General

Malware Config

Signatures

Files

• loremipsum.exe

  .exe windows:4 windows x86 arch:x86

  61259b55b8912888e90f516ca08dc514

  
  

  Code Sign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:0f:a0:91:94:b2:2d:c5:1d:00:65:31:c9:c1:61:04

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  21-12-2021 00:00

  Not After

  17-03-2025 23:59

  Subject

  CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  21-09-2022 00:00

  Not After

  21-11-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  f6:71:3c:15:a8:24:ef:23:d8:11:8b:18:77:4c:5e:6c:69:95:a9:f4:28:ba:5c:fb:27:2f:f9:a0:92:e8:9a:3c

  Signer

  Actual PE Digest

  f6:71:3c:15:a8:24:ef:23:d8:11:8b:18:77:4c:5e:6c:69:95:a9:f4:28:ba:5c:fb:27:2f:f9:a0:92:e8:9a:3c

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  RegCreateKeyExW

  RegEnumKeyW

  RegQueryValueExW

  RegSetValueExW

  RegCloseKey

  RegDeleteValueW

  RegDeleteKeyW

  AdjustTokenPrivileges

  LookupPrivilegeValueW

  OpenProcessToken

  SetFileSecurityW

  RegOpenKeyExW

  RegEnumValueW

  shell32

  SHGetSpecialFolderLocation

  SHFileOperationW

  SHBrowseForFolderW

  SHGetPathFromIDListW

  ShellExecuteExW

  SHGetFileInfoW

  ole32

  OleInitialize

  OleUninitialize

  CoCreateInstance

  IIDFromString

  CoTaskMemFree

  comctl32

  ord17

  ImageList_Create

  ImageList_Destroy

  ImageList_AddMasked

  user32

  GetClientRect

  EndPaint

  DrawTextW

  IsWindowEnabled

  DispatchMessageW

  wsprintfA

  CharNextA

  CharPrevW

  MessageBoxIndirectW

  GetDlgItemTextW

  SetDlgItemTextW

  GetSystemMetrics

  FillRect

  AppendMenuW

  TrackPopupMenu

  OpenClipboard

  SetClipboardData

  CloseClipboard

  IsWindowVisible

  CallWindowProcW

  GetMessagePos

  CheckDlgButton

  LoadCursorW

  SetCursor

  GetSysColor

  SetWindowPos

  GetWindowLongW

  PeekMessageW

  SetClassLongW

  GetSystemMenu

  EnableMenuItem

  GetWindowRect

  ScreenToClient

  EndDialog

  RegisterClassW

  SystemParametersInfoW

  CreateWindowExW

  GetClassInfoW

  DialogBoxParamW

  CharNextW

  ExitWindowsEx

  DestroyWindow

  CreateDialogParamW

  SetTimer

  SetWindowTextW

  PostQuitMessage

  SetForegroundWindow

  ShowWindow

  wsprintfW

  SendMessageTimeoutW

  FindWindowExW

  IsWindow

  GetDlgItem

  SetWindowLongW

  LoadImageW

  GetDC

  ReleaseDC

  EnableWindow

  InvalidateRect

  SendMessageW

  DefWindowProcW

  BeginPaint

  EmptyClipboard

  CreatePopupMenu

  gdi32

  SetBkMode

  SetBkColor

  GetDeviceCaps

  CreateFontIndirectW

  CreateBrushIndirect

  DeleteObject

  SetTextColor

  SelectObject

  kernel32

  GetExitCodeProcess

  WaitForSingleObject

  GetModuleHandleA

  GetProcAddress

  GetSystemDirectoryW

  lstrcatW

  Sleep

  lstrcpyA

  WriteFile

  GetTempFileNameW

  lstrcmpiA

  RemoveDirectoryW

  CreateProcessW

  CreateDirectoryW

  GetLastError

  CreateThread

  GlobalLock

  GlobalUnlock

  GetDiskFreeSpaceW

  WideCharToMultiByte

  lstrcpynW

  lstrlenW

  SetErrorMode

  GetVersionExW

  GetCommandLineW

  GetTempPathW

  GetWindowsDirectoryW

  SetEnvironmentVariableW

  CopyFileW

  ExitProcess

  GetCurrentProcess

  GetModuleFileNameW

  GetFileSize

  CreateFileW

  GetTickCount

  MulDiv

  SetFileAttributesW

  GetFileAttributesW

  SetCurrentDirectoryW

  MoveFileW

  GetFullPathNameW

  GetShortPathNameW

  SearchPathW

  CompareFileTime

  SetFileTime

  CloseHandle

  lstrcmpiW

  lstrcmpW

  ExpandEnvironmentStringsW

  GlobalFree

  GlobalAlloc

  GetModuleHandleW

  LoadLibraryExW

  MoveFileExW

  FreeLibrary

  WritePrivateProfileStringW

  GetPrivateProfileStringW

  lstrlenA

  MultiByteToWideChar

  ReadFile

  SetFilePointer

  FindClose

  FindNextFileW

  FindFirstFileW

  DeleteFileW

  Sections

  .text

  Size: 26KB - Virtual size: 25KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 128KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ndata

  Size: - Virtual size: 136KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 45KB - Virtual size: 45KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/Everything/Everything.exe

  .exe windows:4 windows x86 arch:x86

  7573208674510652893809b0317e4eb4

  
  

  Code Sign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:0f:a0:91:94:b2:2d:c5:1d:00:65:31:c9:c1:61:04

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  21-12-2021 00:00

  Not After

  17-03-2025 23:59

  Subject

  CN=voidtools,O=voidtools,L=Wilmington,ST=South Australia,C=AU

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  21-09-2022 00:00

  Not After

  21-11-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  71:06:7b:d9:6a:55:37:05:85:2b:8a:8d:28:a8:ab:bf:77:c1:6f:57:7a:db:13:91:ff:15:c1:37:de:38:73:d9

  Signer

  Actual PE Digest

  71:06:7b:d9:6a:55:37:05:85:2b:8a:8d:28:a8:ab:bf:77:c1:6f:57:7a:db:13:91:ff:15:c1:37:de:38:73:d9

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  comctl32

  ImageList_GetIconSize

  ImageList_DrawEx

  _TrackMouseEvent

  InitCommonControlsEx

  ws2_32

  WSAGetLastError

  WSACleanup

  closesocket

  send

  recv

  socket

  connect

  WSAAsyncSelect

  setsockopt

  WSAStartup

  shutdown

  listen

  bind

  getpeername

  ntohs

  htons

  gethostbyname

  inet_addr

  accept

  getsockname

  shlwapi

  SHRegGetUSValueW

  PathIsRootW

  PathCombineW

  PathRemoveFileSpecW

  kernel32

  QueryPerformanceFrequency

  ExitProcess

  SetConsoleScreenBufferSize

  SetStdHandle

  AllocConsole

  FreeConsole

  SetFilePointer

  FileTimeToSystemTime

  GetSystemTime

  FreeResource

  LockResource

  LoadResource

  SizeofResource

  GetSystemDefaultLangID

  LoadLibraryA

  TerminateProcess

  OpenProcess

  SetLastError

  HeapAlloc

  GetProcessHeap

  HeapFree

  VirtualAlloc

  VirtualFree

  SetErrorMode

  MoveFileExW

  GlobalFree

  GlobalUnlock

  QueryPerformanceCounter

  GlobalAlloc

  GetFileSize

  GetThreadPriority

  FreeLibrary

  LocalFileTimeToFileTime

  SystemTimeToFileTime

  FileTimeToLocalFileTime

  SystemTimeToTzSpecificLocalTime

  WaitForMultipleObjects

  GetSystemInfo

  GetVersionExA

  LocalFree

  LocalAlloc

  ConnectNamedPipe

  GetTimeZoneInformation

  MulDiv

  CompareStringA

  GetModuleHandleA

  GetModuleFileNameA

  GetWindowsDirectoryA

  GetSystemDirectoryA

  InterlockedExchange

  RtlUnwind

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  GetStartupInfoA

  GetCommandLineA

  CreateThread

  ExitThread

  WriteFile

  FlushFileBuffers

  GetStdHandle

  GetFileType

  GetConsoleScreenBufferInfo

  SetConsoleTextAttribute

  DeviceIoControl

  GetOverlappedResult

  ResetEvent

  Sleep

  FindNextChangeNotification

  GetFileInformationByHandle

  GetLocalTime

  FindCloseChangeNotification

  FindClose

  GetSystemTimeAsFileTime

  GetCurrentThread

  SetThreadPriority

  InitializeCriticalSection

  WaitForSingleObject

  DeleteCriticalSection

  EnterCriticalSection

  GetTickCount

  LeaveCriticalSection

  SetEvent

  GetCommandLineW

  GetCurrentThreadId

  ReadFile

  GetLastError

  CloseHandle

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedIncrement

  InterlockedDecrement

  HeapReAlloc

  HeapDestroy

  HeapCreate

  GetACP

  GetOEMCP

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  SetHandleCount

  GetCurrentProcessId

  LCMapStringA

  GetStringTypeA

  GetLocaleInfoA

  HeapSize

  GlobalLock

  user32

  SetCapture

  ChangeClipboardChain

  DrawEdge

  DrawFrameControl

  EqualRect

  GetSubMenu

  GetMenu

  SetClipboardViewer

  EnumWindows

  ActivateKeyboardLayout

  IsDlgButtonChecked

  SetScrollInfo

  UpdateWindow

  ScrollWindowEx

  SetDlgItemInt

  GetMenuItemID

  RemoveMenu

  GetMenuState

  GetMenuDefaultItem

  EnableMenuItem

  AdjustWindowRect

  GetSysColorBrush

  OffsetRect

  InvalidateRgn

  MessageBeep

  SetCursorPos

  GetDlgItemInt

  GetDlgCtrlID

  GetDesktopWindow

  ValidateRect

  CreateIconIndirect

  GetCursorPos

  CreateMenu

  SetMenuDefaultItem

  TrackPopupMenu

  DestroyMenu

  KillTimer

  GetDoubleClickTime

  RegisterHotKey

  UnregisterHotKey

  GetLastActivePopup

  OpenIcon

  GetForegroundWindow

  SetCursor

  SetActiveWindow

  BringWindowToTop

  EnumChildWindows

  CheckDlgButton

  GetKeyboardLayoutList

  GetScrollInfo

  InvalidateRect

  ClientToScreen

  ScreenToClient

  GetKeyState

  IsIconic

  GetWindowPlacement

  IsZoomed

  GetParent

  CopyRect

  EmptyClipboard

  SetClipboardData

  SetFocus

  PtInRect

  SetForegroundWindow

  BeginPaint

  EndPaint

  OpenClipboard

  CloseClipboard

  IsWindowVisible

  GetAsyncKeyState

  FillRect

  IsWindowEnabled

  GetFocus

  GetNextDlgTabItem

  SetWindowPos

  GetMenuItemCount

  CreatePopupMenu

  DeleteMenu

  AdjustWindowRectEx

  GetDlgItem

  GetWindowRect

  MapWindowPoints

  IntersectRect

  GetDC

  ReleaseDC

  WaitMessage

  UnhookWindowsHookEx

  CallNextHookEx

  TranslateMessage

  GetSystemMetrics

  GetClientRect

  GetCapture

  ReleaseCapture

  ShowWindow

  SetMenu

  RedrawWindow

  GetMessagePos

  RegisterWindowMessageA

  AttachThreadInput

  ReplyMessage

  GetSysColor

  EndDialog

  DestroyIcon

  SetTimer

  DestroyWindow

  GetWindowThreadProcessId

  IsWindow

  GetKeyboardLayout

  PostQuitMessage

  gdi32

  BitBlt

  CreateCompatibleDC

  GetTextAlign

  SetStretchBltMode

  GetDeviceCaps

  StretchDIBits

  SelectClipRgn

  StretchBlt

  SetTextAlign

  CreateCompatibleBitmap

  OffsetClipRgn

  OffsetRgn

  CombineRgn

  GetDCOrgEx

  GetRandomRgn

  GetRegionData

  ExtCreateRegion

  GetStockObject

  GetNearestColor

  CreateSolidBrush

  CreateRectRgn

  CreateDIBSection

  GetCurrentObject

  ExcludeClipRect

  RectVisible

  DeleteDC

  SetBkMode

  CreateBitmapIndirect

  CreatePatternBrush

  SetBrushOrgEx

  SetBkColor

  SetTextColor

  PatBlt

  SelectObject

  GetDIBits

  DeleteObject

  comdlg32

  CommDlgExtendedError

  advapi32

  RegisterServiceCtrlHandlerW

  StartServiceCtrlDispatcherW

  DeleteService

  ControlService

  RegOpenKeyA

  InitializeSecurityDescriptor

  SetSecurityDescriptorDacl

  QueryServiceConfigW

  RegCloseKey

  QueryServiceStatusEx

  RegisterEventSourceW

  ReportEventW

  DeregisterEventSource

  CreateServiceW

  StartServiceW

  OpenSCManagerW

  OpenServiceW

  CloseServiceHandle

  SetServiceStatus

  shell32

  DragFinish

  ord16

  DragQueryPoint

  SHGetDesktopFolder

  DragAcceptFiles

  SHGetSpecialFolderLocation

  ole32

  CoTaskMemFree

  OleUninitialize

  OleInitialize

  CoCreateInstance

  CoInitializeEx

  CoUninitialize

  CLSIDFromString

  CreateStreamOnHGlobal

  CoTaskMemAlloc

  RevokeDragDrop

  DoDragDrop

  ReleaseStgMedium

  RegisterDragDrop

  Sections

  .text

  Size: 1.3MB - Virtual size: 1.3MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 231KB - Virtual size: 230KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 56KB - Virtual size: 60KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 40KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 58KB - Virtual size: 57KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/Everything/License.txt
• $PLUGINSDIR/InstallOptions.dll

  .dll windows:4 windows x86 arch:x86

  4b45b7e00344a87332fbd12653854d1a

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GetCurrentDirectoryW

  GlobalUnlock

  GlobalLock

  GetModuleHandleW

  CloseHandle

  SetEndOfFile

  SetCurrentDirectoryW

  GetPrivateProfileStringW

  GetPrivateProfileIntW

  MultiByteToWideChar

  ReadFile

  GetFileSize

  CreateFileW

  lstrcmpiW

  lstrcatW

  lstrcpynW

  WritePrivateProfileStringW

  lstrlenW

  lstrcpyW

  GlobalFree

  GlobalAlloc

  WriteFile

  SetFilePointer

  user32

  LoadCursorW

  SetWindowRgn

  GetDlgCtrlID

  CloseClipboard

  DrawFocusRect

  OpenClipboard

  DrawTextW

  SetCursor

  LoadIconW

  LoadImageW

  SetWindowLongW

  CreateWindowExW

  MapDialogRect

  SetWindowPos

  GetWindowRect

  CreateDialogParamW

  GetClientRect

  ShowWindow

  GetSystemMenu

  EnableWindow

  GetDlgItem

  DestroyIcon

  DestroyWindow

  DispatchMessageW

  TranslateMessage

  GetMessageW

  IsDialogMessageW

  CallWindowProcW

  PostMessageW

  MessageBoxW

  GetSysColor

  CharNextW

  wsprintfW

  GetWindowTextW

  SetWindowTextW

  SendMessageW

  GetWindowLongW

  EnableMenuItem

  PtInRect

  MapWindowPoints

  GetClipboardData

  gdi32

  SetTextColor

  DeleteObject

  CombineRgn

  CreateRectRgn

  GetDIBits

  SelectObject

  CreateCompatibleDC

  GetObjectW

  shell32

  SHGetDesktopFolder

  SHGetPathFromIDListW

  ShellExecuteW

  SHBrowseForFolderW

  comdlg32

  GetOpenFileNameW

  GetSaveFileNameW

  CommDlgExtendedError

  ole32

  CoTaskMemFree

  Exports

  Exports

  dialog

  initDialog

  make_unicode

  show

  Sections

  .text

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 152B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/InstallOptions.ini
• $PLUGINSDIR/InstallOptions2.ini
• $PLUGINSDIR/LangDLL.dll

  .dll windows:4 windows x86 arch:x86

  3e8d18bb71c7ebbda2ddc2a4bb03547b

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  lstrlenW

  GlobalFree

  lstrcpynW

  lstrcmpW

  GlobalAlloc

  MulDiv

  GetModuleHandleW

  lstrcpyW

  user32

  DialogBoxParamW

  SetDlgItemTextW

  SendDlgItemMessageW

  EndDialog

  SetWindowTextW

  LoadIconW

  ShowWindow

  SendMessageW

  GetDC

  gdi32

  GetDeviceCaps

  CreateFontIndirectW

  DeleteObject

  Exports

  Exports

  LangDialog

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 681B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 352B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 352B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/System.dll

  .dll windows:4 windows x86 arch:x86

  fc0224e99e736751432961db63a41b76

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GetModuleHandleW

  GlobalFree

  GlobalSize

  lstrcpynW

  lstrcpyW

  GetProcAddress

  WideCharToMultiByte

  VirtualFree

  FreeLibrary

  lstrlenW

  LoadLibraryW

  GlobalAlloc

  MultiByteToWideChar

  VirtualAlloc

  VirtualProtect

  GetLastError

  user32

  wsprintfW

  ole32

  StringFromGUID2

  CLSIDFromString

  Exports

  Exports

  Alloc

  Call

  Copy

  Free

  Get

  Int64Op

  Store

  StrAlloc

  Sections

  .text

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 867B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 120B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 1024B - Virtual size: 662B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/ioSpecial.ini
• $PLUGINSDIR/modern-wizard.bmp