ConfIT_v1[.]2[.]53[.]339_0064[.]zip

Resubmissions

Sharing

Copy URL Twitter E-mail

General

Target

ConfIT_v1.2.53.339_0064.zip
Size

323.9MB
MD5

aa268a2e0fdf7d7b88cd238b985059d2
SHA1

4622d9683115ba077ad86b47b3a9b97a3a1c3c46
SHA256

83afb1e35998d164c43b348d6fc4ac1a540b2d1baf8a178ee6a6bc8f7d6bcc37
SHA512

304af01b8b98939d8ddac9253efe672802ab812d62aa3b1c5ecb7a7fd7e1dbb09d0aaead59945233792bbd45ad865f99c63ac14109274f88b38e4ebdde1fe1f3
SSDEEP

6291456:af6TAnozN2sdXNgkWaJ5YdrlxpVUnHVn1i9D5dr69H+:quzNNCL9r0nHVn1itXr6l+

Score

3^/10

Malware Config

Signatures

Unsigned PE 17 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ConfIT!_v1.2.53.339(0064)/ConfIT!.exe
unpack001/ConfIT!_v1.2.53.339(0064)/Microsoft.Practices.Unity.Configuration.dll
unpack001/ConfIT!_v1.2.53.339(0064)/Microsoft.Practices.Unity.dll
unpack001/ConfIT!_v1.2.53.339(0064)/Telerik.Windows.Controls.Docking.dll
unpack001/ConfIT!_v1.2.53.339(0064)/de/ConfIT!.resources.dll
unpack001/ConfIT!_v1.2.53.339(0064)/es/ConfIT!.resources.dll
unpack001/ConfIT!_v1.2.53.339(0064)/fr/ConfIT!.resources.dll
unpack001/ConfIT!_v1.2.53.339(0064)/hu/ConfIT!.resources.dll
unpack001/ConfIT!_v1.2.53.339(0064)/nl/ConfIT!.resources.dll
unpack001/ConfIT!_v1.2.53.339(0064)/pl/ConfIT!.resources.dll
unpack001/ConfIT!_v1.2.53.339(0064)/pt-BR/ConfIT!.resources.dll
unpack001/ConfIT!_v1.2.53.339(0064)/ro/ConfIT!.resources.dll
unpack001/ConfIT!_v1.2.53.339(0064)/ru/ConfIT!.resources.dll
unpack001/ConfIT!_v1.2.53.339(0064)/sk/ConfIT!.resources.dll
unpack001/ConfIT!_v1.2.53.339(0064)/tr/ConfIT!.resources.dll
unpack001/ConfIT!_v1.2.53.339(0064)/uk/ConfIT!.resources.dll
unpack001/ConfIT!_v1.2.53.339(0064)/zh/ConfIT!.resources.dll

Files

ConfIT_v1.2.53.339_0064.zip
.zip
ConfIT!_v1.2.53.339(0064)/!! PRZECZYTAJ TO.txt
ConfIT!_v1.2.53.339(0064)/!! READ ME.txt
ConfIT!_v1.2.53.339(0064)/ConfIT!.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35.7MB - Virtual size: 35.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/ConfIT!.exe.Config
.xml
ConfIT!_v1.2.53.339(0064)/Defaults/FCIII_S008.xx_printing_report_default.bin
ConfIT!_v1.2.53.339(0064)/Defaults/TempAndForms.xml
.xml
ConfIT!_v1.2.53.339(0064)/EntityFramework.SqlServer.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:69:92:24:86:a2:89:aa:cd:26:55:ac:29:2f:b5:bb:ab:8e:87:62
Signer

Actual PE Digest

cc:69:92:24:86:a2:89:aa:cd:26:55:ac:29:2f:b5:bb:ab:8e:87:62

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\TeamCity\buildAgent\work\5644082abfe4d909\EFBuild\obj\Release\EntityFramework.SqlServer\EntityFramework.SqlServer.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 598KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/EntityFramework.SqlServerCompact.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:d7:78:5e:7e:ac:3f:2a:41:8b:00:00:00:00:00:d7
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/10/2017, 22:57

Not After

02/01/2019, 22:57

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

57:e1:e8:ea:a6:a9:99:34:e1:56:f7:e7:40:da:15:16:b4:5b:d5:34
Signer

Actual PE Digest

57:e1:e8:ea:a6:a9:99:34:e1:56:f7:e7:40:da:15:16:b4:5b:d5:34

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\TeamCity\buildAgent\work\5644082abfe4d909\EFBuild\obj\Release\EntityFramework.SqlServerCompact\EntityFramework.SqlServerCompact.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/EntityFramework.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c7:06:88:7f:71:63:72:1c:27:c4:c1:8a:30:1c:04:0e:e7:e7:10:b4
Signer

Actual PE Digest

c7:06:88:7f:71:63:72:1c:27:c4:c1:8a:30:1c:04:0e:e7:e7:10:b4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\TeamCity\buildAgent\work\5644082abfe4d909\EFBuild\obj\Release\EntityFramework\EntityFramework.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/Images/Untitled-4.pdf
ConfIT!_v1.2.53.339(0064)/Images/alarm.png
.png
ConfIT!_v1.2.53.339(0064)/Images/cable.png
.png
ConfIT!_v1.2.53.339(0064)/Images/cisnienie.png
.png
ConfIT!_v1.2.53.339(0064)/Images/czas.png
.png
ConfIT!_v1.2.53.339(0064)/Images/dane_rejestrowane.png
.png
ConfIT!_v1.2.53.339(0064)/Images/dane_sterowane.png
.png
ConfIT!_v1.2.53.339(0064)/Images/firmware.png
.png
ConfIT!_v1.2.53.339(0064)/Images/formulas/formula_(p_error).png
.png
ConfIT!_v1.2.53.339(0064)/Images/formulas/formula_(p_error_range).png
.png
ConfIT!_v1.2.53.339(0064)/Images/formulas/formula_(t_error_C).png
.png
ConfIT!_v1.2.53.339(0064)/Images/formulas/formula_(t_error_K).png
.png
ConfIT!_v1.2.53.339(0064)/Images/gazomierz.png
.png
ConfIT!_v1.2.53.339(0064)/Images/ico.psd
ConfIT!_v1.2.53.339(0064)/Images/konfiguracja.png
.png
ConfIT!_v1.2.53.339(0064)/Images/lcd.png
.png
ConfIT!_v1.2.53.339(0064)/Images/licznik.png
.png
ConfIT!_v1.2.53.339(0064)/Images/modem.png
.png
ConfIT!_v1.2.53.339(0064)/Images/ogolne.png
.png
ConfIT!_v1.2.53.339(0064)/Images/ogolne_2.png
.png
ConfIT!_v1.2.53.339(0064)/Images/port_com.png
.png
ConfIT!_v1.2.53.339(0064)/Images/sklad_gazu.png
.png
ConfIT!_v1.2.53.339(0064)/Images/szczyty_godz.png
.png
ConfIT!_v1.2.53.339(0064)/Images/temp.png
.png
ConfIT!_v1.2.53.339(0064)/Images/uzytkownicy.png
.png
ConfIT!_v1.2.53.339(0064)/Images/wej_in_wyj_out.png
.png
ConfIT!_v1.2.53.339(0064)/Images/wejscia_in.png
.png
ConfIT!_v1.2.53.339(0064)/Images/wyjscia_out.png
.png
ConfIT!_v1.2.53.339(0064)/Images/zegar.png
.png
ConfIT!_v1.2.53.339(0064)/MASTERmodeSamples/Aplisens PC-28 Modbus Ex (address 1, Em1Val) MASTER configuration (bytes order reversed) v1.bin
ConfIT!_v1.2.53.339(0064)/MASTERmodeSamples/Aplisens PC-28 Modbus Ex (address 1, Em1Val) MASTER configuration v1.bin
ConfIT!_v1.2.53.339(0064)/MASTERmodeSamples/Aplisens PCE-28 Modbus Ex (address 1, Em1Val, external power supply required) MASTER configuration (bytes order reversed) v1.bin
ConfIT!_v1.2.53.339(0064)/MASTERmodeSamples/Aplisens PCE-28 Modbus Ex (address 1, Em1Val, external power supply required) MASTER configuration v2.bin
ConfIT!_v1.2.53.339(0064)/MASTERmodeSamples/Aplisens SGE-25 Modbus (address 1, Em1Val, external power supply required) MASTER configuration v1.bin
ConfIT!_v1.2.53.339(0064)/MASTERmodeSamples/PLUM EM-1 (address 85, AO1 output) MASTER configuration v1.bin
ConfIT!_v1.2.53.339(0064)/MASTERmodeSamples/PLUM EM-1 (address 85, AO1-AO2 outputs) MASTER configuration v1.bin
ConfIT!_v1.2.53.339(0064)/Microsoft.Practices.Prism.Mvvm.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:5a:ed:2f:f4:e4:20:99:3f:3a:00:00:00:00:00:5a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2014, 17:13

Not After

23/08/2015, 17:13

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/04/2014, 17:39

Not After

22/07/2015, 17:39

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f6:79:99:43:da:51:36:f7:19:b0:74:2b:04:cc:24:be:2f:4b:59:98
Signer

Actual PE Digest

f6:79:99:43:da:51:36:f7:19:b0:74:2b:04:cc:24:be:2f:4b:59:98

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Projects\pnpmvvm\Prism.Mvvm\obj\Release\Microsoft.Practices.Prism.Mvvm.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/Microsoft.Practices.ServiceLocation.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/03/2013, 20:08

Not After

27/06/2014, 20:08

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/04/2014, 17:39

Not After

22/07/2015, 17:39

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bf:23:e5:a2:48:e2:ef:6e:1b:b1:95:e9:3d:7c:0b:22:ce:06:59:db
Signer

Actual PE Digest

bf:23:e5:a2:48:e2:ef:6e:1b:b1:95:e9:3d:7c:0b:22:ce:06:59:db

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\CommonServiceLocator\main\Microsoft.Practices.ServiceLocation.PortableClassLibrary\obj\Release\Microsoft.Practices.ServiceLocation.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/Microsoft.Practices.Unity.Configuration.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\src\unity\source\Unity.Configuration\Src\obj\Release\Microsoft.Practices.Unity.Configuration.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/Microsoft.Practices.Unity.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\src\unity\source\Unity\Src\obj\Release\Microsoft.Practices.Unity.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/ReportTemplates/EN/MacBAT_5__Audit_Trail_template__(GM-INT__p1p2t)_[DP18xx_and_previous]_EN.xml
ConfIT!_v1.2.53.339(0064)/ReportTemplates/EN/MacBAT_5__Audit_Trail_template__(GM-INT__p1p2t)_[DP19xx_20xx]_EN.xml
ConfIT!_v1.2.53.339(0064)/ReportTemplates/EN/MacBAT_5__Audit_Trail_template__(GM-INT__p1t)_[DP18xx_and_previous]_EN.xml
ConfIT!_v1.2.53.339(0064)/ReportTemplates/EN/MacBAT_5__Audit_Trail_template__(GM-INT__p1t)_[DP19xx_20xx]_EN.xml
ConfIT!_v1.2.53.339(0064)/ReportTemplates/EN/MacBAT_5__Config_Report_template__(GM-INT__GasComp-Full)_[DP25xx_31xx_and_next]_EN.xml
ConfIT!_v1.2.53.339(0064)/ReportTemplates/EN/MacBAT_5__Config_Report_template__(GM-INT__GasComp-Full)_[DP29xx_28xx_20xx_and_previous]_EN.xml
ConfIT!_v1.2.53.339(0064)/ReportTemplates/EN/MacBAT_5__Config_Report_template__(GM-INT__GasComp-Simple)_[DP25xx_31xx_and_next]_EN.xml
ConfIT!_v1.2.53.339(0064)/ReportTemplates/EN/MacBAT_5__Config_Report_template__(GM-INT__GasComp-Simple)_[DP29xx_28xx_20xx_and_previous]_EN.xml
ConfIT!_v1.2.53.339(0064)/ReportTemplates/PL/MacBAT_5__Szablon_Dziennik_kontroli__(GM-INT__p1p2t)_[DP18xx_i_poprzednie]_PL.xml
ConfIT!_v1.2.53.339(0064)/ReportTemplates/PL/MacBAT_5__Szablon_Dziennik_kontroli__(GM-INT__p1p2t)_[DP19xx_20xx]_PL.xml
ConfIT!_v1.2.53.339(0064)/ReportTemplates/PL/MacBAT_5__Szablon_Dziennik_kontroli__(GM-INT__p1t)_[DP18xx_i_poprzednie]_PL.xml
ConfIT!_v1.2.53.339(0064)/ReportTemplates/PL/MacBAT_5__Szablon_Dziennik_kontroli__(GM-INT__p1t)_[DP19xx_20xx]_PL.xml
ConfIT!_v1.2.53.339(0064)/ReportTemplates/PL/MacBAT_5__Szablon_Raport_Konfig__(GM-INT__SkladGazu-Pełny)_[DP29xx_28xx_20xx_i_poprzednie]_PL.xml
ConfIT!_v1.2.53.339(0064)/ReportTemplates/PL/MacBAT_5__Szablon_Raport_Konfig__(GM-INT__SkladGazu-Uproszcz)_[DP29xx_28xx_20xx_i_poprzednie]_PL.xml
ConfIT!_v1.2.53.339(0064)/System.Windows.Interactivity.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:9d:1e:8d:27:ae:b8:f3:d8:38:00:01:00:00:00:9d
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/09/2012, 21:42

Not After

04/03/2013, 21:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:02:8e:42:00:00:00:00:00:1f
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

09/01/2012, 22:25

Not After

09/04/2013, 22:25

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/07/2012, 00:14

Not After

07/10/2013, 00:14

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3e:ee:d8:f6:58:e3:82:0a:29:a6:0d:4d:da:4f:ed:6b:c4:34:50:1b:a8:8c:42:82:1a:79:91:a0:3a:90:87:f2
Signer

Actual PE Digest

3e:ee:d8:f6:58:e3:82:0a:29:a6:0d:4d:da:4f:ed:6b:c4:34:50:1b:a8:8c:42:82:1a:79:91:a0:3a:90:87:f2

Digest Algorithm

sha256

PE Digest Matches

true

12:e5:b0:a2:ba:03:46:7f:56:92:05:89:ed:0e:65:b2:33:e9:07:1f
Signer

Actual PE Digest

12:e5:b0:a2:ba:03:46:7f:56:92:05:89:ed:0e:65:b2:33:e9:07:1f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\ExprUpdate2\Blend\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\System.Windows.Interactivity\System.Windows.Interactivity.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/Telerik.Windows.Controls.Docking.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\TB\3391\Sources\Controls\Docking\obj\Release45\Telerik.Windows.Controls.Docking.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 834KB - Virtual size: 833KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/amd64/Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
ConfIT!_v1.2.53.339(0064)/amd64/Microsoft.VC90.CRT/README_ENU.txt
ConfIT!_v1.2.53.339(0064)/amd64/Microsoft.VC90.CRT/msvcr90.dll
.dll windows:5 windows x64 arch:x64

8c15e10a91d42e14910d94e0a47560fb

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:27:81:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/10/2008, 21:24

Not After

22/01/2010, 21:34

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

42:ca:9d:0c:d9:80:ea:96:b7:65:21:6d:3e:97:cb:91:ef:43:27:b5
Signer

Actual PE Digest

42:ca:9d:0c:d9:80:ea:96:b7:65:21:6d:3e:97:cb:91:ef:43:27:b5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

msvcr90.amd64.pdb

Imports

kernel32

GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetSystemWindowsDirectoryW
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
FlsSetValue
FlsGetValue
DebugBreak
OutputDebugStringA
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
EncodePointer
DecodePointer
FlsFree
SetLastError
GetCurrentThread
FlsAlloc
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
GetLogicalDrives
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
Beep
GetFileAttributesA
SetFileAttributesA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
MoveFileA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
DeleteFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryA
FreeLibrary
CreateProcessW
ReadFile
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocalTime
WideCharToMultiByte
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetDateFormatA
GetTimeFormatA
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapSetInformation
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
HeapQueryInformation
HeapReAlloc
HeapSize
HeapValidate
HeapCompact
HeapWalk
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetHandleCount
GetFileType
GetStartupInfoA
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
CreateFileW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreatePipe
SetStdHandle
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
IsDBCSLeadByteEx
ReadConsoleA
ReadConsoleW
SetEndOfFile
GetProcessHeap
LockFile
UnlockFile
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
QueryPerformanceCounter
GetTickCount
GetStringTypeW
GetStringTypeA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetLocaleInfoW
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryW

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@std@@QEAA@AEBV01@@Z
??0__non_rtti_object@std@@QEAA@PEBD@Z
??0bad_cast@std@@AEAA@PEBQEBD@Z
??0bad_cast@std@@QEAA@AEBV01@@Z
??0bad_cast@std@@QEAA@PEBD@Z
??0bad_typeid@std@@QEAA@AEBV01@@Z
??0bad_typeid@std@@QEAA@PEBD@Z
??0exception@std@@QEAA@AEBQEBD@Z
??0exception@std@@QEAA@AEBQEBDH@Z
??0exception@std@@QEAA@AEBV01@@Z
??0exception@std@@QEAA@XZ
??1__non_rtti_object@std@@UEAA@XZ
??1bad_cast@std@@UEAA@XZ
??1bad_typeid@std@@UEAA@XZ
??1exception@std@@UEAA@XZ
??1type_info@@UEAA@XZ
??2@YAPEAX_K@Z
??2@YAPEAX_KHPEBDH@Z
??3@YAXPEAX@Z
??4__non_rtti_object@std@@QEAAAEAV01@AEBV01@@Z
??4bad_cast@std@@QEAAAEAV01@AEBV01@@Z
??4bad_typeid@std@@QEAAAEAV01@AEBV01@@Z
??4exception@std@@QEAAAEAV01@AEBV01@@Z
??8type_info@@QEBA_NAEBV0@@Z
??9type_info@@QEBA_NAEBV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_Fbad_cast@std@@QEAAXXZ
??_Fbad_typeid@std@@QEAAXXZ
??_U@YAPEAX_K@Z
??_U@YAPEAX_KHPEBDH@Z
??_V@YAXPEAX@Z
?_Name_base@type_info@@CAPEBDPEBV1@PEAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPEBDPEBV1@PEAU__type_info_node@@@Z
?_Type_info_dtor@type_info@@CAXPEAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPEAV1@@Z
?_ValidateExecute@@YAHP6A_JXZ@Z
?_ValidateRead@@YAHPEBXI@Z
?_ValidateWrite@@YAHPEAXI@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPEBG00I_K@Z
?_is_exception_typeof@@YAHAEBVtype_info@@PEAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QEBAPEBDPEAU__type_info_node@@@Z
?_open@@YAHPEBDHH@Z
?_query_new_handler@@YAP6AH_K@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AH_K@ZH@Z
?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPEBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?_wopen@@YAHPEB_WHH@Z
?_wsopen@@YAHPEB_WHHH@Z
?before@type_info@@QEBAHAEBV1@@Z
?name@type_info@@QEBAPEBDPEAU__type_info_node@@@Z
?raw_name@type_info@@QEBAPEBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@std@@UEBAPEBDXZ
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_GetImageBase
_GetThrowImageBase
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_SetImageBase
_SetThrowImageBase
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__crt_debugger_hook
__daylight
__dllonexit
__doserrno
__dstbias
__fls_getvalue
__fls_setvalue
__fpecode
__free_locale
__get_app_type
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abs64
_access
_access_s
_acmdln
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chgsignf
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_copysignf
_cprintf
_cprintf_l
_cprintf_p
_cprintf_p_l
_cprintf_s
_cprintf_s_l
_cputs
_cputws
_creat
_create_locale
_cscanf
_cscanf_l
_cscanf_s
_cscanf_s_l
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_cwprintf
_cwprintf_l
_cwprintf_p
_cwprintf_p_l
_cwprintf_s
_cwprintf_s_l
_cwscanf
_cwscanf_l
_cwscanf_s
_cwscanf_s_l
_daylight
_decode_pointer
_difftime32
_difftime64
_dosmaperr
_dstbias
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_encode_pointer
_encoded_null
_endthread
_endthreadex
_environ
_eof
_errno
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fdopen
_fflush_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filbuf
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_finitef
_flsbuf
_flushall
_fmode
_fpclass
_fpclassf
_fpieee_flt
_fpreset
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_locale
_freea
_freea_s
_freefls
_fscanf_l
_fscanf_s_l
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_fullpath
_futime32
_futime64
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwrite_nolock
_fwscanf_l
_fwscanf_s_l
_gcvt
_gcvt_s
_get_amblksiz
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_invalid_parameter_handler
_get_osfhandle
_get_output_format
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_sbh_threshold
_get_terminate
_get_timezone
_get_tzname
_get_unexpected
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdcwd_nolock
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getptd
_getsystime
_getw
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_hypotf
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_initptd
_initterm
_initterm_e
_invalid_parameter
_invalid_parameter_noinfo
_invoke_watson
_iob
_isalnum_l
_isalpha_l
_isatty
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l

Sections

.text
Size: 476KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/amd64/sqlceca40.dll
.dll regsvr32 windows:6 windows x64 arch:x64

9378a388170d1d97aad5fe49ef5b9a9c

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:c6:89:4f:8a:ec:f4:30:ac:5d:ac:df:82:fa:c9:a0:9b:00:54:69
Signer

Actual PE Digest

fe:c6:89:4f:8a:ec:f4:30:ac:5d:ac:df:82:fa:c9:a0:9b:00:54:69

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

sqlceca40.pdb

Imports

msvcr90

?terminate@@YAXXZ
__crt_debugger_hook
strstr
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
atol
sscanf_s
_vsnprintf
realloc
rand_s
malloc
_itow_s
towlower
swprintf_s
swscanf_s
wprintf
_wcsnicmp
wcscpy_s
vswprintf_s
free
fclose
_wfopen_s
iswspace
mbstowcs_s
feof
fseek
ferror
fread
_wtoi
_wcsicmp
_vsnprintf_s
wcsrchr
_purecall
wcsncpy_s
wcschr
wcsstr
_vsnwprintf_s
_vsnwprintf
_strlwr_s
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
memcpy
memset
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
VirtualAlloc
VirtualFree
IsDBCSLeadByteEx
ReadFile
GetSystemDefaultLCID
SystemTimeToFileTime
GetPrivateProfileSectionW
DeleteFileW
GetPrivateProfileIntW
GetFileAttributesW
GetVersionExW
GetPrivateProfileStringW
OutputDebugStringW
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
LoadLibraryW
GetProcAddress
GetLastError
GetCurrentDirectoryW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetLocalTime
GetModuleHandleW
WriteFile
DisableThreadLibraryCalls
GetLocaleInfoW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTickCount
RaiseException
GlobalMemoryStatus
GetFullPathNameW
Sleep
CloseHandle
CreateMutexW
CreateEventW
CreateThread
SetEvent
WaitForSingleObject
LocalFree
GetCurrentThreadId
GetCurrentProcessId
GetSystemDirectoryW
CreateFileW
GetFileSize
SetFilePointer
SetEndOfFile
ReleaseMutex
GetVersionExA
MoveFileExW
GetSystemInfo

crypt32

CryptUnprotectData
CryptProtectData

advapi32

RegEnumValueW
RegQueryValueExW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

ole32

CLSIDFromString
CoTaskMemFree
CoCreateInstance
CoGetMalloc
StringFromGUID2
StringFromCLSID

oleaut32

VariantChangeType
VariantCopy
SetErrorInfo
GetErrorInfo
SysFreeString
LoadTypeLi
RegisterTypeLi
SysAllocStringLen
VariantInit
VariantClear
SysStringLen
SysAllocString
CreateErrorInfo

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

wininet

InternetReadFile
InternetCloseHandle
HttpOpenRequestW
DetectAutoProxyUrl
InternetCrackUrlW
InternetOpenUrlW
InternetOpenW
HttpSendRequestA
HttpQueryInfoA
InternetSetOptionW
InternetConnectW

ws2_32

getaddrinfo
freeaddrinfo
inet_addr
getnameinfo
gethostname

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 398KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/amd64/sqlcecompact40.dll
.dll windows:6 windows x64 arch:x64

aa3ce00754057e3b5982796ed92e1ed8

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:82:d4:68:fd:95:f7:f0:0c:75:49:23:78:f9:07:b2:48:ed:41:2c
Signer

Actual PE Digest

0e:82:d4:68:fd:95:f7:f0:0c:75:49:23:78:f9:07:b2:48:ed:41:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

sqlcecompact40.pdb

Imports

msvcr90

wprintf
_vsnprintf_s
_itow_s
swprintf_s
memset
memcpy
??3@YAXPEAX@Z
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__crt_debugger_hook
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
towlower
free
??2@YAPEAX_K@Z
_vsnwprintf_s
_wcsnicmp
wcsncpy_s
_wcsicmp
_purecall
vswprintf_s
memcmp

kernel32

GetTempPathW
CopyFileW
OutputDebugStringW
ReleaseMutex
WideCharToMultiByte
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapCreate
HeapSetInformation
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
GetTempFileNameW
CreateFileW
GetFileSize
CloseHandle
FreeLibrary
GetLocalTime
GetUserDefaultLCID
DeleteFileW
GetLastError
GetVersionExA
SetLastError
GetFileType
Sleep
SetFilePointer
SetEndOfFile
ReadFile
WriteFile
GetModuleHandleW
CreateMutexW
GetFullPathNameW
LCMapStringW
WaitForSingleObject
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
MoveFileExW
GetProcAddress
GetModuleFileNameW
LoadLibraryW
GetSystemDirectoryW
QueryPerformanceCounter

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

ole32

CoCreateGuid

Exports

Exports

SeRebuild

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/amd64/sqlceer40EN.dll
.dll windows:6 windows x64 arch:x64

c87c2a73c4e25d3b70a017b9438324ca

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:1d:1f:a3:d5:42:a0:94:9e:c0:87:72:2c:9c:ba:42:f4:03:5a:cf
Signer

Actual PE Digest

fb:1d:1f:a3:d5:42:a0:94:9e:c0:87:72:2c:9c:ba:42:f4:03:5a:cf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

sqlceer40en.pdb

Imports

msvcr90

__crt_debugger_hook
_onexit
_encode_pointer
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
free
_initterm_e
_initterm
_malloc_crt

kernel32

Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter

user32

LoadStringW

Exports

Exports

SSCEGetErrorString

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/amd64/sqlceme40.dll
.dll windows:6 windows x64 arch:x64

1ad21ec922b5c713aa9fba6463802528

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

58:b8:70:b4:2d:e3:22:76:2d:b2:41:15:45:15:c5:5d:35:8d:fd:47
Signer

Actual PE Digest

58:b8:70:b4:2d:e3:22:76:2d:b2:41:15:45:15:c5:5d:35:8d:fd:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

sqlceme40.pdb

Imports

msvcr90

_itow_s
_vsnprintf_s
wprintf
swprintf_s
_malloc_crt
_initterm
_initterm_e
free
_encoded_null
_decode_pointer
_amsg_exit
__C_specific_handler
memset
memcpy
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__crt_debugger_hook
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
vswprintf_s
__CppXcptFilter
_encode_pointer
_wcsnicmp
wcsrchr
_vsnwprintf_s
wcsncpy_s
_wcsicmp
wcscpy_s
memcmp

kernel32

MoveFileExW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetSystemDirectoryW
CloseHandle
ReleaseMutex
HeapDestroy
HeapCreate
HeapSetInformation
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
GetProcAddress
FreeLibrary
GetLastError
FormatMessageW
MultiByteToWideChar
Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
WriteFile
WaitForSingleObject
SetEndOfFile
SetFilePointer
GetFileSize
GetLocalTime
CreateFileW
GetModuleFileNameW
GetLocaleInfoW
OutputDebugStringW
GetModuleHandleW
LoadLibraryW

ole32

CoCreateGuid
CLSIDFromString

oleaut32

SysAllocString
VariantClear
VariantInit
SysFreeString
SysAllocStringLen

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

Exports

Exports

DllAddRef
DllCanUnloadNow
DllMain
DllRelease
ME_AbortTransaction
ME_CleanupTombstoneData
ME_CleanupTrackingMetadata
ME_CleanupTransactionData
ME_ClearErrorInfo
ME_CloseAndReleaseStore
ME_CloseStore
ME_CommitTransaction
ME_CompileQueryPlan
ME_CreateCommand
ME_CreateDatabase
ME_CreateErrorInstance
ME_DeleteArray
ME_DeleteRecord
ME_DisableChangeTracking
ME_EnableChangeTracking
ME_ExecuteQueryPlan
ME_ExitChangeTracking
ME_GetBookmark
ME_GetChangeTrackingInfo
ME_GetColumnInfo
ME_GetColumnOrdinal
ME_GetColumnsUpdated
ME_GetContextErrorInfo
ME_GetContextErrorMessage
ME_GetCurrentTrackingTxBsn
ME_GetCurrentTrackingTxCsn
ME_GetDatabaseInstanceID
ME_GetEncryptionMode
ME_GetIndexColumnOrdinals
ME_GetKeyInfo
ME_GetLocale
ME_GetLocaleFlags
ME_GetMinorError
ME_GetNativeVersionInfo
ME_GetParameterInfo
ME_GetSqlCeVersionInfo
ME_GetTrackingContext
ME_GetTrackingOptions
ME_GetTransactionBsn
ME_GetTransactionFlags
ME_GetValues
ME_GotoBookmark
ME_InitChangeTracking
ME_InsertRecord
ME_IsTableChangeTracked
ME_Move
ME_OpenCursor
ME_OpenStore
ME_OpenTransaction
ME_Prepare
ME_Read
ME_ReadAt
ME_Rebuild
ME_SafeDelete
ME_SafeRelease
ME_Seek
ME_SetColumnInfo
ME_SetContextErrorInfo
ME_SetRange
ME_SetTableInfoAsSystem
ME_SetTrackingContext
ME_SetTransactionFlag
ME_SetValue
ME_SetValues
ME_UpdateRecord
uwrda_Pull
uwrda_Push
uwrda_RemoteDataAccess
uwrda_SubmitSql
uwrda_SysFreeString
uwrda_get_CompressionLevel
uwrda_get_ConnectTimeout
uwrda_get_ConnectionManager
uwrda_get_ConnectionRetryTimeout
uwrda_get_ErrorPointer
uwrda_get_InternetLogin
uwrda_get_InternetPassword
uwrda_get_InternetProxyLogin
uwrda_get_InternetProxyPassword
uwrda_get_InternetProxyServer
uwrda_get_InternetUrl
uwrda_get_LocalConnectionString
uwrda_get_ReceiveTimeout
uwrda_get_SendTimeout
uwrda_put_CompressionLevel
uwrda_put_ConnectTimeout
uwrda_put_ConnectionManager
uwrda_put_ConnectionRetryTimeout
uwrda_put_InternetLogin
uwrda_put_InternetPassword
uwrda_put_InternetProxyLogin
uwrda_put_InternetProxyPassword
uwrda_put_InternetProxyServer
uwrda_put_InternetUrl
uwrda_put_LocalConnectionString
uwrda_put_ReceiveTimeout
uwrda_put_SendTimeout
uwrepl_AddSubscription
uwrepl_AsyncReplication
uwrepl_Cancel
uwrepl_DropSubscription
uwrepl_GetSyncResult
uwrepl_Initialize
uwrepl_LoadProperties
uwrepl_ReinitializeSubscription
uwrepl_Replication
uwrepl_Run
uwrepl_SaveProperties
uwrepl_Terminate
uwrepl_WaitForNextStatusReport
uwrepl_get_CompressionLevel
uwrepl_get_ConnectTimeout
uwrepl_get_ConnectionManager
uwrepl_get_ConnectionRetryTimeout
uwrepl_get_Distributor
uwrepl_get_DistributorAddress
uwrepl_get_DistributorLogin
uwrepl_get_DistributorNetwork
uwrepl_get_DistributorPassword
uwrepl_get_DistributorSecurityMode
uwrepl_get_ErrorPointer
uwrepl_get_ExchangeType
uwrepl_get_HostName
uwrepl_get_InternetLogin
uwrepl_get_InternetPassword
uwrepl_get_InternetProxyLogin
uwrepl_get_InternetProxyPassword
uwrepl_get_InternetProxyServer
uwrepl_get_InternetUrl
uwrepl_get_LoginTimeout
uwrepl_get_PostSyncCleanup
uwrepl_get_ProfileName
uwrepl_get_Publication
uwrepl_get_Publisher
uwrepl_get_PublisherAddress
uwrepl_get_PublisherChanges
uwrepl_get_PublisherConflicts
uwrepl_get_PublisherDatabase
uwrepl_get_PublisherLogin
uwrepl_get_PublisherNetwork
uwrepl_get_PublisherPassword
uwrepl_get_PublisherSecurityMode
uwrepl_get_QueryTimeout
uwrepl_get_ReceiveTimeout
uwrepl_get_SendTimeout
uwrepl_get_SnapshotTransferType
uwrepl_get_Subscriber
uwrepl_get_SubscriberChanges
uwrepl_get_SubscriberConflicts
uwrepl_get_SubscriberConnectionString
uwrepl_get_Validate
uwrepl_put_CompressionLevel
uwrepl_put_ConnectTimeout
uwrepl_put_ConnectionManager
uwrepl_put_ConnectionRetryTimeout
uwrepl_put_Distributor
uwrepl_put_DistributorAddress
uwrepl_put_DistributorLogin
uwrepl_put_DistributorNetwork
uwrepl_put_DistributorPassword
uwrepl_put_DistributorSecurityMode
uwrepl_put_ExchangeType
uwrepl_put_HostName
uwrepl_put_InternetLogin
uwrepl_put_InternetPassword
uwrepl_put_InternetProxyLogin
uwrepl_put_InternetProxyPassword
uwrepl_put_InternetProxyServer
uwrepl_put_InternetUrl
uwrepl_put_LoginTimeout
uwrepl_put_PostSyncCleanup
uwrepl_put_ProfileName
uwrepl_put_Publication
uwrepl_put_Publisher
uwrepl_put_PublisherAddress
uwrepl_put_PublisherDatabase
uwrepl_put_PublisherLogin
uwrepl_put_PublisherNetwork
uwrepl_put_PublisherPassword
uwrepl_put_PublisherSecurityMode
uwrepl_put_QueryTimeout
uwrepl_put_ReceiveTimeout
uwrepl_put_SendTimeout
uwrepl_put_SnapshotTransferType
uwrepl_put_Subscriber
uwrepl_put_SubscriberConnectionString
uwrepl_put_Validate
uwutil_ConvertFromDBTIMESTAMP
uwutil_ConvertToDBTIMESTAMP
uwutil_ReleaseCOMPtr
uwutil_SysFreeString
uwutil_ZeroMemory
uwutil_get_Error
uwutil_get_ErrorCount

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/amd64/sqlceqp40.dll
.dll windows:6 windows x64 arch:x64

46577fdb55ca93aec30667f864165326

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:01:fb:08:33:ce:c3:fd:68:58:dd:88:5d:f9:c7:13:d0:fe:d6:84
Signer

Actual PE Digest

7f:01:fb:08:33:ce:c3:fd:68:58:dd:88:5d:f9:c7:13:d0:fe:d6:84

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

sqlceqp40.pdb

Imports

msvcr90

?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__crt_debugger_hook
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
_vsnprintf_s
wprintf
wcsstr
_finite
rand_s
wcscat_s
wcstod
_clearfp
_vsnwprintf_s
_wcsnicmp
iswalpha
_wtol
_purecall
memmove
wcschr
modf
iswdigit
iswspace
swscanf_s
_itow_s
_ultow_s
malloc
free
towlower
vswprintf_s
wcsncpy_s
wcscpy_s
_wcsicmp
sin
cos
atan
asin
acos
sqrt
log
exp
atan2
log10
ceil
floor
memcmp
pow
floorf
ceilf
memcpy
memset
tan

kernel32

RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
Sleep
MoveFileExW
OutputDebugStringW
GetCurrentProcessId
GetCurrentThreadId
GetSystemInfo
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemDefaultLCID
CompareStringW
FileTimeToSystemTime
GetACP
MultiByteToWideChar
IsValidCodePage
GetLocalTime
LCMapStringW
GetLastError
GetTickCount
FreeLibrary
LoadLibraryW
GetModuleFileNameW
CreateFileW
GetProcAddress
CloseHandle
HeapAlloc
HeapFree
HeapDestroy
HeapCreate
GetFileSize
SetFilePointer
SetEndOfFile
WaitForSingleObject
WriteFile
WideCharToMultiByte
ReleaseMutex
RtlLookupFunctionEntry

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

ole32

CLSIDFromString
CoCreateFreeThreadedMarshaler
StringFromGUID2

oleaut32

VarDecFromCy
VarI2FromUI4
VarI2FromR8
VariantCopy
VarR4FromDec
VarCyFromDec
VarUI1FromI4
VarI4FromCy
SafeArrayUnlock
VarI2FromR4
VarCyFromUI1
SafeArrayCreate
VariantInit
VarUI1FromR4
SystemTimeToVariantTime
VarBstrFromDec
VarR4FromI1
VarBstrFromR8
SysAllocStringLen
VarR4FromCy
VarI4FromR8
VarDateFromStr
VarI4FromDec
VarI4FromStr
VarI2FromStr
VarR8FromI1
VarCyFromUI2
VarDecFromR8
VarBoolFromStr
VarCyFromR8
VarDecFromR4
SafeArrayLock
VarI4FromI1
VarI2FromDec
VarI4FromR4
VarUI1FromStr
VarI2FromI1
VarBstrFromDate
VarR8FromStr
VariantChangeTypeEx
VarUI1FromUI2
VarCyFromI4
VarBoolFromDec
VarI2FromCy
VarR8FromUI1
SysStringByteLen
VarI2FromUI1
SysFreeString
VarR4FromR8
VarR4FromUI1
VarCyFromStr
VarBstrFromR4
VarUI1FromI2
VarCyFromR4
VarR8FromCy
VarBstrFromCy
VarUI1FromDec
SetErrorInfo
VarI2FromI4
VarCyFromI2
VarUI1FromR8
VarR8FromDec
SysStringLen
VarUI1FromCy
VarBoolFromCy
VarI4FromUI1
VarR4FromStr
VariantClear
VarUI1FromBool
VarUI1FromUI4
VarCyFromI1
VarCyFromUI4

user32

CharUpperBuffW
CharLowerBuffW
CharNextExA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 815KB - Virtual size: 814KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/amd64/sqlcese40.dll
.dll windows:6 windows x64 arch:x64

5810176cd4bbca01cf7bdc2d8d93ff57

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:93:48:d8:56:90:4c:95:82:a7:c4:ab:d5:41:b0:37:36:30:2e:cc
Signer

Actual PE Digest

f9:93:48:d8:56:90:4c:95:82:a7:c4:ab:d5:41:b0:37:36:30:2e:cc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

sqlcese40.pdb

Imports

msvcr90

?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__crt_debugger_hook
memcpy
memset
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
_snwprintf_s
towlower
wprintf
_vsnprintf_s
atoi
_ultow_s
swprintf_s
vswprintf_s
strncmp
rand_s
_wcsnicmp
_itow_s
qsort
_wcsicmp
free
malloc
swscanf_s
wcsrchr
_vsnwprintf_s
wcsncpy_s
wcscpy_s
memmove
_purecall
memcmp

kernel32

MoveFileExW
GetSystemDirectoryW
GetModuleFileNameW
WideCharToMultiByte
OutputDebugStringW
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
CloseHandle
CreateEventW
WriteFile
GetUserDefaultLCID
GetCurrentProcessId
FileTimeToSystemTime
DeleteFileW
GetProcessHeap
HeapValidate
HeapFree
LocalFree
HeapAlloc
LocalAlloc
SystemTimeToFileTime
InitializeCriticalSectionAndSpinCount
HeapDestroy
HeapCreate
HeapReAlloc
HeapSize
GetSystemInfo
LoadLibraryW
GetProcAddress
FreeLibrary
DisableThreadLibraryCalls
LCMapStringW
WaitForSingleObject
ReleaseMutex
GetCurrentThreadId
GetTickCount
Sleep
CompareFileTime
GetLocalTime
OpenThread
GetExitCodeThread
GetTempFileNameW
IsValidLocale
FlushFileBuffers
GetProcessTimes
GetCurrentProcess
GetVolumeInformationW
CreateFileW
SetFilePointer
ReadFile
SetEndOfFile
GlobalMemoryStatus
GetSystemTime
CreateMutexW
OpenMutexW
CreateFileMappingW
OpenFileMappingW
GetFullPathNameW
GetDriveTypeW
GetVersionExA
GetLocaleInfoA
MapViewOfFile
UnmapViewOfFile
GetFileInformationByHandle
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
GetFileType
GetFileSize
GetModuleHandleW
SetThreadPriority
CreateThread
WaitForMultipleObjects
SetEvent
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation

advapi32

GetFileSecurityW
InitializeSecurityDescriptor
SetFileSecurityW
SetSecurityDescriptorDacl
GetSecurityDescriptorLength
IsValidSecurityDescriptor
GetSecurityDescriptorControl
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

ole32

CoCreateFreeThreadedMarshaler

user32

DispatchMessageW
TranslateMessage
KillTimer
PeekMessageW
SetTimer
MsgWaitForMultipleObjectsEx
UnregisterClassW
DestroyWindow
CreateWindowExW
RegisterClassW
GetClassInfoW
DefWindowProcW
IsWindow
SendMessageW
PostMessageW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
EnableCedbFailpoint
EnableStorePlayback
EnableStoreTracing
InitSerialization
SqlCeAddDatabaseProps
SqlCeAddSyncPartner
SqlCeAttachCustomTrackingData
SqlCeBeginSyncSession
SqlCeBeginTransaction
SqlCeChangeDatabaseLCID
SqlCeCloseHandle
SqlCeCreateDatabase
SqlCeCreateSession
SqlCeDeleteDatabase
SqlCeDeleteRecord
SqlCeEndSyncSession
SqlCeEndTransaction
SqlCeEnumDBVolumes
SqlCeFindFirstDatabase
SqlCeFindNextChangedRecord
SqlCeFindNextDatabase
SqlCeFlushDBVol
SqlCeFreeNotification
SqlCeGetChangedRecordCnt
SqlCeGetChangedRecords
SqlCeGetCustomTrackingData
SqlCeGetDBInformationByHandle
SqlCeGetDatabaseProps
SqlCeGetDatabaseSession
SqlCeGetPropChangeInfo
SqlCeGetRecordChangeInfo
SqlCeMarkRecord
SqlCeMountDBVol
SqlCeOidGetInfo
SqlCeOnServerLoad
SqlCeOpenDatabase
SqlCeOpenDatabaseEx
SqlCeOpenStream
SqlCePurgeTrackingData
SqlCePurgeTrackingGenerations
SqlCeReadRecordProps
SqlCeRemoveDatabaseProps
SqlCeRemoveDatabaseTracking
SqlCeRemoveSyncPartner
SqlCeSeekDatabase
SqlCeSetDatabaseInfo
SqlCeSetSessionOption
SqlCeStreamRead
SqlCeStreamSaveChanges
SqlCeStreamSeek
SqlCeStreamSetSize
SqlCeStreamWrite
SqlCeTrackDatabase
SqlCeTrackProperty
SqlCeUninitialize
SqlCeUnmountDBVol
SqlCeWriteRecordProps
SuspendStoreOperation

Sections

.text
Size: 503KB - Virtual size: 502KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/db.sdf
ConfIT!_v1.2.53.339(0064)/de/ConfIT!.resources.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

��.tex
Size: 8KB - Virtual size: 116B

Size: 120KB - Virtual size: 99B

@
Size: 128KB - Virtual size: 24KB
ConfIT!_v1.2.53.339(0064)/es/ConfIT!.resources.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

��.tex
Size: 8KB - Virtual size: 116B

Size: 120KB - Virtual size: 99B

@
Size: 128KB - Virtual size: 24KB
ConfIT!_v1.2.53.339(0064)/fr/ConfIT!.resources.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

��.tex
Size: 8KB - Virtual size: 116B

Size: 120KB - Virtual size: 99B

@
Size: 128KB - Virtual size: 24KB
ConfIT!_v1.2.53.339(0064)/hu/ConfIT!.resources.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

��.tex
Size: 8KB - Virtual size: 116B

Size: 120KB - Virtual size: 99B

@
Size: 128KB - Virtual size: 24KB
ConfIT!_v1.2.53.339(0064)/nl/ConfIT!.resources.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

��.tex
Size: 8KB - Virtual size: 116B

Size: 120KB - Virtual size: 99B

@
Size: 128KB - Virtual size: 24KB
ConfIT!_v1.2.53.339(0064)/pl/ConfIT!.resources.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

��.tex
Size: 8KB - Virtual size: 116B

Size: 128KB - Virtual size: 99B

@
Size: 136KB - Virtual size: 24KB
ConfIT!_v1.2.53.339(0064)/pt-BR/ConfIT!.resources.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

��.tex
Size: 8KB - Virtual size: 116B

Size: 120KB - Virtual size: 99B

@
Size: 128KB - Virtual size: 24KB
ConfIT!_v1.2.53.339(0064)/ro/ConfIT!.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/ru/ConfIT!.resources.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

��.tex
Size: 8KB - Virtual size: 116B

Size: 144KB - Virtual size: 99B

@
Size: 152KB - Virtual size: 24KB
ConfIT!_v1.2.53.339(0064)/sk/ConfIT!.resources.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

��.tex
Size: 8KB - Virtual size: 116B

Size: 120KB - Virtual size: 99B

@
Size: 128KB - Virtual size: 24KB
ConfIT!_v1.2.53.339(0064)/tr/ConfIT!.resources.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

��.tex
Size: 8KB - Virtual size: 116B

Size: 112KB - Virtual size: 99B

@
Size: 120KB - Virtual size: 24KB
ConfIT!_v1.2.53.339(0064)/uk/ConfIT!.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/x86/Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
ConfIT!_v1.2.53.339(0064)/x86/Microsoft.VC90.CRT/README_ENU.txt
ConfIT!_v1.2.53.339(0064)/x86/Microsoft.VC90.CRT/msvcr90.dll
.dll windows:5 windows x86 arch:x86

0453db624ecaef7c4f3da938cd1d0fc5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:27:81:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/10/2008, 21:24

Not After

22/01/2010, 21:34

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

96:53:64:bf:32:91:b5:c3:d5:61:69:64:22:32:1f:d4:15:86:5e:83
Signer

Actual PE Digest

96:53:64:bf:32:91:b5:c3:d5:61:69:64:22:32:1f:d4:15:86:5e:83

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcr90.i386.pdb

Imports

kernel32

GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetSystemWindowsDirectoryW
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
TlsGetValue
DebugBreak
OutputDebugStringA
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
GetLogicalDrives
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
Beep
GetFileAttributesA
SetFileAttributesA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
MoveFileA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
DeleteFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryA
FreeLibrary
CreateProcessW
ReadFile
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocalTime
WideCharToMultiByte
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetProcessHeap
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapSize
HeapReAlloc
VirtualAlloc
HeapValidate
HeapCompact
HeapWalk
VirtualProtect
GetSystemInfo
VirtualQuery
SetHandleCount
GetFileType
GetStartupInfoA
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
CreateFileW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreatePipe
SetStdHandle
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
IsDBCSLeadByteEx
ReadConsoleA
ReadConsoleW
SetEndOfFile
InterlockedExchange
LockFile
UnlockFile
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
QueryPerformanceCounter
GetTickCount
GetStringTypeW
GetStringTypeA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetLocaleInfoW
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
GetModuleHandleA

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1exception@std@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??2@YAPAXIHPBDH@Z
??3@YAXPAX@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
??9type_info@@QBE_NABV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_Fbad_cast@std@@QAEXXZ
??_Fbad_typeid@std@@QAEXXZ
??_U@YAPAXI@Z
??_U@YAPAXIHPBDH@Z
??_V@YAXPAX@Z
?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Type_info_dtor@type_info@@CAXPAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z
?_ValidateExecute@@YAHP6GHXZ@Z
?_ValidateRead@@YAHPBXI@Z
?_ValidateWrite@@YAHPAXI@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPBG00II@Z
?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?_open@@YAHPBDHH@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?_wopen@@YAHPB_WHH@Z
?_wsopen@@YAHPB_WHHH@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?unexpected@@YAXXZ
?vswprintf@@YAHPA_WIPB_WPAD@Z
?what@exception@std@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___fls_getvalue@4
___fls_setvalue@8
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__control87_2
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__daylight
__dllonexit
__doserrno
__dstbias
__fpecode
__free_locale
__get_app_type
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv
__lconv_init
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abnormal_termination
_abs64
_access
_access_s
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_cprintf
_cprintf_l
_cprintf_p
_cprintf_p_l
_cprintf_s
_cprintf_s_l
_cputs
_cputws
_creat
_create_locale
_crt_debugger_hook
_cscanf
_cscanf_l
_cscanf_s
_cscanf_s_l
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_cwprintf
_cwprintf_l
_cwprintf_p
_cwprintf_p_l
_cwprintf_s
_cwprintf_s_l
_cwscanf
_cwscanf_l
_cwscanf_s
_cwscanf_s_l
_daylight
_decode_pointer
_difftime32
_difftime64
_dosmaperr
_dstbias
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_encode_pointer
_encoded_null
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_except_handler4_common
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fdopen
_fflush_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filbuf
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_locale
_freea
_freea_s
_freefls
_fscanf_l
_fscanf_s_l
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_ftol
_fullpath
_futime32
_futime64
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwrite_nolock
_fwscanf_l
_fwscanf_s_l
_gcvt
_gcvt_s
_get_amblksiz
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_invalid_parameter_handler
_get_osfhandle
_get_output_format
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_sbh_threshold
_get_terminate
_get_timezone
_get_tzname
_get_unexpected
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdcwd_nolock
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getptd
_getsystime
_getw
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_global_unwind2
_gmtime32

Sections

.text
Size: 599KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/x86/sqlceca40.dll
.dll regsvr32 windows:6 windows x86 arch:x86

6d573c80b5e291b6941924227bc63825

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3a:a6:16:9d:63:3f:d0:c8:89:0a:47:a2:38:db:d6:fc:e4:ea:f7:1e
Signer

Actual PE Digest

3a:a6:16:9d:63:3f:d0:c8:89:0a:47:a2:38:db:d6:fc:e4:ea:f7:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

sqlceca40.pdb

Imports

msvcr90

?terminate@@YAXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
strstr
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
atol
sscanf_s
_vsnprintf
realloc
rand_s
malloc
_itow_s
swprintf_s
wcscmp
swscanf_s
wprintf
towlower
_wcsnicmp
wcscpy_s
vswprintf_s
free
_wfopen_s
iswspace
feof
fread
ferror
fseek
mbstowcs_s
fclose
wcslen
_wcsicmp
_wtoi
_vsnprintf_s
memcmp
wcsstr
wcschr
wcsncpy_s
memcpy
_purecall
_vsnwprintf_s
_vsnwprintf
wcsrchr
strlen
memset
_strlwr_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
VirtualAlloc
VirtualFree
GetSystemDefaultLCID
IsDBCSLeadByteEx
ReadFile
SystemTimeToFileTime
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetVersionExW
GetFileAttributesW
DeleteFileW
OutputDebugStringW
GetSystemInfo
MoveFileExW
GetSystemDirectoryW
GetCurrentThreadId
GetCurrentProcessId
ReleaseMutex
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
GetModuleFileNameW
GetCurrentDirectoryW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
WriteFile
GetModuleHandleW
GetLocalTime
DisableThreadLibraryCalls
GetLocaleInfoW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTickCount
CloseHandle
RaiseException
GlobalMemoryStatus
GetFullPathNameW
Sleep
CreateMutexW
WaitForSingleObject
SetEvent
CreateThread
CreateEventW
LocalFree
GetVersionExA
SetEndOfFile
CreateFileW

crypt32

CryptUnprotectData
CryptProtectData

advapi32

RegEnumValueW
RegQueryValueExW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

ole32

CoCreateInstance
CLSIDFromString
StringFromCLSID
CoTaskMemFree
CoGetMalloc
StringFromGUID2

oleaut32

VariantChangeType
SysStringLen
SysAllocString
VariantClear
VariantCopy
CreateErrorInfo
GetErrorInfo
SysFreeString
RegisterTypeLi
LoadTypeLi
SysAllocStringLen
VariantInit
SetErrorInfo

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wininet

InternetConnectW
HttpSendRequestA
InternetReadFile
HttpOpenRequestW
HttpQueryInfoA
InternetSetOptionW
DetectAutoProxyUrl
InternetCrackUrlW
InternetOpenUrlW
InternetOpenW
InternetCloseHandle

ws2_32

getaddrinfo
getnameinfo
freeaddrinfo
inet_addr
gethostname

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/x86/sqlcecompact40.dll
.dll windows:6 windows x86 arch:x86

2ed7ff74f70bf674a2b6ea060b298404

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d7:a7:9e:c1:a2:8f:7f:f8:46:d2:cd:b9:8d:9a:0f:78:67:83:ca:40
Signer

Actual PE Digest

d7:a7:9e:c1:a2:8f:7f:f8:46:d2:cd:b9:8d:9a:0f:78:67:83:ca:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

sqlcecompact40.pdb

Imports

msvcr90

_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
vswprintf_s
swprintf_s
_vsnprintf_s
_itow_s
wprintf
_except_handler4_common
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
free
malloc
towlower
wcscmp
??2@YAPAXI@Z
wcsncpy_s
_wcsnicmp
_vsnwprintf_s
_wcsicmp
memset
wcslen
memcmp
_purecall
??3@YAXPAX@Z
memcpy

kernel32

GetTempPathW
CopyFileW
OutputDebugStringW
WaitForSingleObject
WideCharToMultiByte
ReleaseMutex
GetModuleFileNameW
GetSystemDirectoryW
LoadLibraryW
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
HeapDestroy
HeapAlloc
HeapSetInformation
HeapCreate
HeapReAlloc
HeapSize
HeapFree
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
FreeLibrary
GetProcAddress
CloseHandle
GetFileSize
CreateFileW
GetTempFileNameW
GetLastError
DeleteFileW
GetUserDefaultLCID
GetLocalTime
GetVersionExA
Sleep
SetFilePointer
SetEndOfFile
ReadFile
WriteFile
GetModuleHandleW
SetLastError
CreateMutexW
LCMapStringW
GetFileType
InterlockedExchange
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
MoveFileExW
EnterCriticalSection
GetFullPathNameW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

ole32

CoCreateGuid

Exports

Exports

SeRebuild

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/x86/sqlceer40EN.dll
.dll windows:6 windows x86 arch:x86

50f5b2a01fef866775cd8c5255d92523

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5e:eb:43:03:11:db:53:fc:79:eb:fa:0f:b5:96:b3:df:3b:fb:9b:12
Signer

Actual PE Digest

5e:eb:43:03:11:db:53:fc:79:eb:fa:0f:b5:96:b3:df:3b:fb:9b:12

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

sqlceer40en.pdb

Imports

msvcr90

_onexit
_lock
_crt_debugger_hook
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_except_handler4_common
_encode_pointer

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

user32

LoadStringW

Exports

Exports

SSCEGetErrorString

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/x86/sqlceme40.dll
.dll windows:6 windows x86 arch:x86

e85cb6ae493b0906358eae36dc1c4e50

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9a:94:8c:1e:70:55:9e:29:52:14:56:35:2f:33:6e:1b:1a:64:64:05
Signer

Actual PE Digest

9a:94:8c:1e:70:55:9e:29:52:14:56:35:2f:33:6e:1b:1a:64:64:05

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

sqlceme40.pdb

Imports

msvcr90

wprintf
_itow_s
_vsnprintf_s
_wcsicmp
vswprintf_s
memset
memcmp
memcpy
_wcsnicmp
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
swprintf_s
_initterm
wcslen
_vsnwprintf_s
wcsncpy_s
wcscpy_s
wcsrchr

kernel32

GetLocalTime
WaitForSingleObject
WideCharToMultiByte
ReleaseMutex
SetFilePointer
GetFileSize
SetEndOfFile
WriteFile
HeapDestroy
InterlockedIncrement
HeapAlloc
HeapSetInformation
HeapCreate
HeapReAlloc
HeapSize
HeapFree
FreeLibrary
GetProcAddress
InterlockedDecrement
GetLastError
FormatMessageW
MultiByteToWideChar
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
MoveFileExW
OutputDebugStringW
GetLocaleInfoW
GetModuleHandleW
CreateFileW
CloseHandle
GetModuleFileNameW
GetSystemDirectoryW
LoadLibraryW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection

ole32

CLSIDFromString
CoCreateGuid

oleaut32

SysAllocString
VariantInit
SysAllocStringLen
VariantClear
SysFreeString

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

Exports

Exports

DllAddRef
DllCanUnloadNow
DllMain
DllRelease
ME_AbortTransaction
ME_CleanupTombstoneData
ME_CleanupTrackingMetadata
ME_CleanupTransactionData
ME_ClearErrorInfo
ME_CloseAndReleaseStore
ME_CloseStore
ME_CommitTransaction
ME_CompileQueryPlan
ME_CreateCommand
ME_CreateDatabase
ME_CreateErrorInstance
ME_DeleteArray
ME_DeleteRecord
ME_DisableChangeTracking
ME_EnableChangeTracking
ME_ExecuteQueryPlan
ME_ExitChangeTracking
ME_GetBookmark
ME_GetChangeTrackingInfo
ME_GetColumnInfo
ME_GetColumnOrdinal
ME_GetColumnsUpdated
ME_GetContextErrorInfo
ME_GetContextErrorMessage
ME_GetCurrentTrackingTxBsn
ME_GetCurrentTrackingTxCsn
ME_GetDatabaseInstanceID
ME_GetEncryptionMode
ME_GetIndexColumnOrdinals
ME_GetKeyInfo
ME_GetLocale
ME_GetLocaleFlags
ME_GetMinorError
ME_GetNativeVersionInfo
ME_GetParameterInfo
ME_GetSqlCeVersionInfo
ME_GetTrackingContext
ME_GetTrackingOptions
ME_GetTransactionBsn
ME_GetTransactionFlags
ME_GetValues
ME_GotoBookmark
ME_InitChangeTracking
ME_InsertRecord
ME_IsTableChangeTracked
ME_Move
ME_OpenCursor
ME_OpenStore
ME_OpenTransaction
ME_Prepare
ME_Read
ME_ReadAt
ME_Rebuild
ME_SafeDelete
ME_SafeRelease
ME_Seek
ME_SetColumnInfo
ME_SetContextErrorInfo
ME_SetRange
ME_SetTableInfoAsSystem
ME_SetTrackingContext
ME_SetTransactionFlag
ME_SetValue
ME_SetValues
ME_UpdateRecord
uwrda_Pull
uwrda_Push
uwrda_RemoteDataAccess
uwrda_SubmitSql
uwrda_SysFreeString
uwrda_get_CompressionLevel
uwrda_get_ConnectTimeout
uwrda_get_ConnectionManager
uwrda_get_ConnectionRetryTimeout
uwrda_get_ErrorPointer
uwrda_get_InternetLogin
uwrda_get_InternetPassword
uwrda_get_InternetProxyLogin
uwrda_get_InternetProxyPassword
uwrda_get_InternetProxyServer
uwrda_get_InternetUrl
uwrda_get_LocalConnectionString
uwrda_get_ReceiveTimeout
uwrda_get_SendTimeout
uwrda_put_CompressionLevel
uwrda_put_ConnectTimeout
uwrda_put_ConnectionManager
uwrda_put_ConnectionRetryTimeout
uwrda_put_InternetLogin
uwrda_put_InternetPassword
uwrda_put_InternetProxyLogin
uwrda_put_InternetProxyPassword
uwrda_put_InternetProxyServer
uwrda_put_InternetUrl
uwrda_put_LocalConnectionString
uwrda_put_ReceiveTimeout
uwrda_put_SendTimeout
uwrepl_AddSubscription
uwrepl_AsyncReplication
uwrepl_Cancel
uwrepl_DropSubscription
uwrepl_GetSyncResult
uwrepl_Initialize
uwrepl_LoadProperties
uwrepl_ReinitializeSubscription
uwrepl_Replication
uwrepl_Run
uwrepl_SaveProperties
uwrepl_Terminate
uwrepl_WaitForNextStatusReport
uwrepl_get_CompressionLevel
uwrepl_get_ConnectTimeout
uwrepl_get_ConnectionManager
uwrepl_get_ConnectionRetryTimeout
uwrepl_get_Distributor
uwrepl_get_DistributorAddress
uwrepl_get_DistributorLogin
uwrepl_get_DistributorNetwork
uwrepl_get_DistributorPassword
uwrepl_get_DistributorSecurityMode
uwrepl_get_ErrorPointer
uwrepl_get_ExchangeType
uwrepl_get_HostName
uwrepl_get_InternetLogin
uwrepl_get_InternetPassword
uwrepl_get_InternetProxyLogin
uwrepl_get_InternetProxyPassword
uwrepl_get_InternetProxyServer
uwrepl_get_InternetUrl
uwrepl_get_LoginTimeout
uwrepl_get_PostSyncCleanup
uwrepl_get_ProfileName
uwrepl_get_Publication
uwrepl_get_Publisher
uwrepl_get_PublisherAddress
uwrepl_get_PublisherChanges
uwrepl_get_PublisherConflicts
uwrepl_get_PublisherDatabase
uwrepl_get_PublisherLogin
uwrepl_get_PublisherNetwork
uwrepl_get_PublisherPassword
uwrepl_get_PublisherSecurityMode
uwrepl_get_QueryTimeout
uwrepl_get_ReceiveTimeout
uwrepl_get_SendTimeout
uwrepl_get_SnapshotTransferType
uwrepl_get_Subscriber
uwrepl_get_SubscriberChanges
uwrepl_get_SubscriberConflicts
uwrepl_get_SubscriberConnectionString
uwrepl_get_Validate
uwrepl_put_CompressionLevel
uwrepl_put_ConnectTimeout
uwrepl_put_ConnectionManager
uwrepl_put_ConnectionRetryTimeout
uwrepl_put_Distributor
uwrepl_put_DistributorAddress
uwrepl_put_DistributorLogin
uwrepl_put_DistributorNetwork
uwrepl_put_DistributorPassword
uwrepl_put_DistributorSecurityMode
uwrepl_put_ExchangeType
uwrepl_put_HostName
uwrepl_put_InternetLogin
uwrepl_put_InternetPassword
uwrepl_put_InternetProxyLogin
uwrepl_put_InternetProxyPassword
uwrepl_put_InternetProxyServer
uwrepl_put_InternetUrl
uwrepl_put_LoginTimeout
uwrepl_put_PostSyncCleanup
uwrepl_put_ProfileName
uwrepl_put_Publication
uwrepl_put_Publisher
uwrepl_put_PublisherAddress
uwrepl_put_PublisherDatabase
uwrepl_put_PublisherLogin
uwrepl_put_PublisherNetwork
uwrepl_put_PublisherPassword
uwrepl_put_PublisherSecurityMode
uwrepl_put_QueryTimeout
uwrepl_put_ReceiveTimeout
uwrepl_put_SendTimeout
uwrepl_put_SnapshotTransferType
uwrepl_put_Subscriber
uwrepl_put_SubscriberConnectionString
uwrepl_put_Validate
uwutil_ConvertFromDBTIMESTAMP
uwutil_ConvertToDBTIMESTAMP
uwutil_ReleaseCOMPtr
uwutil_SysFreeString
uwutil_ZeroMemory
uwutil_get_Error
uwutil_get_ErrorCount

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/x86/sqlceqp40.dll
.dll windows:6 windows x86 arch:x86

24d1d1da8b95c69424e9d80d78dcd314

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cb:a9:e9:3f:54:dd:d0:1e:af:60:31:5e:95:8c:3b:04:dd:3f:e1:a9
Signer

Actual PE Digest

cb:a9:e9:3f:54:dd:d0:1e:af:60:31:5e:95:8c:3b:04:dd:3f:e1:a9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

sqlceqp40.pdb

Imports

msvcr90

?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__clean_type_info_names_internal
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
_vsnprintf_s
wprintf
exp
log10
sqrt
acos
asin
atan
cos
sin
tan
atan2
labs
memcmp
wcsstr
log
_finite
rand_s
pow
wcstod
_clearfp
wcscat_s
wcscmp
_vsnwprintf_s
memmove
_wtol
iswalpha
_wcsnicmp
modf
wcschr
malloc
free
fabs
floor
ceil
towlower
swscanf_s
abs
iswspace
iswdigit
strlen
_ultow_s
_itow_s
vswprintf_s
wcsncpy_s
memcpy
wcscpy_s
_wcsicmp
memset
wcslen
_purecall
_crt_debugger_hook

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
MoveFileExW
OutputDebugStringW
GetCurrentThreadId
GetCurrentProcessId
WaitForSingleObject
WideCharToMultiByte
ReleaseMutex
SetFilePointer
GetFileSize
SetEndOfFile
WriteFile
GetSystemInfo
CreateFileW
CloseHandle
FreeLibrary
GetModuleFileNameW
LoadLibraryW
GetProcAddress
HeapFree
HeapCreate
HeapAlloc
HeapDestroy
GetTickCount
LCMapStringW
GetLastError
FileTimeToSystemTime
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemDefaultLCID
CompareStringW
MultiByteToWideChar
IsValidCodePage
GetACP
GetLocalTime

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

ole32

StringFromGUID2
CLSIDFromString
CoCreateFreeThreadedMarshaler

oleaut32

VarI4FromDec
VarDecFromCy
VariantInit
VarUI1FromI2
SetErrorInfo
SysStringLen
SysStringByteLen
SysFreeString
VariantChangeTypeEx
SafeArrayUnlock
VariantClear
SafeArrayLock
SafeArrayCreate
SystemTimeToVariantTime
VariantCopy
VarDateFromStr
VarCyFromStr
VarBoolFromStr
VarUI1FromStr
VarR8FromStr
VarI2FromStr
VarI4FromStr
SysAllocStringLen
VarCyFromUI4
VarUI1FromUI4
VarI2FromUI4
VarCyFromUI2
VarUI1FromUI2
VarCyFromUI1
VarR8FromUI1
VarI2FromUI1
VarI4FromUI1
VarR4FromUI1
VarR4FromI1
VarR8FromI1
VarCyFromI1
VarI4FromI1
VarUI1FromDec
VarBstrFromDec
VarI2FromI1
VarI2FromDec
VarI2FromI4
VarR4FromDec
VarR8FromDec
VarCyFromDec
VarBoolFromDec
VarUI1FromBool
VarCyFromI2
VarBstrFromDate
VarR4FromStr
VarUI1FromR8
VarI2FromR8
VarI4FromR8
VarR4FromR8
VarBstrFromCy
VarR8FromCy
VarBoolFromCy
VarUI1FromCy
VarR4FromCy
VarDecFromR8
VarBstrFromR8
VarI2FromCy
VarI4FromCy
VarCyFromR8
VarUI1FromR4
VarDecFromR4
VarBstrFromR4
VarI2FromR4
VarI4FromR4
VarCyFromR4
VarUI1FromI4
VarCyFromI4

user32

CharLowerBuffW
CharNextExA
CharUpperBuffW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 571KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/x86/sqlcese40.dll
.dll windows:6 windows x86 arch:x86

0993a305d660ef4e6ba364c3f8923adb

Code Sign

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:19:cc:93:00:01:00:00:00:66
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/10/2011, 20:32

Not After

10/01/2013, 20:32

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ae:5c:e9:cb:85:76:ba:3a:f0:e2:91:cf:78:e6:ed:76:e4:d0:80:ff
Signer

Actual PE Digest

ae:5c:e9:cb:85:76:ba:3a:f0:e2:91:cf:78:e6:ed:76:e4:d0:80:ff

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

sqlcese40.pdb

Imports

msvcr90

_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
_snwprintf_s
towlower
atoi
_ultow_s
swprintf_s
vswprintf_s
strlen
strncmp
rand_s
_wcsnicmp
_itow_s
qsort
_wcsicmp
free
malloc
wcsrchr
swscanf_s
_vsnwprintf_s
wcslen
wcsncpy_s
wcscpy_s
memcmp
memmove
memcpy
memset
abs
wprintf
_vsnprintf_s
_purecall

kernel32

MoveFileExW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleA
LoadLibraryA
CreateThread
WaitForMultipleObjects
SetEvent
SetThreadPriority
GetFileType
MapViewOfFile
GetFileSize
GetFileInformationByHandle
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
UnmapViewOfFile
GetLocaleInfoA
GetVersionExA
GetSystemTime
SetEndOfFile
GlobalMemoryStatus
SetFilePointer
ReadFile
GetCurrentProcess
GetProcessTimes
FlushFileBuffers
IsValidLocale
InterlockedExchange
InterlockedCompareExchange
OpenThread
GetExitCodeThread
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
SetLastError
GetLastError
CloseHandle
WriteFile
GetUserDefaultLCID
FileTimeToSystemTime
HeapFree
HeapAlloc
GetCurrentProcessId
SystemTimeToFileTime
LocalAlloc
LocalFree
HeapValidate
GetProcessHeap
InitializeCriticalSectionAndSpinCount
HeapDestroy
HeapSetInformation
HeapCreate
HeapReAlloc
HeapSize
FreeLibrary
GetSystemInfo
DisableThreadLibraryCalls
ReleaseMutex
WaitForSingleObject
GetLocalTime
CompareFileTime
Sleep
GetTickCount
GetCurrentThreadId

advapi32

RegCloseKey
InitializeSecurityDescriptor
GetFileSecurityW
IsValidSecurityDescriptor
GetSecurityDescriptorControl
GetSecurityDescriptorLength
SetFileSecurityW
SetSecurityDescriptorDacl

ole32

CoCreateFreeThreadedMarshaler

user32

MsgWaitForMultipleObjectsEx
KillTimer
TranslateMessage
IsWindow
DestroyWindow
SetTimer

Exports

Exports

DllCanUnloadNow
DllGetClassObject
EnableCedbFailpoint
EnableStorePlayback
EnableStoreTracing
InitSerialization
SqlCeAddDatabaseProps
SqlCeAddSyncPartner
SqlCeAttachCustomTrackingData
SqlCeBeginSyncSession
SqlCeBeginTransaction
SqlCeChangeDatabaseLCID
SqlCeCloseHandle
SqlCeCreateDatabase
SqlCeCreateSession
SqlCeDeleteDatabase
SqlCeDeleteRecord
SqlCeEndSyncSession
SqlCeEndTransaction
SqlCeEnumDBVolumes
SqlCeFindFirstDatabase
SqlCeFindNextChangedRecord
SqlCeFindNextDatabase
SqlCeFlushDBVol
SqlCeFreeNotification
SqlCeGetChangedRecordCnt
SqlCeGetChangedRecords
SqlCeGetCustomTrackingData
SqlCeGetDBInformationByHandle
SqlCeGetDatabaseProps
SqlCeGetDatabaseSession
SqlCeGetPropChangeInfo
SqlCeGetRecordChangeInfo
SqlCeMarkRecord
SqlCeMountDBVol
SqlCeOidGetInfo
SqlCeOnServerLoad
SqlCeOpenDatabase
SqlCeOpenDatabaseEx
SqlCeOpenStream
SqlCePurgeTrackingData
SqlCePurgeTrackingGenerations
SqlCeReadRecordProps
SqlCeRemoveDatabaseProps
SqlCeRemoveDatabaseTracking
SqlCeRemoveSyncPartner
SqlCeSeekDatabase
SqlCeSetDatabaseInfo
SqlCeSetSessionOption
SqlCeStreamRead
SqlCeStreamSaveChanges
SqlCeStreamSeek
SqlCeStreamSetSize
SqlCeStreamWrite
SqlCeTrackDatabase
SqlCeTrackProperty
SqlCeUninitialize
SqlCeUnmountDBVol
SqlCeWriteRecordProps
SuspendStoreOperation

Sections

.text
Size: 358KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGELK
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConfIT!_v1.2.53.339(0064)/zh/ConfIT!.resources.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

��.tex
Size: 8KB - Virtual size: 116B

Size: 104KB - Virtual size: 99B

@
Size: 112KB - Virtual size: 24KB

Resubmissions

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 35.7MB - Virtual size: 35.7MB

.rsrc Size: 146KB - Virtual size: 145KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bcCertificate

Extended Key Usages

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78Certificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

cc:69:92:24:86:a2:89:aa:cd:26:55:ac:29:2f:b5:bb:ab:8e:87:62Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 598KB - Virtual size: 598KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:d7:78:5e:7e:ac:3f:2a:41:8b:00:00:00:00:00:d7Certificate

Extended Key Usages

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78Certificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

57:e1:e8:ea:a6:a9:99:34:e1:56:f7:e7:40:da:15:16:b4:5b:d5:34Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 279KB - Virtual size: 279KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3Certificate

Extended Key Usages

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78Certificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

c7:06:88:7f:71:63:72:1c:27:c4:c1:8a:30:1c:04:0e:e7:e7:10:b4Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 5.0MB - Virtual size: 5.0MB

.text
Size: 35.7MB - Virtual size: 35.7MB

.rsrc
Size: 146KB - Virtual size: 145KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Certificate

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

cc:69:92:24:86:a2:89:aa:cd:26:55:ac:29:2f:b5:bb:ab:8e:87:62
Signer

.text
Size: 598KB - Virtual size: 598KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:00:d7:78:5e:7e:ac:3f:2a:41:8b:00:00:00:00:00:d7
Certificate

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

57:e1:e8:ea:a6:a9:99:34:e1:56:f7:e7:40:da:15:16:b4:5b:d5:34
Signer

.text
Size: 279KB - Virtual size: 279KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3
Certificate

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

c7:06:88:7f:71:63:72:1c:27:c4:c1:8a:30:1c:04:0e:e7:e7:10:b4
Signer

.text
Size: 5.0MB - Virtual size: 5.0MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:00:5a:ed:2f:f4:e4:20:99:3f:3a:00:00:00:00:00:5a
Certificate

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

f6:79:99:43:da:51:36:f7:19:b0:74:2b:04:cc:24:be:2f:4b:59:98
Signer

.text
Size: 22KB - Virtual size: 21KB

.rsrc
Size: 1024B - Virtual size: 952B

.reloc
Size: 512B - Virtual size: 12B

33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33
Certificate

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

bf:23:e5:a2:48:e2:ef:6e:1b:b1:95:e9:3d:7c:0b:22:ce:06:59:db
Signer

.text
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 77KB - Virtual size: 76KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 130KB - Virtual size: 130KB

.rsrc
Size: 1024B - Virtual size: 976B

.reloc
Size: 512B - Virtual size: 12B