetCurrentProcessId
GetExitCodeProcess
WaitForSingleObject
CloseHandle
lstrlenW
GetModuleFileNameW
CreateProcessW
lstrlenA
GetCommandLineW
LocalAlloc
GetProcAddress
FreeLibrary
InterlockedExchange
GetLastError
LoadLibraryA
RaiseException
ReleaseSemaphore
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
GetProcessId
VirtualQueryEx
CreateFileW
GetCurrentProcess
InterlockedDecrement
DeleteCriticalSection
RtlCaptureContext
LoadLibraryW
CreateThread
CreateSemaphoreW
InitializeCriticalSection
InterlockedIncrement
WaitNamedPipeW
WaitForMultipleObjects
SetEvent
ResetEvent
WriteFile
TransactNamedPipe
SetNamedPipeHandleState
GetTempPathW
IsDebuggerPresent
SetFilePointer
GetTickCount
SetLastError
Sleep
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
GetSystemTimeAsFileTime
TerminateProcess
GetStdHandle
HeapSetInformation
QueryPerformanceCounter
WideCharToMultiByte
MultiByteToWideChar
EncodePointer
DecodePointer
UnhandledExceptionFilter
GetStartupInfoW
ExitProcess
HeapFree
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapReAlloc
RtlUnwind
GetCPInfo
LCMapStringW
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetStringTypeW
HeapSize

advapi32

ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance

winmm

timeGetTime

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/chrome_touch_100_percent.pak
.js
Chrome-bin/28.0.1500.75/d3dcompiler_46.dll
.dll windows:6 windows x86 arch:x86

876b48ac5a1cad7160b32c8df9ab9938

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:09:db:bc:73:2d:4b:58:f7:a8:8e:ba:cf:32:34:17
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

09-12-2011 00:00

Not After

06-02-2014 23:59

Subject

CN=LLC Mail.Ru,O=LLC Mail.Ru,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e5:7a:17:c6:92:b3:05:15:01:cb:16:53:25:2e:4c:43:b6:42:04:37
Signer

Actual PE Digest

e5:7a:17:c6:92:b3:05:15:01:cb:16:53:25:2e:4c:43:b6:42:04:37

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_46.pdb

Imports

msvcrt

_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_amsg_exit
_XcptFilter
_vsnprintf
_strtoui64
sscanf
_isnan
strtoul
isxdigit
atof
setlocale
_strdup
_mbstrlen
_vsnwprintf
ceil
modf
strrchr
isalnum
_finite
_clearfp
_controlfp
malloc
_strnicmp
_fpclass
_purecall
strncmp
isspace
strstr
strchr
free
_stricmp
memmove
qsort
isalpha
toupper
atoi
isdigit
tolower
??2@YAPAXI@Z
getenv
??3@YAXPAX@Z
_except_handler4_common
wcsncpy_s
_wcsicmp
memcpy
memset
fclose
strcpy_s
strcat_s
bsearch
_CxxThrowException
_snwprintf_s
wcschr
iswdigit
__unDName
fread
fseek
_wfsopen
vsprintf_s
strncpy_s
wcstol
_wcsnicmp
_wsplitpath_s
towlower
wcscpy_s
??_U@YAPAXI@Z
??_V@YAXPAX@Z
swprintf_s
wcsncat_s
wcsrchr
_wmakepath_s
time
_wfullpath
_wcsdup
_wgetenv
_chsize
_close
_read
_write
_lseeki64
_get_osfhandle
_open_osfhandle
wcscat_s
ftell
sprintf_s
_mbscmp
_memicmp
wcsncmp
_wsopen
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
__CxxFrameHandler3
_ftol2
_ftol2_sse
floor

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW

kernel32

SetLastError
LeaveCriticalSection
EnterCriticalSection
LocalFree
LocalAlloc
GetVersion
InterlockedDecrement
InterlockedIncrement
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
LCMapStringW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlCaptureContext
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GetFileSize
CreateFileA
GetSystemInfo
VirtualAlloc
VirtualFree
DeleteCriticalSection
InitializeCriticalSection
GetFileAttributesW
SetFileAttributesW
CopyFileExW
DeleteFileW
GetFileType
DeviceIoControl
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
SetFilePointer
FlushViewOfFile
MapViewOfFileEx
GetCurrentProcessId
GetModuleFileNameA
DisableThreadLibraryCalls
CreateFileW
GetLastError
GetFileSizeEx
ReadFile
CloseHandle
WriteFile
WideCharToMultiByte
FreeLibrary
lstrcmpiA
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
HeapCreate
HeapDestroy
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
Sleep
TlsAlloc
InterlockedExchange
TlsSetValue
TlsGetValue
TlsFree
GetFullPathNameW
GetFullPathNameA
GetEnvironmentVariableA
LoadLibraryExW
GetProcAddress

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/delegate_execute.exe
.exe windows:5 windows x86 arch:x86

2a3fe2c2115661d3c2d8f941fc3d8a89

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\delegate_execute.exe.pdb

Imports

wininet

InternetCrackUrlW

kernel32

GetTempPathW
WaitForSingleObject
Sleep
GetCurrentThreadId
CreateThread
OpenProcess
SetEvent
GetCommandLineW
OpenMutexW
CreateProcessW
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
InterlockedDecrement
LockResource
InterlockedIncrement
CloseHandle
lstrcmpiW
GetModuleHandleW
GetProcAddress
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
SetEnvironmentVariableW
CreateEventW
SetEnvironmentVariableA
CompareStringW
GetDriveTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
WriteConsoleW
GetTimeZoneInformation
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
GetLocaleInfoW
HeapCreate
IsProcessorFeaturePresent
LCMapStringW
GetCPInfo
RtlUnwind
GetFileType
SetStdHandle
GetProcessHeap
GetConsoleMode
GetConsoleCP
GetFullPathNameW
HeapReAlloc
ExitProcess
GetStartupInfoW
HeapFree
HeapAlloc
UnhandledExceptionFilter
DecodePointer
EncodePointer
LocalAlloc
LocalFree
InterlockedExchange
LoadLibraryA
GetCurrentProcess
IsDebuggerPresent
GetTickCount
GetSystemTimeAsFileTime
VirtualQueryEx
TerminateProcess
ReadFile
GetStdHandle
GetProcessId
HeapSetInformation
GetCurrentProcessId
CreateDirectoryW
WriteFile
GetFileAttributesW
CreateFileW
GetCurrentDirectoryW
SetLastError
GetUserDefaultUILanguage
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetUserDefaultLangID
InterlockedCompareExchange
CreateMutexW
SetFilePointer
ReleaseMutex
InterlockedExchangeAdd
SetUnhandledExceptionFilter
GetNativeSystemInfo
GetVersionExW
QueryPerformanceCounter
GetSystemDirectoryW
GetWindowsDirectoryW
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
SetEndOfFile
FlushFileBuffers
ResetEvent
WaitForMultipleObjects
ReleaseSemaphore
RtlCaptureContext
LoadLibraryW
CreateSemaphoreW
InitializeCriticalSection
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
GlobalLock
GlobalUnlock
GetPrivateProfileStringW
WideCharToMultiByte

advapi32

RegQueryValueExW
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
ConvertSidToStringSidW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
OpenProcessToken

ole32

CoRegisterClassObject
CoInitializeEx
CoUninitialize
StringFromGUID2
CoRevokeClassObject
CoReleaseServerProcess
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoResumeClassObjects
CoTaskMemFree
CoAddRefServerProcess
ReleaseStgMedium

oleaut32

SysFreeString
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
VarUI4FromStr

user32

RegisterClipboardFormatW
PostThreadMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CharUpperW
GetAsyncKeyState
FindWindowExW
GetWindowThreadProcessId
IsImmersiveProcess
AllowSetForegroundWindow
CharNextW
MessageBoxW
GetSystemMetrics

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

winmm

timeGetTime

shlwapi

PathIsUNCA
PathRemoveExtensionW
PathFindFileNameW
UrlCreateFromPathA
PathFindExtensionW
PathFileExistsA
UrlCreateFromPathW
PathIsUNCW
PathFileExistsW

Sections

.text
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/ffmpegsumo.dll
.dll windows:5 windows x86 arch:x86

820528e2c4bcb1f367f64ce2c2028928

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:09:db:bc:73:2d:4b:58:f7:a8:8e:ba:cf:32:34:17
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

09-12-2011 00:00

Not After

06-02-2014 23:59

Subject

CN=LLC Mail.Ru,O=LLC Mail.Ru,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

56:a2:2e:e2:09:ee:49:95:c7:d0:86:b7:0e:84:5d:07:17:c5:de:64
Signer

Actual PE Digest

56:a2:2e:e2:09:ee:49:95:c7:d0:86:b7:0e:84:5d:07:17:c5:de:64

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\amigo_28\src\build\Release\ffmpegsumo.dll.pdb

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
CreateEventA
CreateSemaphoreA
ResetEvent
ReleaseSemaphore
SetEvent
GetProcAddress
DeleteCriticalSection
GetProcessAffinityMask
GetCurrentProcess
GetConsoleScreenBufferInfo
GetStdHandle
SetConsoleTextAttribute
GetSystemTimeAsFileTime
Sleep
MultiByteToWideChar
InitializeCriticalSection
WaitForSingleObject
GetModuleHandleA
CloseHandle
ExitThread
GetCurrentThreadId
GetLastError
CreateThread
GetTimeFormatA
GetDateFormatA
GetFileType
CreateFileW
WriteConsoleW
GetModuleFileNameW
DecodePointer
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
ExitProcess
EncodePointer
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
WideCharToMultiByte
LCMapStringW
HeapFree
RaiseException
HeapAlloc
HeapSize
HeapQueryInformation
HeapReAlloc
GetTimeZoneInformation
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
ReadFile
LoadLibraryW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
RtlUnwind
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA

Exports

Exports

av_bitstream_filter_close
av_bitstream_filter_filter
av_bitstream_filter_init
av_destruct_packet
av_dict_get
av_dict_set
av_dup_packet
av_free
av_free_packet
av_get_bytes_per_sample
av_image_check_size
av_image_fill_linesizes
av_index_search_timestamp
av_init_packet
av_lockmgr_register
av_log_set_level
av_malloc
av_new_packet
av_packet_get_side_data
av_packet_split_side_data
av_rdft_calc
av_rdft_end
av_rdft_init
av_read_frame
av_register_all
av_register_bitstream_filter
av_rescale_q
av_samples_get_buffer_size
av_seek_frame
avcodec_align_dimensions
avcodec_alloc_context3
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio4
avcodec_decode_video2
avcodec_find_decoder
avcodec_flush_buffers
avcodec_get_frame_defaults
avcodec_open2
avformat_alloc_context
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_open_input
avio_alloc_context
avio_close
avpriv_ac3_channel_layout_tab
avpriv_cga_font
avpriv_mpa_bitrate_tab
avpriv_mpa_freq_tab
avpriv_mpeg4audio_sample_rates
avpriv_vga16_font
ff_raw_pix_fmt_tags

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/icudt.dll
.dll windows:5 windows x86 arch:x86

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:09:db:bc:73:2d:4b:58:f7:a8:8e:ba:cf:32:34:17
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

09-12-2011 00:00

Not After

06-02-2014 23:59

Subject

CN=LLC Mail.Ru,O=LLC Mail.Ru,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

38:6f:08:6c:32:ab:da:b7:57:6d:69:05:39:ac:5c:5d:6d:8a:74:bf
Signer

Actual PE Digest

38:6f:08:6c:32:ab:da:b7:57:6d:69:05:39:ac:5c:5d:6d:8a:74:bf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

icudt46_dat

Sections

.rdata
Size: 9.5MB - Virtual size: 9.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/libegl.dll
.dll windows:5 windows x86 arch:x86

4d25ca82ddb3aa4e439753a16444c77e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:09:db:bc:73:2d:4b:58:f7:a8:8e:ba:cf:32:34:17
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

09-12-2011 00:00

Not After

06-02-2014 23:59

Subject

CN=LLC Mail.Ru,O=LLC Mail.Ru,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

9b:c5:dd:8b:70:fd:c5:09:3e:f5:ee:51:45:f3:06:19:7c:27:f4:bd
Signer

Actual PE Digest

9b:c5:dd:8b:70:fd:c5:09:3e:f5:ee:51:45:f3:06:19:7c:27:f4:bd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\libEGL.dll.pdb

Imports

d3d9

D3DPERF_BeginEvent
D3DPERF_SetMarker
D3DPERF_EndEvent
D3DPERF_GetStatus
Direct3DCreate9

kernel32

IsProcessorFeaturePresent
CloseHandle
CreateFileW
GetLastError
SetLastError
GetCurrentThreadId
GetCurrentProcessId
TlsFree
TlsSetValue
LocalAlloc
TlsAlloc
LocalFree
TlsGetValue
GetVersion
Sleep
GetModuleHandleW
FreeLibrary
GetModuleHandleExW
GetProcAddress
WriteConsoleW
SetStdHandle
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LoadLibraryW
HeapReAlloc
GetConsoleMode
GetConsoleCP
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
WriteFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
RtlUnwind
GetCommandLineA
RaiseException
FlushFileBuffers
HeapFree
HeapAlloc
HeapSize
ExitProcess
InterlockedIncrement
InterlockedDecrement
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage

user32

SetPropW
GetPropW
InvalidateRect
GetClientRect
CallWindowProcW
GetWindowThreadProcessId
RemovePropW
IsWindow
CreateWindowExW
DestroyWindow
SetWindowLongW

libglesv2

ord147
ord145
ord144
ord158
ord148
ord146

Exports

Exports

eglBindAPI
eglBindTexImage
eglChooseConfig
eglCopyBuffers
eglCreateContext
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreateWindowSurface
eglDestroyContext
eglDestroySurface
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetProcAddress
eglInitialize
eglMakeCurrent
eglQueryAPI
eglQueryContext
eglQueryString
eglQuerySurface
eglReleaseTexImage
eglReleaseThread
eglSurfaceAttrib
eglSwapBuffers
eglSwapInterval
eglTerminate
eglWaitClient
eglWaitGL
eglWaitNative

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/libglesv2.dll
.dll windows:5 windows x86 arch:x86

a30062028392cc713e7a5cc036ad1d99

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:09:db:bc:73:2d:4b:58:f7:a8:8e:ba:cf:32:34:17
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

09-12-2011 00:00

Not After

06-02-2014 23:59

Subject

CN=LLC Mail.Ru,O=LLC Mail.Ru,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

de:96:b4:9d:bc:5d:55:ea:0d:eb:2b:2d:71:05:4c:4a:2c:47:fd:df
Signer

Actual PE Digest

de:96:b4:9d:bc:5d:55:ea:0d:eb:2b:2d:71:05:4c:4a:2c:47:fd:df

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\libGLESv2.dll.pdb

Imports

d3d9

D3DPERF_BeginEvent
D3DPERF_SetMarker
D3DPERF_EndEvent
D3DPERF_GetStatus

kernel32

IsProcessorFeaturePresent
SetEndOfFile
CreateFileW
ReadFile
CreateFileA
TlsFree
TlsSetValue
LocalAlloc
TlsAlloc
LocalFree
TlsGetValue
GetTempFileNameA
GetTempPathA
Sleep
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
GetProcAddress
GetModuleHandleW
ExitProcess
HeapAlloc
HeapReAlloc
RaiseException
LCMapStringW
GetCPInfo
GetProcessHeap
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
SetLastError
CloseHandle
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
HeapCreate
HeapDestroy
HeapSize
SetHandleCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
SetFilePointer
SetStdHandle
FlushFileBuffers
WriteConsoleW

Exports

Exports

glActiveTexture
glAttachShader
glBeginQueryEXT
glBindAttribLocation
glBindBuffer
glBindFramebuffer
glBindRenderbuffer
glBindTexture
glBlendColor
glBlendEquation
glBlendEquationSeparate
glBlendFunc
glBlendFuncSeparate
glBlitFramebufferANGLE
glBufferData
glBufferSubData
glCheckFramebufferStatus
glClear
glClearColor
glClearDepthf
glClearStencil
glColorMask
glCompileShader
glCompressedTexImage2D
glCompressedTexSubImage2D
glCopyTexImage2D
glCopyTexSubImage2D
glCreateProgram
glCreateShader
glCullFace
glDeleteBuffers
glDeleteFencesNV
glDeleteFramebuffers
glDeleteProgram
glDeleteQueriesEXT
glDeleteRenderbuffers
glDeleteShader
glDeleteTextures
glDepthFunc
glDepthMask
glDepthRangef
glDetachShader
glDisable
glDisableVertexAttribArray
glDrawArrays
glDrawArraysInstancedANGLE
glDrawElements
glDrawElementsInstancedANGLE
glEnable
glEnableVertexAttribArray
glEndQueryEXT
glFinish
glFinishFenceNV
glFlush
glFramebufferRenderbuffer
glFramebufferTexture2D
glFrontFace
glGenBuffers
glGenFencesNV
glGenFramebuffers
glGenQueriesEXT
glGenRenderbuffers
glGenTextures
glGenerateMipmap
glGetActiveAttrib
glGetActiveUniform
glGetAttachedShaders
glGetAttribLocation
glGetBooleanv
glGetBufferParameteriv
glGetError
glGetFenceivNV
glGetFloatv
glGetFramebufferAttachmentParameteriv
glGetGraphicsResetStatusEXT
glGetIntegerv
glGetProgramBinaryOES
glGetProgramInfoLog
glGetProgramiv
glGetQueryObjectuivEXT
glGetQueryivEXT
glGetRenderbufferParameteriv
glGetShaderInfoLog
glGetShaderPrecisionFormat
glGetShaderSource
glGetShaderiv
glGetString
glGetTexParameterfv
glGetTexParameteriv
glGetTranslatedShaderSourceANGLE
glGetUniformLocation
glGetUniformfv
glGetUniformiv
glGetVertexAttribPointerv
glGetVertexAttribfv
glGetVertexAttribiv
glGetnUniformfvEXT
glGetnUniformivEXT
glHint
glIsBuffer
glIsEnabled
glIsFenceNV
glIsFramebuffer
glIsProgram
glIsQueryEXT
glIsRenderbuffer
glIsShader
glIsTexture
glLineWidth
glLinkProgram
glPixelStorei
glPolygonOffset
glProgramBinaryOES
glReadPixels
glReadnPixelsEXT
glReleaseShaderCompiler
glRenderbufferStorage
glRenderbufferStorageMultisampleANGLE
glSampleCoverage
glScissor
glSetFenceNV
glShaderBinary
glShaderSource
glStencilFunc
glStencilFuncSeparate
glStencilMask
glStencilMaskSeparate
glStencilOp
glStencilOpSeparate
glTestFenceNV
glTexImage2D
glTexImage3DOES
glTexParameterf
glTexParameterfv
glTexParameteri
glTexParameteriv
glTexStorage2DEXT
glTexSubImage2D
glUniform1f
glUniform1fv
glUniform1i
glUniform1iv
glUniform2f
glUniform2fv
glUniform2i
glUniform2iv
glUniform3f
glUniform3fv
glUniform3i
glUniform3iv
glUniform4f
glUniform4fv
glUniform4i
glUniform4iv
glUniformMatrix2fv
glUniformMatrix3fv
glUniformMatrix4fv
glUseProgram
glValidateProgram
glVertexAttrib1f
glVertexAttrib1fv
glVertexAttrib2f
glVertexAttrib2fv
glVertexAttrib3f
glVertexAttrib3fv
glVertexAttrib4f
glVertexAttrib4fv
glVertexAttribDivisorANGLE
glVertexAttribPointer
glViewport

Sections

.text
Size: 427KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/metro_driver.dll
.dll windows:5 windows x86 arch:x86

c83a0f0f62d32d6ea4ad93471072f7b4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:09:db:bc:73:2d:4b:58:f7:a8:8e:ba:cf:32:34:17
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

09-12-2011 00:00

Not After

06-02-2014 23:59

Subject

CN=LLC Mail.Ru,O=LLC Mail.Ru,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

9d:21:a3:a6:24:e4:4a:ec:98:2b:d6:6b:45:c1:f2:25:77:c5:b2:54
Signer

Actual PE Digest

9d:21:a3:a6:24:e4:4a:ec:98:2b:d6:6b:45:c1:f2:25:77:c5:b2:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\metro_driver.dll.pdb

Imports

d2d1

ord1

d3d11

D3D11CreateDevice

kernel32

CreateThread
SetEnvironmentVariableA
CompareStringW
GetDriveTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
LocalFree
GetStringTypeW
LoadLibraryW
WriteConsoleW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
SetHandleCount
HeapSize
HeapDestroy
HeapCreate
GetLocaleInfoW
IsProcessorFeaturePresent
LCMapStringW
GetCPInfo
RtlUnwind
GetFileType
SetStdHandle
HeapAlloc
WaitForSingleObject
CloseHandle
GetCurrentThreadId
Sleep
GetFullPathNameW
HeapReAlloc
ExitProcess
lstrcmpiA
GetCurrentProcessId
RaiseException
GetUserDefaultLCID
GetConsoleMode
GetConsoleCP
GetCommandLineA
LocalAlloc
GetProcAddress
FreeLibrary
InterlockedExchange
GetLastError
LoadLibraryA
CreateMutexW
SetFilePointer
CreateProcessW
GetTickCount
FormatMessageA
WriteFile
GetModuleFileNameW
CreateFileW
SetLastError
GetModuleHandleA
OutputDebugStringA
ReleaseMutex
DeleteFileW
InterlockedCompareExchange
RtlCaptureStackBackTrace
GetCommandLineW
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedExchangeAdd
SetUnhandledExceptionFilter
SetEvent
CreateEventW
GetCurrentProcess
MapViewOfFile
UnmapViewOfFile
GetFileAttributesW
GetTempPathW
GetCurrentDirectoryW
CreateFileMappingW
GetSystemDirectoryW
GetWindowsDirectoryW
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
QueryPerformanceCounter
HeapFree
QueryPerformanceFrequency
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
GetNativeSystemInfo
GetModuleHandleW
GetVersionExW
GetModuleHandleExA
TerminateProcess
GetStdHandle
InterlockedIncrement
FlushFileBuffers
InitializeCriticalSection
InterlockedDecrement
GetThreadLocale
GetACP
CreateFileA
GetTimeZoneInformation
WideCharToMultiByte
MultiByteToWideChar
EncodePointer
DecodePointer
UnhandledExceptionFilter
GetSystemTimeAsFileTime

ole32

CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoUninitialize

user32

MessageBoxW
DispatchMessageW
DefWindowProcW
CreateWindowExW
MsgWaitForMultipleObjectsEx
RegisterHotKey
AnimateWindow
ShowWindow
SendMessageTimeoutW
FindWindowW
IsWindowVisible
IsWindowEnabled
GetCursorPos
PtInRect
ReleaseCapture
ScrollWindowEx
GetForegroundWindow
SendMessageW
SetWindowLongW
SetPropW
GetPropW
CallWindowProcW
GetWindowRect
SetWindowPos
MapVirtualKeyW
SendInput
RegisterWindowMessageW
EnumWindows
IsWindow
GetClassNameA
GetWindowLongW
GetWindowThreadProcessId
PostMessageW
PeekMessageW
CallMsgFilterW
RegisterClassExW
TranslateMessage
GetQueueStatus
WaitMessage
KillTimer
UnregisterClassW
PostQuitMessage
SetTimer
DestroyWindow

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsGetStringRawBuffer
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory
RoInitialize
RoUninitialize
RoActivateInstance

winmm

timeEndPeriod
timeGetTime
timeBeginPeriod

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegisterTraceGuidsW
GetTraceEnableLevel
UnregisterTraceGuids
TraceEvent
GetTraceLoggerHandle
GetTraceEnableFlags
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken

Exports

Exports

ActivateApplication
CancelNotification
CloseFrameWindow
DismissDialogBox
DisplayNotification
FlipFrameWindows
GetInitialSearchString
GetInitialUrl
GetLaunchType
GetMetroCommandLineSwitches
GetRootWindow
InitMetro
MetroEnablePrinting
MetroGetOpenFileName
MetroGetSaveFileName
MetroIsPinnedToStartScreen
MetroPinToStartScreen
MetroSetPrintPageContent
MetroSetPrintPageCount
MetroShowPrintUI
MetroUnPinFromStartScreen
MetroUnsnap
SetFrameWindow
SetFullscreen
ShowDialogBox

Sections

.text
Size: 553KB - Virtual size: 552KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/nacl64.exe
.exe windows:5 windows x64 arch:x64

c77b65ca4174bcdbe2844446ce7fe406

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\nacl64.exe.pdb

Imports

kernel32

LoadLibraryA
GetStdHandle
ResumeThread
GetModuleHandleW
GetLongPathNameW
IsProcessInJob
QueryInformationJobObject
GetCurrentProcessId
DuplicateHandle
OpenProcess
GetModuleFileNameW
GetTempPathW
GetLastError
GetEnvironmentVariableW
GetCommandLineW
CreateProcessW
CloseHandle
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
CreateRemoteThread
GetEnvironmentVariableA
GetFileInformationByHandle
GetExitCodeProcess
WaitForSingleObject
SizeofResource
LockResource
LoadResource
FindResourceW
DebugActiveProcess
GetProcessId
GetUserDefaultLCID
GetUserDefaultLangID
LeaveCriticalSection
ReleaseSemaphore
GetCurrentThreadId
EnterCriticalSection
VirtualQueryEx
CreateFileW
DeleteCriticalSection
FreeLibrary
RtlCaptureContext
GetProcAddress
LoadLibraryW
CreateThread
CreateSemaphoreW
InitializeCriticalSection
GetThreadContext
SuspendThread
WaitNamedPipeW
WaitForMultipleObjects
SetEvent
ResetEvent
WriteFile
TransactNamedPipe
SetNamedPipeHandleState
ExpandEnvironmentStringsW
CreateEventW
GetTickCount
ReleaseMutex
SetLastError
CreateMutexW
SetFilePointer
OutputDebugStringA
SetEnvironmentVariableW
lstrlenW
IsDebuggerPresent
GetNativeSystemInfo
GetVersionExW
GetFileAttributesW
SetCurrentDirectoryW
ReadFile
FindClose
GetCurrentDirectoryW
UnmapViewOfFile
MapViewOfFile
GetModuleHandleA
FindNextFileW
FindFirstFileW
QueryDosDeviceW
AllocConsole
AttachConsole
SetInformationJobObject
HeapSetInformation
GetModuleHandleExA
SetHandleInformation
GetSystemInfo
AssignProcessToJobObject
GetSystemTimeAsFileTime
RaiseException
SetThreadPriority
QueryPerformanceCounter
QueryPerformanceFrequency
SystemTimeToFileTime
FileTimeToSystemTime
LocalAlloc
GetLocaleInfoW
GetUserDefaultUILanguage
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
GetSystemDirectoryW
GetWindowsDirectoryW
RtlCaptureStackBackTrace
TlsAlloc
TlsGetValue
TlsFree
TlsSetValue
UnregisterWaitEx
RegisterWaitForSingleObject
GetQueuedCompletionStatus
CreateIoCompletionPort
PostQueuedCompletionStatus
GetSystemPowerStatus
GetModuleHandleExW
SetEndOfFile
FlushFileBuffers
GetCurrentThread
ConnectNamedPipe
CancelIo
CreateNamedPipeW
GetNamedPipeInfo
TerminateJobObject
SignalObjectAndWait
GetProcessHandleCount
VirtualFree
WriteProcessMemory
GetFileType
VirtualProtectEx
VirtualFreeEx
VirtualAllocEx
CreateJobObjectW
OpenEventW
SearchPathW
DebugBreak
ReadProcessMemory
SetThreadContext
ContinueDebugEvent
WaitForDebugEvent
VirtualProtect
VirtualAlloc
FlushInstructionCache
VirtualQuery
ExitProcess
SwitchToThread
MapViewOfFileEx
CreateFileA
GetSystemTime
FileTimeToLocalFileTime
PeekNamedPipe
DisconnectNamedPipe
GetNamedPipeHandleStateW
WideCharToMultiByte
MultiByteToWideChar
EncodePointer
DecodePointer
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
HeapFree
RtlUnwindEx
GetStartupInfoW
SetStdHandle
HeapAlloc
GetConsoleCP
GetConsoleMode
GetFullPathNameW
HeapReAlloc
GetProcessHeap
ExitThread
GetDriveTypeA
FindFirstFileExA
LCMapStringW
GetCPInfo
RtlPcToFileHeader
GetVersion
HeapCreate
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
WriteConsoleW
GetStringTypeW
GetFullPathNameA
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetDriveTypeW
CompareStringW
SetEnvironmentVariableA
FormatMessageW
CreateFileMappingW
LocalFree

advapi32

RegQueryInfoKeyW
RegQueryValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
ConvertSidToStringSidW
CreateProcessAsUserW
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
TraceEvent
CryptDestroyKey
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptSetHashParam
GetTokenInformation
OpenProcessToken
CryptCreateHash
SetEntriesInAclW
GetSecurityInfo
CreateWellKnownSid
CopySid
LookupPrivilegeValueW
EqualSid
DuplicateToken
DuplicateTokenEx
CreateRestrictedToken
SetThreadToken
ConvertStringSidToSidW
GetLengthSid
SetTokenInformation
RevertToSelf
RegDisablePredefinedCache
CryptAcquireContextW
CryptImportKey

user32

CharUpperW
MessageBoxW
GetUserObjectInformationW
GetThreadDesktop
SetProcessWindowStation
CreateDesktopW
GetProcessWindowStation
CreateWindowStationW
CloseDesktop
CloseWindowStation
SetWindowLongPtrW
GetWindowLongPtrW
RegisterClassExW
UnregisterClassW
MsgWaitForMultipleObjectsEx
WaitMessage
DefWindowProcW
SetTimer
GetQueueStatus
PostQuitMessage
PostMessageW
WaitForInputIdle
DestroyWindow
CreateWindowExW
wsprintfW
CallMsgFilterW
TranslateMessage
DispatchMessageW
KillTimer
PeekMessageW

userenv

CreateEnvironmentBlock
GetProfileType
DestroyEnvironmentBlock

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

ws2_32

recv
WSAStartup
WSACleanup
socket
htonl
WSAEventSelect
WSACreateEvent
WSAGetLastError
send
select
shutdown
WSACloseEvent
closesocket
setsockopt
accept
gethostbyname
ntohs
listen
bind
htons

winmm

timeGetDevCaps
timeGetTime
timeBeginPeriod
timeEndPeriod

ole32

CoInitializeEx
CoUninitialize
CoTaskMemFree

Exports

Exports

CrashForException
DumpProcess
DumpProcessWithoutCrash
InjectDumpForHangDebugging
InjectDumpProcessWithoutCrash
SetActiveURL
SetClientId
SetCommandLine2
SetCrashKeyValuePair
SetExtensionID
SetGpuInfo
SetNumberOfExtensions
SetNumberOfViews
SetPrinterInfo
_ovly_debug_event
nacl_global_xlate_base
nacl_thread_ids
nacl_user

Sections

.text
Size: 705KB - Virtual size: 705KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 987KB - Virtual size: 987KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 33B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/nacl_irt_x86_32.nexe
.elf linux x86
Chrome-bin/28.0.1500.75/nacl_irt_x86_64.nexe
.elf linux x64
Chrome-bin/28.0.1500.75/npchrome_frame.dll
.dll regsvr32 windows:5 windows x86 arch:x86

145f4ffb7af0d6e360a9e73958c6ce7a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:09:db:bc:73:2d:4b:58:f7:a8:8e:ba:cf:32:34:17
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

09-12-2011 00:00

Not After

06-02-2014 23:59

Subject

CN=LLC Mail.Ru,O=LLC Mail.Ru,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

49:ea:20:82:5d:a0:94:7b:f1:dd:21:8f:c3:ca:0f:e6:22:c7:b6:af
Signer

Actual PE Digest

49:ea:20:82:5d:a0:94:7b:f1:dd:21:8f:c3:ca:0f:e6:22:c7:b6:af

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\npchrome_frame.dll.pdb

Imports

kernel32

GetSystemTime
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
lstrlenA
FreeLibrary
GetCurrentThreadId
LocalFree
GetFileSizeEx
TransactNamedPipe
CreateSemaphoreW
RtlCaptureContext
ReleaseSemaphore
GetFileSize
SetEnvironmentVariableW
GetUserDefaultUILanguage
OpenFileMappingW
LocalAlloc
QueueUserWorkItem
SetNamedPipeHandleState
OutputDebugStringA
LoadLibraryW
MulDiv
FlushInstructionCache
MultiByteToWideChar
SetLastError
CloseHandle
GetCurrentThread
GetCurrentProcess
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
lstrlenW
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
InterlockedPopEntrySList
VirtualFree
InterlockedPushEntrySList
SetEnvironmentVariableA
CompareStringW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
PeekNamedPipe
GetFullPathNameA
GetStringTypeW
WriteConsoleW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
SetHandleCount
IsValidCodePage
GetOEMCP
HeapSize
IsProcessorFeaturePresent
RtlUnwind
GetCPInfo
LCMapStringW
ExitThread
FindFirstFileExW
GetDriveTypeW
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
GetFileType
SetStdHandle
GetProcessHeap
HeapReAlloc
ExitProcess
GetConsoleMode
GetConsoleCP
GetFullPathNameW
GetCommandLineA
VirtualAlloc
UnhandledExceptionFilter
DecodePointer
EncodePointer
GetSystemDirectoryA
GetNamedPipeInfo
CreateNamedPipeW
CancelIo
WaitNamedPipeW
ConnectNamedPipe
GetUserDefaultLangID
GetEnvironmentVariableW
MapViewOfFile
UnmapViewOfFile
WriteFile
ReadFile
CreateFileW
GetTempPathW
GetCurrentDirectoryW
FindClose
CreateFileMappingW
GetFileAttributesExW
DeleteFileW
CreateMutexW
SetFilePointer
CreateProcessW
WaitForSingleObject
GetTickCount
FormatMessageA
ReleaseMutex
GetCurrentProcessId
InterlockedExchangeAdd
CreateEventW
ExpandEnvironmentStringsW
GetCommandLineW
GetNativeSystemInfo
InterlockedCompareExchange
GetVersionExW
WideCharToMultiByte
GetModuleHandleExA
GetSystemTimeAsFileTime
VirtualQueryEx
AssignProcessToJobObject
TerminateProcess
GetStdHandle
GetProcessId
GetSystemInfo
DuplicateHandle
ResumeThread
InterlockedExchange
RtlCaptureStackBackTrace
IsDebuggerPresent
SystemTimeToFileTime
QueryPerformanceCounter
FileTimeToSystemTime
QueryPerformanceFrequency
Sleep
CreateThread
GetSystemDirectoryW
GetWindowsDirectoryW
SetUnhandledExceptionFilter
RegisterWaitForSingleObject
UnregisterWaitEx
SetEndOfFile
SetFilePointerEx
FlushFileBuffers
GetFileInformationByHandle
GetModuleHandleExW
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
SetEvent
ResetEvent
WaitForMultipleObjects
FreeResource
LockResource
lstrcpynA
lstrcmpiA
lstrcpyW
lstrcpynW
GetModuleFileNameA
VirtualProtect
GlobalUnlock
GlobalLock
GlobalAlloc
HeapDestroy
HeapCreate
HeapAlloc
HeapFree
VirtualQuery
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
InitializeCriticalSection
GetThreadLocale
GetACP
LoadLibraryA
CreateFileA
GetTimeZoneInformation
GetLocaleInfoA
GetLocaleInfoW

gdi32

LPtoDP
SaveDC
SetMapMode
SetViewportOrgEx
DeleteDC
RestoreDC
CreateDCW
CreateRectRgnIndirect
GetDeviceCaps
GetFontUnicodeRanges
GetCharABCWidthsW
GetTextFaceW
SetWorldTransform
GetObjectType
GetGlyphOutlineW
SetTextAlign
GetFontData
GetGlyphIndicesW
BitBlt
SetWindowOrgEx
GetTextExtentPointI
SetGraphicsMode
GetTextMetricsW
SetTextColor
CreateDIBSection
CreateFontIndirectW
GdiFlush
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
ExtTextOutW
GetOutlineTextMetricsW

advapi32

GetAclInformation
RegEnumValueW
ConvertSidToStringSidW
RegQueryValueExW
GetSidSubAuthority
GetSidSubAuthorityCount
CreateProcessAsUserW
GetTraceEnableFlags
GetTraceLoggerHandle
TraceEvent
UnregisterTraceGuids
GetTraceEnableLevel
RegisterTraceGuidsW
EqualSid
InitializeSid
GetSidLengthRequired
MakeAbsoluteSD
InitializeSecurityDescriptor
SetSecurityInfo
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
GetNamedSecurityInfoW
ConvertSecurityDescriptorToStringSecurityDescriptorW
AdjustTokenPrivileges
LookupPrivilegeValueW
GetAce
ConvertStringSecurityDescriptorToSecurityDescriptorW
CopySid
IsValidSid
GetLengthSid
RegEnumKeyExW
GetTokenInformation
SetNamedSecurityInfoW
ImpersonateSelf
SetThreadToken
RevertToSelf
OpenThreadToken
OpenProcessToken
GetSecurityDescriptorLength
MakeSelfRelativeSD
GetSecurityDescriptorOwner
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryInfoKeyW
AddAce
InitializeAcl
GetSecurityDescriptorControl
GetSecurityDescriptorSacl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup

ole32

CoCreateInstance
CreateStreamOnHGlobal
GetHGlobalFromStream
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoInitializeEx
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CreateOleAdviseHolder
OleRegEnumVerbs
OleDestroyMenuDescriptor
StringFromGUID2
CoCreateGuid
ProgIDFromCLSID
OleRegGetMiscStatus
OleRegGetUserType

oleaut32

SafeArrayCreateVector
VariantChangeType
LHashValOfNameSys
SafeArrayRedim
SafeArrayDestroy
SafeArrayCreate
SafeArrayLock
SafeArrayUnlock
SafeArrayGetUBound
SafeArrayGetLBound
SysFreeString
SafeArrayGetVartype
SysAllocStringByteLen
VariantInit
VariantClear
SysAllocString
SysStringLen
SetErrorInfo
CreateErrorInfo
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
OleCreatePropertyFrame
DispCallFunc
VariantCopy

user32

PtInRect
UnionRect
IsWindow
SetFocus
GetAncestor
ReleaseDC
LoadCursorW
UnregisterClassA
SetParent
FindWindowW
PostMessageW
TrackPopupMenuEx
DestroyMenu
BringWindowToTop
DrawTextA
AppendMenuW
GetKeyState
InvalidateRect
CallWindowProcW
LoadStringW
IsChild
CreateWindowExW
GetClassInfoExW
RegisterClassExW
DefWindowProcW
GetParent
ShowWindow
GetFocus
GetActiveWindow
IsDialogMessageW
GetDlgItem
SendDlgItemMessageW
IsDlgButtonChecked
GetDlgItemTextW
SetWindowPos
GetClientRect
GetWindowLongW
SetWindowLongW
CharNextW
BeginPaint
EndPaint
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
DestroyWindow
GetDC
CharUpperW
SystemParametersInfoW
MessageBoxW
DispatchMessageW
MsgWaitForMultipleObjectsEx
PeekMessageW
CallMsgFilterW
TranslateMessage
GetQueueStatus
WaitMessage
KillTimer
UnregisterClassW
PostQuitMessage
SetTimer
GetDesktopWindow
RegisterClipboardFormatW
InsertMenuItemW
CreatePopupMenu
MsgWaitForMultipleObjects
RemoveMenu
GetSubMenu
GetMenuItemCount
CreateDialogParamW
EnableMenuItem
TranslateAcceleratorW
LoadAcceleratorsW
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExW
GetWindowThreadProcessId
wsprintfA
CheckRadioButton

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock
UnloadUserProfile

wininet

InternetQueryOptionW
InternetSetOptionW
InternetSetCookieExA
InternetGetCookieA

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

ws2_32

select
send
WSASetLastError
recv
getsockopt
__WSAFDIsSet
listen
bind
getsockname
connect
ioctlsocket
closesocket
WSAGetLastError
socket
WSAStartup
inet_addr
gethostbyname
inet_ntoa
htonl
getservbyname
htons
gethostbyaddr
ntohs
getservbyport

winmm

timeEndPeriod
timeGetTime
timeBeginPeriod

shlwapi

PathFindFileNameA
StrStrW
StrStrIW
StrRetToBSTR

shdocvw

DoPrivacyDlg

urlmon

UrlMkSetSessionOption
CreateURLMoniker
RegisterMediaTypeClass
CreateURLMonikerEx
CreateAsyncBindCtxEx
ObtainUserAgentString
CoInternetGetSession
RevokeBindStatusCallback
RegisterBindStatusCallback
CreateAsyncBindCtx

usp10

ScriptFreeCache
ScriptItemize
ScriptShape

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterUserServer
DllUnregisterServer
DllUnregisterUserServer

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 480KB - Virtual size: 479KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/ppgooglenaclpluginchrome.dll
.dll windows:5 windows x86 arch:x86

cfaf890ee3616a3040dbe804685ce569

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:09:db:bc:73:2d:4b:58:f7:a8:8e:ba:cf:32:34:17
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

09-12-2011 00:00

Not After

06-02-2014 23:59

Subject

CN=LLC Mail.Ru,O=LLC Mail.Ru,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4a:d9:ae:c2:bc:55:13:b2:d0:db:92:7c:49:85:89:5c:df:91:f0:b8
Signer

Actual PE Digest

4a:d9:ae:c2:bc:55:13:b2:d0:db:92:7c:49:85:89:5c:df:91:f0:b8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\ppGoogleNaClPluginChrome.dll.pdb

Imports

kernel32

CloseHandle
InterlockedExchangeAdd
DuplicateHandle
GetCurrentProcess
SetLastError
ReadFile
WriteFile
GetLastError
OpenProcess
GetCurrentProcessId
PeekNamedPipe
DisconnectNamedPipe
FlushFileBuffers
ConnectNamedPipe
SetNamedPipeHandleState
GetNamedPipeHandleStateW
CreateNamedPipeW
CreateFileW
Sleep
QueryPerformanceCounter
GetSystemTimeAsFileTime
QueryPerformanceFrequency
SystemTimeToFileTime
ResumeThread
WaitForSingleObject
GetCurrentThreadId
ExitProcess
GetSystemTime
CreateEventW
SetEvent
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetNativeSystemInfo
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetStdHandle
GetFileType
GetProcAddress
GetModuleHandleW
HeapFree
GetFileInformationByHandle
HeapAlloc
GetCommandLineA
ExitThread
CreateThread
RaiseException
LCMapStringW
GetCPInfo
RtlUnwind
IsProcessorFeaturePresent
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetHandleCount
GetStartupInfoW
FreeLibrary
LoadLibraryW
GetConsoleCP
GetConsoleMode
HeapCreate
HeapDestroy
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
HeapSize
GetStringTypeW
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
WriteConsoleW
CreateFileA
CompareStringW
SetEnvironmentVariableA
GetTimeZoneInformation
SetEndOfFile
GetProcessHeap
CreateFileMappingW
MapViewOfFileEx
UnmapViewOfFile
VirtualFree
VirtualAlloc

winmm

timeGetDevCaps
timeBeginPeriod
timeGetTime
timeEndPeriod

Exports

Exports

PPP_GetInterface
PPP_InitializeModule
PPP_ShutdownModule

Sections

.text
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/28.0.1500.75/resources.pak
.js
Chrome-bin/28.0.1500.75/secondarytile.png
.png
Chrome-bin/app_host.exe
.exe windows:5 windows x86 arch:x86

a005ffb09980ec71673cfa21725851bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\app_host.exe.pdb

Imports

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

winmm

timeGetTime

kernel32

CreateProcessW
WaitForSingleObject
GetTickCount
WriteFile
GetModuleFileNameW
CreateFileW
GetLastError
SetLastError
ReleaseMutex
CloseHandle
GetCurrentProcessId
Sleep
RaiseException
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineW
LocalFree
GetCurrentProcess
GetModuleHandleW
GetSystemTimeAsFileTime
AssignProcessToJobObject
TerminateProcess
GetStdHandle
GetProcAddress
HeapSetInformation
ResumeThread
GetUserDefaultLangID
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedExchangeAdd
SetUnhandledExceptionFilter
SetFilePointer
TlsGetValue
InterlockedIncrement
TlsSetValue
TlsAlloc
TlsFree
QueryPerformanceCounter
InterlockedExchange
WideCharToMultiByte
InterlockedDecrement
MultiByteToWideChar
InitializeCriticalSection
EncodePointer
DecodePointer
UnhandledExceptionFilter
HeapFree
GetStartupInfoW
GetConsoleMode
ExitProcess
HeapReAlloc
HeapAlloc
GetCPInfo
RtlUnwind
LCMapStringW
HeapCreate
IsProcessorFeaturePresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
FlushFileBuffers
WriteConsoleW
SetStdHandle
FreeLibrary
LoadLibraryW
GetLocaleInfoW
GetStringTypeW
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CompareStringW
SetEnvironmentVariableA
CreateMutexW
GetFileAttributesW
GetConsoleCP
LoadLibraryA
LocalAlloc

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
CreateProcessAsUserW

oleaut32

SysFreeString
SysAllocString

user32

MessageBoxW

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/chrome.exe
.exe windows:5 windows x86 arch:x86

bc971e2f89f95fceab6436de8a65bfc4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:09:db:bc:73:2d:4b:58:f7:a8:8e:ba:cf:32:34:17
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

09-12-2011 00:00

Not After

06-02-2014 23:59

Subject

CN=LLC Mail.Ru,O=LLC Mail.Ru,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

31:d3:69:5e:d2:d8:63:57:33:65:4b:de:d1:89:e6:d3:42:93:b5:c0
Signer

Actual PE Digest

31:d3:69:5e:d2:d8:63:57:33:65:4b:de:d1:89:e6:d3:42:93:b5:c0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\browser.inet.v28.0.1500.71\src\build\Release\chrome.exe.pdb

Imports

shlwapi

PathRemoveFileSpecW
PathFileExistsW

kernel32

GetTempPathW
GetLastError
CreateProcessW
CloseHandle
GetModuleHandleW
VirtualProtect
VirtualAllocEx
VirtualFreeEx
SetUnhandledExceptionFilter
GetCurrentProcess
DuplicateHandle
GetExitCodeProcess
WaitForSingleObject
SizeofResource
LockResource
LoadResource
FindResourceW
VirtualFree
SetFilePointer
ReadFile
GetSystemInfo
FreeLibrary
VirtualAlloc
CreateFileW
GetUserDefaultLangID
CreateMutexW
GetTickCount
WriteFile
SetLastError
ReleaseMutex
GetCurrentProcessId
CreateEventW
ExpandEnvironmentStringsW
InterlockedExchange
SetEnvironmentVariableW
lstrlenW
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
QueryPerformanceFrequency
GetNativeSystemInfo
GetVersionExW
SetInformationJobObject
SetHandleInformation
VirtualQueryEx
OpenProcess
AssignProcessToJobObject
GetStdHandle
GetProcessId
HeapSetInformation
ResumeThread
LocalAlloc
MapViewOfFile
TerminateProcess
GetCurrentDirectoryW
GetLongPathNameW
CreateFileMappingW
QueryDosDeviceW
GetLocaleInfoW
GetUserDefaultUILanguage
RaiseException
GetCurrentThreadId
CreateThread
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedExchangeAdd
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
SetEvent
ResetEvent
WaitForMultipleObjects
RtlCaptureStackBackTrace
LoadLibraryA
GetWindowsDirectoryW
SetEndOfFile
FlushFileBuffers
RegisterWaitForSingleObject
UnregisterWaitEx
GetModuleHandleExW
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
InterlockedIncrement
ReleaseSemaphore
InterlockedDecrement
RtlCaptureContext
CreateSemaphoreW
InitializeCriticalSection
GetThreadContext
SuspendThread
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
WriteProcessMemory
VirtualProtectEx
TerminateJobObject
SignalObjectAndWait
GetProcessHandleCount
GetFileType
CreateJobObjectW
CreateNamedPipeW
OpenEventW
SearchPathW
DebugBreak
ReadProcessMemory
WideCharToMultiByte
GetStringTypeW
MultiByteToWideChar
EncodePointer
DecodePointer
UnhandledExceptionFilter
HeapFree
ExitProcess
GetStartupInfoW
GetConsoleCP
GetConsoleMode
HeapReAlloc
GetFullPathNameW
HeapAlloc
GetProcessHeap
SetStdHandle
RtlUnwind
LCMapStringW
GetCPInfo
IsProcessorFeaturePresent
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
WriteConsoleW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetDriveTypeW
CompareStringW
InterlockedCompareExchange
Sleep
CreateRemoteThread
GetModuleHandleA
FormatMessageW
LocalFree
GetModuleFileNameW
GetEnvironmentVariableW
SetCurrentDirectoryW
LoadLibraryExW
GetEnvironmentVariableA
GetCommandLineW
SetEnvironmentVariableA
LoadLibraryW
GetProcAddress
GetFileAttributesW
GetSystemDirectoryW

user32

GetUserObjectInformationW
GetThreadDesktop
SetProcessWindowStation
CreateDesktopW
GetProcessWindowStation
CreateWindowStationW
CloseDesktop
wsprintfW
MessageBoxW
CloseWindowStation
CharUpperW

userenv

GetProfileType

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

winmm

timeGetTime

advapi32

GetTraceEnableFlags
SetEntriesInAclW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegCreateKeyExW
CreateProcessAsUserW
GetTraceLoggerHandle
TraceEvent
UnregisterTraceGuids
GetTraceEnableLevel
RegisterTraceGuidsW
RegDisablePredefinedCache
RevertToSelf
SetTokenInformation
GetLengthSid
ConvertStringSidToSidW
GetSecurityInfo
CreateWellKnownSid
CopySid
LookupPrivilegeValueW
EqualSid
DuplicateToken
DuplicateTokenEx
CreateRestrictedToken
SetThreadToken

Exports

Exports

CrashForException
DumpProcess
DumpProcessWithoutCrash
InjectDumpForHangDebugging
InjectDumpProcessWithoutCrash
SetActiveURL
SetClientId
SetCommandLine2
SetCrashKeyValuePair
SetExperimentList3
SetExtensionID
SetGpuInfo
SetNumberOfExtensions
SetNumberOfViews
SetPrinterInfo

Sections

.text
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chrome-bin/master_preferences
Chrome-bin/wow_helper.exe
.exe windows:4 windows x64 arch:x64

025a914d0b20e8ede3d03f8d871e5c36

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

h:\ch1\src\sandbox\wow_helper\wow_helper.pdb

Imports

kernel32

GetProcAddress
GetModuleHandleW
VirtualProtectEx
WriteProcessMemory
ReadProcessMemory
OpenProcess
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
GetLastError
GetModuleHandleA
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
HeapReAlloc
RtlVirtualUnwind

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 119B

.rsrc Size: 1KB - Virtual size: 1KB

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 119B

.rsrc Size: 1KB - Virtual size: 1KB

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 119B

.rsrc Size: 1KB - Virtual size: 1KB

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 119B

.rsrc Size: 1KB - Virtual size: 1KB

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 119B

.rsrc Size: 1KB - Virtual size: 1KB

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 119B

.rsrc Size: 1KB - Virtual size: 1KB

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 119B

.rsrc Size: 1KB - Virtual size: 1KB

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 119B

.rsrc Size: 1KB - Virtual size: 1KB

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 119B

.rsrc Size: 1KB - Virtual size: 1KB

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 122B

.rsrc Size: 1KB - Virtual size: 1KB

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 122B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 122B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 123B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 120B

.rsrc
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 119B

.rsrc
Size: 1KB - Virtual size: 1KB