General

Malware Config

Signatures

Files

• Аdоbе Асtivаtоr.rar

  .rar

  Password: 1231

• Аdоbе Асtivаtоr/Adobe_Activator.exe

  .exe windows:4 windows x86 arch:x86

  Password: 1231

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11.1MB - Virtual size: 11.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 226KB - Virtual size: 226KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/Windows/en-US/credits.rtf

  .rtf
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3d.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dara.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dchs.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dcht.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dcsy.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3ddan.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3ddeu.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dell.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3deng.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3desm.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3desn.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dfin.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dfra.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dheb.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dhun.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dita.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3djpn.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dkor.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dnld.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dnor.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dplk.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dptb.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dptg.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3drus.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dsky.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dslv.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dsve.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dtha.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nv3dtrk.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcpl.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplara.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplchs.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplcht.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplcsy.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcpldan.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcpldeu.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplell.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcpleng.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplesm.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplesn.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplfin.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplfra.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplheb.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplhun.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplita.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcpljpn.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplkor.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplnld.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplnor.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplplk.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplptb.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplptg.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplrus.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplsky.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplslv.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcplsve.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcpltha.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvcpltrk.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvdsp.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvdspdan.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvdspeng.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvdspesm.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvdspesn.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvdspnld.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvdspnor.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvdspptb.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlic.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicARA.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicCHS.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicCHT.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicCSY.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicDAN.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicDEU.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicELL.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicENG.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicESM.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicESN.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicFIN.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicFRA.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicHEB.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicHUN.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicITA.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicJPN.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicKOR.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicNLD.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicNOR.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicPLK.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicPTB.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicPTG.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicRUS.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicSKY.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicSLV.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicSVE.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicTHA.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvlicTRK.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmob.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobara.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobchs.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobcht.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobcsy.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobdan.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobdeu.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobell.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobeng.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobesm.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobesn.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobfin.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobfra.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobheb.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobhun.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobita.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobjpn.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobkor.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobnld.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobnor.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobplk.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobptb.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobptg.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobrus.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobsky.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobslv.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobsve.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobtha.chm

  .chm
• Аdоbе Асtivаtоr/Help/Windows/nvcpl/nvmobtrk.chm

  .chm
• Аdоbе Асtivаtоr/Help/en-US/credits.rtf

  .rtf
• Аdоbе Асtivаtоr/Help/mui/0409/cliconf.chm

  .chm
• Аdоbе Асtivаtоr/Help/mui/0409/mmc.CHM

  .chm
• Аdоbе Асtivаtоr/Help/mui/0409/msdasc.chm

  .chm
• Аdоbе Асtivаtоr/Help/mui/0409/msorcl32.chm

  .chm
• Аdоbе Асtivаtоr/Help/mui/0409/odbcinst.chm

  .chm
• Аdоbе Асtivаtоr/Help/mui/0409/odbcjet.chm

  .chm
• Аdоbе Асtivаtоr/Help/mui/0409/sqlsodbc.chm

  .chm
• Аdоbе Асtivаtоr/Help/mui/0409/sqlsoldb.chm

  .chm
• Аdоbе Асtivаtоr/Help/mui/0419/cliconf.chm

  .chm
• Аdоbе Асtivаtоr/Help/mui/0419/dsfswdf.chm

  .chm
• Аdоbе Асtivаtоr/Help/mui/0419/msdasc.chm

  .chm
• Аdоbе Асtivаtоr/Help/mui/0419/msorcl32.chm

  .chm
• Аdоbе Асtivаtоr/Help/mui/0419/odbcinst.chm

  .chm
• Аdоbе Асtivаtоr/Help/mui/0419/odbcjet.chm

  .chm
• Аdоbе Асtivаtоr/Help/mui/API-MS-Win-core-xstate-l2-1-0.dll

  .dll windows:10 windows x86 arch:x86

  Password: 1231

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ac:d1:14:65:d0:c9:9a:29:36:b8:10:db:ac:98:ef:1f:68:6a:2c:94:83:10:b8:5b:79:69:52:54:3f:7a:ab:56

  Signer

  Actual PE Digest

  ac:d1:14:65:d0:c9:9a:29:36:b8:10:db:ac:98:ef:1f:68:6a:2c:94:83:10:b8:5b:79:69:52:54:3f:7a:ab:56

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-xstate-l2-1-0.pdb

  Exports

  Exports

  CopyContext

  GetEnabledXStateFeatures

  GetXStateFeaturesMask

  InitializeContext

  LocateXStateFeature

  SetXStateFeaturesMask

  Sections

  .text

  Size: 1024B - Virtual size: 778B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-datetime-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  Password: 1231

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e9:22:fa:07:05:68:48:a4:c3:3b:71:a2:82:c3:14:a6:70:5f:8c:b6:a0:17:21:37:e5:75:7b:bb:e5:06:bf:15

  Signer

  Actual PE Digest

  e9:22:fa:07:05:68:48:a4:c3:3b:71:a2:82:c3:14:a6:70:5f:8c:b6:a0:17:21:37:e5:75:7b:bb:e5:06:bf:15

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-datetime-l1-1-0.pdb

  Exports

  Exports

  GetDateFormatA

  GetDateFormatW

  GetTimeFormatA

  GetTimeFormatW

  Sections

  .text

  Size: 1024B - Virtual size: 624B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-errorhandling-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  Password: 1231

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  46:d5:10:39:f7:b8:a4:ab:6e:4c:80:77:80:38:ac:97:d7:05:15:14:ce:2f:00:03:3a:00:4f:72:67:36:16:29

  Signer

  Actual PE Digest

  46:d5:10:39:f7:b8:a4:ab:6e:4c:80:77:80:38:ac:97:d7:05:15:14:ce:2f:00:03:3a:00:4f:72:67:36:16:29

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-errorhandling-l1-1-0.pdb

  Exports

  Exports

  GetErrorMode

  GetLastError

  RaiseException

  SetErrorMode

  SetLastError

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  Sections

  .text

  Size: 1024B - Virtual size: 806B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-fibers-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  Password: 1231

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8d:85:ba:7d:7a:eb:7f:e8:d4:22:39:e5:77:fb:e5:ba:dc:9f:a3:94:de:4c:a0:48:7e:20:ad:3d:fc:26:21:7b

  Signer

  Actual PE Digest

  8d:85:ba:7d:7a:eb:7f:e8:d4:22:39:e5:77:fb:e5:ba:dc:9f:a3:94:de:4c:a0:48:7e:20:ad:3d:fc:26:21:7b

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-fibers-l1-1-0.pdb

  Exports

  Exports

  FlsAlloc

  FlsFree

  FlsGetValue

  FlsSetValue

  Sections

  .text

  Size: 1024B - Virtual size: 584B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-file-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  Password: 1231

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  f4:78:f8:26:0e:c8:49:30:ac:75:c5:ed:0f:45:bc:4c:40:da:0c:70:e0:52:12:b5:5d:aa:7b:a9:26:9e:5b:e7

  Signer

  Actual PE Digest

  f4:78:f8:26:0e:c8:49:30:ac:75:c5:ed:0f:45:bc:4c:40:da:0c:70:e0:52:12:b5:5d:aa:7b:a9:26:9e:5b:e7

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-file-l1-1-0.pdb

  Exports

  Exports

  CompareFileTime

  CreateDirectoryA

  CreateDirectoryW

  CreateFileA

  CreateFileW

  DefineDosDeviceW

  DeleteFileA

  DeleteFileW

  DeleteVolumeMountPointW

  FileTimeToLocalFileTime

  FindClose

  FindCloseChangeNotification

  FindFirstChangeNotificationA

  FindFirstChangeNotificationW

  FindFirstFileA

  FindFirstFileExA

  FindFirstFileExW

  FindFirstFileW

  FindFirstVolumeW

  FindNextChangeNotification

  FindNextFileA

  FindNextFileW

  FindNextVolumeW

  FindVolumeClose

  FlushFileBuffers

  GetDiskFreeSpaceA

  GetDiskFreeSpaceExA

  GetDiskFreeSpaceExW

  GetDiskFreeSpaceW

  GetDriveTypeA

  GetDriveTypeW

  GetFileAttributesA

  GetFileAttributesExA

  GetFileAttributesExW

  GetFileAttributesW

  GetFileInformationByHandle

  GetFileSize

  GetFileSizeEx

  GetFileTime

  GetFileType

  GetFinalPathNameByHandleA

  GetFinalPathNameByHandleW

  GetFullPathNameA

  GetFullPathNameW

  GetLogicalDriveStringsW

  GetLogicalDrives

  GetLongPathNameA

  GetLongPathNameW

  GetShortPathNameW

  GetTempFileNameW

  GetVolumeInformationByHandleW

  GetVolumeInformationW

  GetVolumePathNameW

  LocalFileTimeToFileTime

  LockFile

  LockFileEx

  QueryDosDeviceW

  ReadFile

  ReadFileEx

  ReadFileScatter

  RemoveDirectoryA

  RemoveDirectoryW

  SetEndOfFile

  SetFileAttributesA

  SetFileAttributesW

  SetFileInformationByHandle

  SetFilePointer

  SetFilePointerEx

  SetFileTime

  SetFileValidData

  UnlockFile

  UnlockFileEx

  WriteFile

  WriteFileEx

  WriteFileGather

  Sections

  .text

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-file-l2-1-0.dll

  .dll windows:10 windows x86 arch:x86

  Password: 1231

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e2:8c:21:05:e8:da:61:fa:b8:b5:e9:d9:87:10:3a:fd:fa:18:6a:a7:2b:b5:79:6c:fd:d8:ae:37:b2:ca:50:da

  Signer

  Actual PE Digest

  e2:8c:21:05:e8:da:61:fa:b8:b5:e9:d9:87:10:3a:fd:fa:18:6a:a7:2b:b5:79:6c:fd:d8:ae:37:b2:ca:50:da

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-file-l2-1-0.pdb

  Exports

  Exports

  CopyFile2

  CopyFileExW

  CreateDirectoryExW

  CreateHardLinkW

  CreateSymbolicLinkW

  GetFileInformationByHandleEx

  MoveFileExW

  MoveFileWithProgressW

  ReOpenFile

  ReadDirectoryChangesW

  ReplaceFileW

  Sections

  .text

  Size: 1024B - Virtual size: 1005B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-interlocked-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  Password: 1231

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e2:06:dd:80:05:bd:c5:92:51:4c:af:e0:c2:ef:5b:fc:98:74:da:3b:3c:ad:3d:4e:6a:8f:e6:b4:bd:85:ec:ce

  Signer

  Actual PE Digest

  e2:06:dd:80:05:bd:c5:92:51:4c:af:e0:c2:ef:5b:fc:98:74:da:3b:3c:ad:3d:4e:6a:8f:e6:b4:bd:85:ec:ce

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-interlocked-l1-1-0.pdb

  Exports

  Exports

  InitializeSListHead

  InterlockedCompareExchange

  InterlockedCompareExchange64

  InterlockedDecrement

  InterlockedExchange

  InterlockedExchangeAdd

  InterlockedFlushSList

  InterlockedIncrement

  InterlockedPopEntrySList

  InterlockedPushEntrySList

  InterlockedPushListSList

  QueryDepthSList

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-namedpipe-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  74:58:ab:e3:a3:b2:9b:b4:5c:19:1c:93:b5:bd:d6:aa:25:92:92:92:c3:ce:fd:26:56:49:fb:a8:dc:a9:21:4f

  Signer

  Actual PE Digest

  74:58:ab:e3:a3:b2:9b:b4:5c:19:1c:93:b5:bd:d6:aa:25:92:92:92:c3:ce:fd:26:56:49:fb:a8:dc:a9:21:4f

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-namedpipe-l1-1-0.pdb

  Exports

  Exports

  ConnectNamedPipe

  CreateNamedPipeW

  CreatePipe

  DisconnectNamedPipe

  GetNamedPipeClientComputerNameW

  ImpersonateNamedPipeClient

  PeekNamedPipe

  SetNamedPipeHandleState

  TransactNamedPipe

  WaitNamedPipeW

  Sections

  .text

  Size: 1024B - Virtual size: 1009B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-processenvironment-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e3:ea:37:a6:ea:91:f6:ef:51:6f:80:7a:10:9e:35:a0:f7:07:08:48:88:71:e7:be:ce:c9:b0:ef:4e:6a:1e:14

  Signer

  Actual PE Digest

  e3:ea:37:a6:ea:91:f6:ef:51:6f:80:7a:10:9e:35:a0:f7:07:08:48:88:71:e7:be:ce:c9:b0:ef:4e:6a:1e:14

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-processenvironment-l1-1-0.pdb

  Exports

  Exports

  ExpandEnvironmentStringsA

  ExpandEnvironmentStringsW

  FreeEnvironmentStringsA

  FreeEnvironmentStringsW

  GetCommandLineA

  GetCommandLineW

  GetCurrentDirectoryA

  GetCurrentDirectoryW

  GetEnvironmentStrings

  GetEnvironmentStringsW

  GetEnvironmentVariableA

  GetEnvironmentVariableW

  GetStdHandle

  SearchPathW

  SetCurrentDirectoryA

  SetCurrentDirectoryW

  SetEnvironmentStringsW

  SetEnvironmentVariableA

  SetEnvironmentVariableW

  SetStdHandle

  SetStdHandleEx

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-processthreads-l1-1-1.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  31:63:7a:46:b7:2b:b4:9d:a2:5e:c4:61:52:66:db:a2:9b:92:bc:7f:39:15:67:5e:5d:f5:16:7f:80:1b:7e:8c

  Signer

  Actual PE Digest

  31:63:7a:46:b7:2b:b4:9d:a2:5e:c4:61:52:66:db:a2:9b:92:bc:7f:39:15:67:5e:5d:f5:16:7f:80:1b:7e:8c

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-processthreads-l1-1-1.pdb

  Exports

  Exports

  FlushInstructionCache

  GetCurrentProcessorNumber

  GetCurrentProcessorNumberEx

  GetCurrentThreadStackLimits

  GetProcessHandleCount

  GetProcessMitigationPolicy

  GetThreadContext

  GetThreadIdealProcessorEx

  GetThreadTimes

  IsProcessorFeaturePresent

  OpenProcess

  SetProcessMitigationPolicy

  SetThreadContext

  SetThreadIdealProcessorEx

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-profile-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  9e:e2:13:38:99:fb:e4:63:ad:ec:bd:74:d8:4b:9f:7b:1e:37:72:5e:62:7e:95:a0:68:fe:4c:21:30:e9:a1:f8

  Signer

  Actual PE Digest

  9e:e2:13:38:99:fb:e4:63:ad:ec:bd:74:d8:4b:9f:7b:1e:37:72:5e:62:7e:95:a0:68:fe:4c:21:30:e9:a1:f8

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-profile-l1-1-0.pdb

  Exports

  Exports

  QueryPerformanceCounter

  QueryPerformanceFrequency

  Sections

  .text

  Size: 1024B - Virtual size: 565B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-synch-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  31:3a:27:a2:d9:59:23:88:16:6f:85:92:8d:cf:bd:6d:98:19:76:e8:6b:46:47:03:19:cb:83:40:2e:9e:cb:66

  Signer

  Actual PE Digest

  31:3a:27:a2:d9:59:23:88:16:6f:85:92:8d:cf:bd:6d:98:19:76:e8:6b:46:47:03:19:cb:83:40:2e:9e:cb:66

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-synch-l1-1-0.pdb

  Exports

  Exports

  AcquireSRWLockExclusive

  AcquireSRWLockShared

  CancelWaitableTimer

  CreateEventA

  CreateEventExA

  CreateEventExW

  CreateEventW

  CreateMutexA

  CreateMutexExA

  CreateMutexExW

  CreateMutexW

  CreateSemaphoreExW

  CreateWaitableTimerExW

  DeleteCriticalSection

  EnterCriticalSection

  InitializeCriticalSection

  InitializeCriticalSectionAndSpinCount

  InitializeCriticalSectionEx

  InitializeSRWLock

  LeaveCriticalSection

  OpenEventA

  OpenEventW

  OpenMutexW

  OpenSemaphoreW

  OpenWaitableTimerW

  ReleaseMutex

  ReleaseSRWLockExclusive

  ReleaseSRWLockShared

  ReleaseSemaphore

  ResetEvent

  SetCriticalSectionSpinCount

  SetEvent

  SetWaitableTimer

  SetWaitableTimerEx

  SleepEx

  TryAcquireSRWLockExclusive

  TryAcquireSRWLockShared

  TryEnterCriticalSection

  WaitForMultipleObjectsEx

  WaitForSingleObject

  WaitForSingleObjectEx

  Sections

  .text

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-sysinfo-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2e:d6:a0:4c:1d:f6:27:d8:7a:4f:04:ec:c6:f9:43:25:52:bc:37:bf:79:7f:ec:32:ec:76:5c:76:d0:7e:0c:0a

  Signer

  Actual PE Digest

  2e:d6:a0:4c:1d:f6:27:d8:7a:4f:04:ec:c6:f9:43:25:52:bc:37:bf:79:7f:ec:32:ec:76:5c:76:d0:7e:0c:0a

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-sysinfo-l1-1-0.pdb

  Exports

  Exports

  GetComputerNameExA

  GetComputerNameExW

  GetLocalTime

  GetLogicalProcessorInformation

  GetLogicalProcessorInformationEx

  GetSystemDirectoryA

  GetSystemDirectoryW

  GetSystemInfo

  GetSystemTime

  GetSystemTimeAdjustment

  GetSystemTimeAsFileTime

  GetSystemWindowsDirectoryA

  GetSystemWindowsDirectoryW

  GetTickCount

  GetTickCount64

  GetVersion

  GetVersionExA

  GetVersionExW

  GetWindowsDirectoryA

  GetWindowsDirectoryW

  GlobalMemoryStatusEx

  SetLocalTime

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-timezone-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  53:76:bd:75:0c:14:a2:a2:23:0a:4d:22:56:21:e3:cd:94:90:c7:2c:44:7d:f4:ec:9a:91:39:6e:c5:34:ca:b8

  Signer

  Actual PE Digest

  53:76:bd:75:0c:14:a2:a2:23:0a:4d:22:56:21:e3:cd:94:90:c7:2c:44:7d:f4:ec:9a:91:39:6e:c5:34:ca:b8

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-timezone-l1-1-0.pdb

  Exports

  Exports

  EnumDynamicTimeZoneInformation

  FileTimeToSystemTime

  GetDynamicTimeZoneInformation

  GetDynamicTimeZoneInformationEffectiveYears

  GetTimeZoneInformation

  GetTimeZoneInformationForYear

  SetDynamicTimeZoneInformation

  SetTimeZoneInformation

  SystemTimeToFileTime

  SystemTimeToTzSpecificLocalTime

  SystemTimeToTzSpecificLocalTimeEx

  TzSpecificLocalTimeToSystemTime

  TzSpecificLocalTimeToSystemTimeEx

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-core-util-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  f8:33:d8:a9:45:86:d5:f4:5a:22:f5:bf:ac:b2:e1:66:db:e5:08:7d:0f:ab:7a:98:de:12:83:3c:0c:d0:ab:49

  Signer

  Actual PE Digest

  f8:33:d8:a9:45:86:d5:f4:5a:22:f5:bf:ac:b2:e1:66:db:e5:08:7d:0f:ab:7a:98:de:12:83:3c:0c:d0:ab:49

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-util-l1-1-0.pdb

  Exports

  Exports

  Beep

  DecodePointer

  DecodeSystemPointer

  EncodePointer

  EncodeSystemPointer

  Sections

  .text

  Size: 1024B - Virtual size: 665B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-crt-conio-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  a3:d9:86:f6:39:45:f1:09:50:69:13:21:ea:0b:15:fa:af:d4:b9:15:1d:ae:a2:bf:22:c0:28:f1:cd:a2:af:95

  Signer

  Actual PE Digest

  a3:d9:86:f6:39:45:f1:09:50:69:13:21:ea:0b:15:fa:af:d4:b9:15:1d:ae:a2:bf:22:c0:28:f1:cd:a2:af:95

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-conio-l1-1-0.pdb

  Exports

  Exports

  __conio_common_vcprintf

  __conio_common_vcprintf_p

  __conio_common_vcprintf_s

  __conio_common_vcscanf

  __conio_common_vcwprintf

  __conio_common_vcwprintf_p

  __conio_common_vcwprintf_s

  __conio_common_vcwscanf

  _cgets

  _cgets_s

  _cgetws

  _cgetws_s

  _cputs

  _cputws

  _getch

  _getch_nolock

  _getche

  _getche_nolock

  _getwch

  _getwch_nolock

  _getwche

  _getwche_nolock

  _putch

  _putch_nolock

  _putwch

  _putwch_nolock

  _ungetch

  _ungetch_nolock

  _ungetwch

  _ungetwch_nolock

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-crt-environment-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  a8:3d:d4:93:57:00:a9:1a:fd:6d:95:9a:34:f6:9b:73:0e:f6:ac:ab:c8:ca:ff:bd:e0:8b:66:a6:e7:97:f8:be

  Signer

  Actual PE Digest

  a8:3d:d4:93:57:00:a9:1a:fd:6d:95:9a:34:f6:9b:73:0e:f6:ac:ab:c8:ca:ff:bd:e0:8b:66:a6:e7:97:f8:be

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-environment-l1-1-0.pdb

  Exports

  Exports

  __p__environ

  __p__wenviron

  _dupenv_s

  _putenv

  _putenv_s

  _searchenv

  _searchenv_s

  _wdupenv_s

  _wgetcwd

  _wgetdcwd

  _wgetenv

  _wgetenv_s

  _wputenv

  _wputenv_s

  _wsearchenv

  _wsearchenv_s

  getenv

  getenv_s

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-crt-filesystem-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  c3:2a:fe:54:44:f7:a5:ac:c1:52:65:a0:40:01:18:93:17:13:a6:5b:d9:67:38:e5:48:26:d1:be:6d:06:c1:5d

  Signer

  Actual PE Digest

  c3:2a:fe:54:44:f7:a5:ac:c1:52:65:a0:40:01:18:93:17:13:a6:5b:d9:67:38:e5:48:26:d1:be:6d:06:c1:5d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-filesystem-l1-1-0.pdb

  Exports

  Exports

  _access

  _access_s

  _chdir

  _chdrive

  _chmod

  _findclose

  _findfirst32

  _findfirst32i64

  _findfirst64

  _findfirst64i32

  _findnext32

  _findnext32i64

  _findnext64

  _findnext64i32

  _fstat32

  _fstat32i64

  _fstat64

  _fstat64i32

  _fullpath

  _getdiskfree

  _getdrive

  _getdrives

  _lock_file

  _makepath

  _makepath_s

  _mkdir

  _rmdir

  _splitpath

  _splitpath_s

  _stat32

  _stat32i64

  _stat64

  _stat64i32

  _umask

  _umask_s

  _unlink

  _unlock_file

  _waccess

  _waccess_s

  _wchdir

  _wchmod

  _wfindfirst32

  _wfindfirst32i64

  _wfindfirst64

  _wfindfirst64i32

  _wfindnext32

  _wfindnext32i64

  _wfindnext64

  _wfindnext64i32

  _wfullpath

  _wmakepath

  _wmakepath_s

  _wmkdir

  _wremove

  _wrename

  _wrmdir

  _wsplitpath

  _wsplitpath_s

  _wstat32

  _wstat32i64

  _wstat64

  _wstat64i32

  _wunlink

  remove

  rename

  Sections

  .text

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-crt-heap-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  28:bc:00:91:93:ea:33:3c:98:2f:27:38:8b:aa:3e:20:32:b8:96:03:09:d2:dc:f1:fd:c0:0c:e8:0c:c2:0a:b8

  Signer

  Actual PE Digest

  28:bc:00:91:93:ea:33:3c:98:2f:27:38:8b:aa:3e:20:32:b8:96:03:09:d2:dc:f1:fd:c0:0c:e8:0c:c2:0a:b8

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-heap-l1-1-0.pdb

  Exports

  Exports

  _aligned_free

  _aligned_malloc

  _aligned_msize

  _aligned_offset_malloc

  _aligned_offset_realloc

  _aligned_offset_recalloc

  _aligned_realloc

  _aligned_recalloc

  _callnewh

  _calloc_base

  _expand

  _free_base

  _get_heap_handle

  _heapchk

  _heapmin

  _heapwalk

  _malloc_base

  _msize

  _query_new_handler

  _query_new_mode

  _realloc_base

  _recalloc

  _set_new_mode

  calloc

  free

  malloc

  realloc

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-crt-locale-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  74:af:d4:8a:5b:22:b8:c5:6a:f8:60:0b:fc:63:77:b4:ee:ff:5a:55:b3:15:d3:d8:44:7b:e4:bd:9a:6c:c7:ba

  Signer

  Actual PE Digest

  74:af:d4:8a:5b:22:b8:c5:6a:f8:60:0b:fc:63:77:b4:ee:ff:5a:55:b3:15:d3:d8:44:7b:e4:bd:9a:6c:c7:ba

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-locale-l1-1-0.pdb

  Exports

  Exports

  ___lc_codepage_func

  ___lc_collate_cp_func

  ___lc_locale_name_func

  ___mb_cur_max_func

  ___mb_cur_max_l_func

  __initialize_lconv_for_unsigned_char

  __pctype_func

  __pwctype_func

  _configthreadlocale

  _create_locale

  _free_locale

  _get_current_locale

  _getmbcp

  _lock_locales

  _setmbcp

  _unlock_locales

  _wcreate_locale

  _wsetlocale

  localeconv

  setlocale

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-crt-math-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  29:f9:5c:e5:c7:d5:1c:e0:37:fd:ee:f9:30:0a:f9:9e:7e:40:83:09:a5:24:67:10:70:dc:82:8c:e7:ef:ab:c1

  Signer

  Actual PE Digest

  29:f9:5c:e5:c7:d5:1c:e0:37:fd:ee:f9:30:0a:f9:9e:7e:40:83:09:a5:24:67:10:70:dc:82:8c:e7:ef:ab:c1

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-math-l1-1-0.pdb

  Exports

  Exports

  _CIacos

  _CIasin

  _CIatan

  _CIatan2

  _CIcos

  _CIcosh

  _CIexp

  _CIfmod

  _CIlog

  _CIlog10

  _CIpow

  _CIsin

  _CIsinh

  _CIsqrt

  _CItan

  _CItanh

  _Cbuild

  _Cmulcc

  _Cmulcr

  _FCbuild

  _FCmulcc

  _FCmulcr

  _LCbuild

  _LCmulcc

  _LCmulcr

  __libm_sse2_acos

  __libm_sse2_acosf

  __libm_sse2_asin

  __libm_sse2_asinf

  __libm_sse2_atan

  __libm_sse2_atan2

  __libm_sse2_atanf

  __libm_sse2_cos

  __libm_sse2_cosf

  __libm_sse2_exp

  __libm_sse2_expf

  __libm_sse2_log

  __libm_sse2_log10

  __libm_sse2_log10f

  __libm_sse2_logf

  __libm_sse2_pow

  __libm_sse2_powf

  __libm_sse2_sin

  __libm_sse2_sinf

  __libm_sse2_tan

  __libm_sse2_tanf

  __setusermatherr

  _cabs

  _chgsign

  _chgsignf

  _copysign

  _copysignf

  _d_int

  _dclass

  _dexp

  _dlog

  _dnorm

  _dpcomp

  _dpoly

  _dscale

  _dsign

  _dsin

  _dtest

  _dunscale

  _except1

  _fd_int

  _fdclass

  _fdexp

  _fdlog

  _fdnorm

  _fdopen

  _fdpcomp

  _fdpoly

  _fdscale

  _fdsign

  _fdsin

  _fdtest

  _fdunscale

  _finite

  _fpclass

  _ftol

  _hypot

  _hypotf

  _isnan

  _j0

  _j1

  _jn

  _ld_int

  _ldclass

  _ldexp

  _ldlog

  _ldpcomp

  _ldpoly

  _ldscale

  _ldsign

  _ldsin

  _ldtest

  _ldunscale

  _libm_sse2_acos_precise

  _libm_sse2_asin_precise

  _libm_sse2_atan_precise

  _libm_sse2_cos_precise

  _libm_sse2_exp_precise

  _libm_sse2_log10_precise

  _libm_sse2_log_precise

  _libm_sse2_pow_precise

  _libm_sse2_sin_precise

  _libm_sse2_sqrt_precise

  _libm_sse2_tan_precise

  _logb

  _nextafter

  _scalb

  _set_SSE2_enable

  _y0

  _y1

  _yn

  acos

  acosh

  acoshf

  acoshl

  asin

  asinh

  asinhf

  asinhl

  atan

  atan2

  atanh

  atanhf

  atanhl

  cabs

  cabsf

  cabsl

  cacos

  cacosf

  cacosh

  cacoshf

  cacoshl

  cacosl

  carg

  cargf

  cargl

  casin

  casinf

  casinh

  casinhf

  casinhl

  casinl

  catan

  catanf

  catanh

  catanhf

  catanhl

  catanl

  cbrt

  cbrtf

  cbrtl

  ccos

  ccosf

  ccosh

  ccoshf

  ccoshl

  ccosl

  ceil

  cexp

  cexpf

  cexpl

  cimag

  cimagf

  cimagl

  clog

  clog10

  clog10f

  clog10l

  clogf

  clogl

  conj

  conjf

  conjl

  copysign

  copysignf

  copysignl

  cos

  cosh

  cpow

  cpowf

  cpowl

  cproj

  cprojf

  cprojl

  creal

  crealf

  creall

  csin

  csinf

  csinh

  csinhf

  csinhl

  csinl

  csqrt

  csqrtf

  csqrtl

  ctan

  ctanf

  ctanh

  ctanhf

  ctanhl

  ctanl

  erf

  erfc

  erfcf

  erfcl

  erff

  erfl

  exp

  exp2

  exp2f

  exp2l

  expm1

  expm1f

  expm1l

  fabs

  fdim

  fdimf

  fdiml

  floor

  fma

  fmaf

  fmal

  fmax

  fmaxf

  fmaxl

  fmin

  fminf

  fminl

  fmod

  frexp

  hypot

  ilogb

  ilogbf

  ilogbl

  ldexp

  lgamma

  lgammaf

  lgammal

  llrint

  llrintf

  llrintl

  llround

  llroundf

  llroundl

  log

  log10

  log1p

  log1pf

  log1pl

  log2

  log2f

  log2l

  logb

  logbf

  logbl

  lrint

  lrintf

  lrintl

  lround

  lroundf

  lroundl

  modf

  nan

  nanf

  nanl

  nearbyint

  nearbyintf

  nearbyintl

  nextafter

  nextafterf

  nextafterl

  nexttoward

  nexttowardf

  nexttowardl

  norm

  normf

  norml

  pow

  powf

  remainder

  remainderf

  remainderl

  remquo

  remquof

  remquol

  rint

  rintf

  rintl

  round

  roundf

  roundl

  scalbln

  scalblnf

  scalblnl

  scalbn

  scalbnf

  scalbnl

  sin

  sinh

  sqrt

  tan

  tanh

  tgamma

  tgammaf

  tgammal

  trunc

  truncf

  truncl

  Sections

  .text

  Size: 11KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-crt-multibyte-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ae:9c:b0:65:28:80:4c:61:b5:0d:c5:55:3d:22:27:a6:54:04:b1:7f:d8:a1:aa:53:04:bb:ce:64:91:c0:3b:e0

  Signer

  Actual PE Digest

  ae:9c:b0:65:28:80:4c:61:b5:0d:c5:55:3d:22:27:a6:54:04:b1:7f:d8:a1:aa:53:04:bb:ce:64:91:c0:3b:e0

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-multibyte-l1-1-0.pdb

  Exports

  Exports

  __p__mbcasemap

  __p__mbctype

  _ismbbalnum

  _ismbbalnum_l

  _ismbbalpha

  _ismbbalpha_l

  _ismbbblank

  _ismbbblank_l

  _ismbbgraph

  _ismbbgraph_l

  _ismbbkalnum

  _ismbbkalnum_l

  _ismbbkana

  _ismbbkana_l

  _ismbbkprint

  _ismbbkprint_l

  _ismbbkpunct

  _ismbbkpunct_l

  _ismbblead

  _ismbblead_l

  _ismbbprint

  _ismbbprint_l

  _ismbbpunct

  _ismbbpunct_l

  _ismbbtrail

  _ismbbtrail_l

  _ismbcalnum

  _ismbcalnum_l

  _ismbcalpha

  _ismbcalpha_l

  _ismbcblank

  _ismbcblank_l

  _ismbcdigit

  _ismbcdigit_l

  _ismbcgraph

  _ismbcgraph_l

  _ismbchira

  _ismbchira_l

  _ismbckata

  _ismbckata_l

  _ismbcl0

  _ismbcl0_l

  _ismbcl1

  _ismbcl1_l

  _ismbcl2

  _ismbcl2_l

  _ismbclegal

  _ismbclegal_l

  _ismbclower

  _ismbclower_l

  _ismbcprint

  _ismbcprint_l

  _ismbcpunct

  _ismbcpunct_l

  _ismbcspace

  _ismbcspace_l

  _ismbcsymbol

  _ismbcsymbol_l

  _ismbcupper

  _ismbcupper_l

  _ismbslead

  _ismbslead_l

  _ismbstrail

  _ismbstrail_l

  _mbbtombc

  _mbbtombc_l

  _mbbtype

  _mbbtype_l

  _mbcasemap

  _mbccpy

  _mbccpy_l

  _mbccpy_s

  _mbccpy_s_l

  _mbcjistojms

  _mbcjistojms_l

  _mbcjmstojis

  _mbcjmstojis_l

  _mbclen

  _mbclen_l

  _mbctohira

  _mbctohira_l

  _mbctokata

  _mbctokata_l

  _mbctolower

  _mbctolower_l

  _mbctombb

  _mbctombb_l

  _mbctoupper

  _mbctoupper_l

  _mblen_l

  _mbsbtype

  _mbsbtype_l

  _mbscat_s

  _mbscat_s_l

  _mbschr

  _mbschr_l

  _mbscmp

  _mbscmp_l

  _mbscoll

  _mbscoll_l

  _mbscpy_s

  _mbscpy_s_l

  _mbscspn

  _mbscspn_l

  _mbsdec

  _mbsdec_l

  _mbsdup

  _mbsicmp

  _mbsicmp_l

  _mbsicoll

  _mbsicoll_l

  _mbsinc

  _mbsinc_l

  _mbslen

  _mbslen_l

  _mbslwr

  _mbslwr_l

  _mbslwr_s

  _mbslwr_s_l

  _mbsnbcat

  _mbsnbcat_l

  _mbsnbcat_s

  _mbsnbcat_s_l

  _mbsnbcmp

  _mbsnbcmp_l

  _mbsnbcnt

  _mbsnbcnt_l

  _mbsnbcoll

  _mbsnbcoll_l

  _mbsnbcpy

  _mbsnbcpy_l

  _mbsnbcpy_s

  _mbsnbcpy_s_l

  _mbsnbicmp

  _mbsnbicmp_l

  _mbsnbicoll

  _mbsnbicoll_l

  _mbsnbset

  _mbsnbset_l

  _mbsnbset_s

  _mbsnbset_s_l

  _mbsncat

  _mbsncat_l

  _mbsncat_s

  _mbsncat_s_l

  _mbsnccnt

  _mbsnccnt_l

  _mbsncmp

  _mbsncmp_l

  _mbsncoll

  _mbsncoll_l

  _mbsncpy

  _mbsncpy_l

  _mbsncpy_s

  _mbsncpy_s_l

  _mbsnextc

  _mbsnextc_l

  _mbsnicmp

  _mbsnicmp_l

  _mbsnicoll

  _mbsnicoll_l

  _mbsninc

  _mbsninc_l

  _mbsnlen

  _mbsnlen_l

  _mbsnset

  _mbsnset_l

  _mbsnset_s

  _mbsnset_s_l

  _mbspbrk

  _mbspbrk_l

  _mbsrchr

  _mbsrchr_l

  _mbsrev

  _mbsrev_l

  _mbsset

  _mbsset_l

  _mbsset_s

  _mbsset_s_l

  _mbsspn

  _mbsspn_l

  _mbsspnp

  _mbsspnp_l

  _mbsstr

  _mbsstr_l

  _mbstok

  _mbstok_l

  _mbstok_s

  _mbstok_s_l

  _mbstowcs_l

  _mbstowcs_s_l

  _mbstrlen

  _mbstrlen_l

  _mbstrnlen

  _mbstrnlen_l

  _mbsupr

  _mbsupr_l

  _mbsupr_s

  _mbsupr_s_l

  _mbtowc_l

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-crt-private-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:ba:64:bb:77:60:ee:52:c4:63:3c:b7:42:43:1a:f8:d7:e1:e8:bc:75:fe:17:07:5e:f0:aa:d2:74:19:83:94

  Signer

  Actual PE Digest

  7b:ba:64:bb:77:60:ee:52:c4:63:3c:b7:42:43:1a:f8:d7:e1:e8:bc:75:fe:17:07:5e:f0:aa:d2:74:19:83:94

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-private-l1-1-0.pdb

  Exports

  Exports

  _CreateFrameInfo

  _CxxThrowException

  _EH_prolog

  _FindAndUnlinkFrame

  _IsExceptionObjectToBeDestroyed

  _NLG_Dispatch2

  _NLG_Return

  _NLG_Return2

  _SetWinRTOutOfMemoryExceptionCallback

  __AdjustPointer

  __BuildCatchObject

  __BuildCatchObjectHelper

  __CxxDetectRethrow

  __CxxExceptionFilter

  __CxxFrameHandler

  __CxxFrameHandler2

  __CxxFrameHandler3

  __CxxLongjmpUnwind

  __CxxQueryExceptionSize

  __CxxRegisterExceptionObject

  __CxxUnregisterExceptionObject

  __DestructExceptionObject

  __FrameUnwindFilter

  __GetPlatformExceptionInfo

  __RTCastToVoid

  __RTDynamicCast

  __RTtypeid

  __TypeMatch

  __current_exception

  __current_exception_context

  __dcrt_get_wide_environment_from_os

  __dcrt_initial_narrow_environment

  __intrinsic_abnormal_termination

  __intrinsic_setjmp

  __processing_throw

  __report_gsfailure

  __std_exception_copy

  __std_exception_destroy

  __std_terminate

  __std_type_info_compare

  __std_type_info_destroy_list

  __std_type_info_hash

  __std_type_info_name

  __unDName

  __unDNameEx

  __uncaught_exception

  __uncaught_exceptions

  _chkesp

  _except_handler2

  _except_handler3

  _except_handler4_common

  _get_purecall_handler

  _get_unexpected

  _global_unwind2

  _is_exception_typeof

  _local_unwind2

  _local_unwind4

  _longjmpex

  _o__CIacos

  _o__CIasin

  _o__CIatan

  _o__CIatan2

  _o__CIcos

  _o__CIcosh

  _o__CIexp

  _o__CIfmod

  _o__CIlog

  _o__CIlog10

  _o__CIpow

  _o__CIsin

  _o__CIsinh

  _o__CIsqrt

  _o__CItan

  _o__CItanh

  _o__Getdays

  _o__Getmonths

  _o__Gettnames

  _o__Strftime

  _o__W_Getdays

  _o__W_Getmonths

  _o__W_Gettnames

  _o__Wcsftime

  _o____lc_codepage_func

  _o____lc_collate_cp_func

  _o____lc_locale_name_func

  _o____mb_cur_max_func

  _o___acrt_iob_func

  _o___conio_common_vcprintf

  _o___conio_common_vcprintf_p

  _o___conio_common_vcprintf_s

  _o___conio_common_vcscanf

  _o___conio_common_vcwprintf

  _o___conio_common_vcwprintf_p

  _o___conio_common_vcwprintf_s

  _o___conio_common_vcwscanf

  _o___daylight

  _o___dstbias

  _o___fpe_flt_rounds

  _o___libm_sse2_acos

  _o___libm_sse2_acosf

  _o___libm_sse2_asin

  _o___libm_sse2_asinf

  _o___libm_sse2_atan

  _o___libm_sse2_atan2

  _o___libm_sse2_atanf

  _o___libm_sse2_cos

  _o___libm_sse2_cosf

  _o___libm_sse2_exp

  _o___libm_sse2_expf

  _o___libm_sse2_log

  _o___libm_sse2_log10

  _o___libm_sse2_log10f

  _o___libm_sse2_logf

  _o___libm_sse2_pow

  _o___libm_sse2_powf

  _o___libm_sse2_sin

  _o___libm_sse2_sinf

  _o___libm_sse2_tan

  _o___libm_sse2_tanf

  _o___p___argc

  _o___p___argv

  _o___p___wargv

  _o___p__acmdln

  _o___p__commode

  _o___p__environ

  _o___p__fmode

  _o___p__mbcasemap

  _o___p__mbctype

  _o___p__pgmptr

  _o___p__wcmdln

  _o___p__wenviron

  _o___p__wpgmptr

  _o___pctype_func

  _o___pwctype_func

  _o___std_exception_copy

  _o___std_exception_destroy

  _o___std_type_info_destroy_list

  _o___std_type_info_name

  _o___stdio_common_vfprintf

  _o___stdio_common_vfprintf_p

  _o___stdio_common_vfprintf_s

  _o___stdio_common_vfscanf

  _o___stdio_common_vfwprintf

  _o___stdio_common_vfwprintf_p

  _o___stdio_common_vfwprintf_s

  _o___stdio_common_vfwscanf

  _o___stdio_common_vsnprintf_s

  _o___stdio_common_vsnwprintf_s

  _o___stdio_common_vsprintf

  _o___stdio_common_vsprintf_p

  _o___stdio_common_vsprintf_s

  _o___stdio_common_vsscanf

  _o___stdio_common_vswprintf

  _o___stdio_common_vswprintf_p

  _o___stdio_common_vswprintf_s

  _o___stdio_common_vswscanf

  _o___timezone

  _o___tzname

  _o___wcserror

  _o__access

  _o__access_s

  _o__aligned_free

  _o__aligned_malloc

  _o__aligned_msize

  _o__aligned_offset_malloc

  _o__aligned_offset_realloc

  _o__aligned_offset_recalloc

  _o__aligned_realloc

  _o__aligned_recalloc

  _o__atodbl

  _o__atodbl_l

  _o__atof_l

  _o__atoflt

  _o__atoflt_l

  _o__atoi64

  _o__atoi64_l

  _o__atoi_l

  _o__atol_l

  _o__atoldbl

  _o__atoldbl_l

  _o__atoll_l

  _o__beep

  _o__beginthread

  _o__beginthreadex

  _o__cabs

  _o__callnewh

  _o__calloc_base

  _o__cexit

  _o__cgets

  _o__cgets_s

  _o__cgetws

  _o__cgetws_s

  _o__chdir

  _o__chdrive

  _o__chmod

  _o__chsize

  _o__chsize_s

  _o__close

  _o__commit

  _o__configthreadlocale

  _o__configure_narrow_argv

  _o__configure_wide_argv

  _o__controlfp_s

  _o__cputs

  _o__cputws

  _o__creat

  _o__create_locale

  _o__crt_atexit

  _o__ctime32_s

  _o__ctime64_s

  _o__cwait

  _o__d_int

  _o__dclass

  _o__difftime32

  _o__difftime64

  _o__dlog

  _o__dnorm

  _o__dpcomp

  _o__dpoly

  _o__dscale

  _o__dsign

  _o__dsin

  _o__dtest

  _o__dunscale

  _o__dup

  _o__dup2

  _o__dupenv_s

  _o__ecvt

  _o__ecvt_s

  _o__endthread

  _o__endthreadex

  _o__eof

  _o__errno

  _o__except1

  _o__execute_onexit_table

  _o__execv

  _o__execve

  _o__execvp

  _o__execvpe

  _o__exit

  _o__expand

  _o__fclose_nolock

  _o__fcloseall

  _o__fcvt

  _o__fcvt_s

  _o__fd_int

  _o__fdclass

  _o__fdexp

  _o__fdlog

  _o__fdopen

  _o__fdpcomp

  _o__fdpoly

  _o__fdscale

  _o__fdsign

  _o__fdsin

  _o__fflush_nolock

  _o__fgetc_nolock

  _o__fgetchar

  _o__fgetwc_nolock

  _o__fgetwchar

  _o__filelength

  _o__filelengthi64

  _o__fileno

  _o__findclose

  _o__findfirst32

  _o__findfirst32i64

  _o__findfirst64

  _o__findfirst64i32

  _o__findnext32

  _o__findnext32i64

  _o__findnext64

  _o__findnext64i32

  _o__flushall

  _o__fpclass

  _o__fputc_nolock

  _o__fputchar

  _o__fputwc_nolock

  _o__fputwchar

  _o__fread_nolock

  _o__fread_nolock_s

  _o__free_base

  _o__free_locale

  _o__fseek_nolock

  _o__fseeki64

  _o__fseeki64_nolock

  _o__fsopen

  _o__fstat32

  _o__fstat32i64

  _o__fstat64

  _o__fstat64i32

  _o__ftell_nolock

  _o__ftelli64

  _o__ftelli64_nolock

  _o__ftime32

  _o__ftime32_s

  _o__ftime64

  _o__ftime64_s

  _o__fullpath

  _o__futime32

  _o__futime64

  _o__fwrite_nolock

  _o__gcvt

  _o__gcvt_s

  _o__get_daylight

  _o__get_doserrno

  _o__get_dstbias

  _o__get_errno

  _o__get_fmode

  _o__get_heap_handle

  _o__get_initial_narrow_environment

  _o__get_initial_wide_environment

  _o__get_invalid_parameter_handler

  _o__get_narrow_winmain_command_line

  _o__get_osfhandle

  _o__get_pgmptr

  _o__get_stream_buffer_pointers

  _o__get_terminate

  _o__get_thread_local_invalid_parameter_handler

  _o__get_timezone

  _o__get_tzname

  _o__get_wide_winmain_command_line

  _o__get_wpgmptr

  _o__getc_nolock

  _o__getch

  _o__getch_nolock

  _o__getche

  _o__getche_nolock

  _o__getcwd

  _o__getdcwd

  _o__getdiskfree

  _o__getdllprocaddr

  _o__getdrive

  _o__getdrives

  _o__getmbcp

  _o__getsystime

  _o__getw

  _o__getwc_nolock

  _o__getwch

  _o__getwch_nolock

  _o__getwche

  _o__getwche_nolock

  _o__getws

  _o__getws_s

  _o__gmtime32

  _o__gmtime32_s

  _o__gmtime64

  _o__gmtime64_s

  _o__heapchk

  _o__heapmin

  _o__hypot

  _o__hypotf

  _o__i64toa

  _o__i64toa_s

  _o__i64tow

  _o__i64tow_s

  _o__initialize_narrow_environment

  _o__initialize_onexit_table

  _o__initialize_wide_environment

  _o__invalid_parameter_noinfo

  _o__invalid_parameter_noinfo_noreturn

  _o__isatty

  _o__isctype

  _o__isctype_l

  _o__isleadbyte_l

  _o__ismbbalnum

  _o__ismbbalnum_l

  _o__ismbbalpha

  _o__ismbbalpha_l

  _o__ismbbblank

  _o__ismbbblank_l

  _o__ismbbgraph

  _o__ismbbgraph_l

  _o__ismbbkalnum

  _o__ismbbkalnum_l

  _o__ismbbkana

  _o__ismbbkana_l

  _o__ismbbkprint

  _o__ismbbkprint_l

  _o__ismbbkpunct

  _o__ismbbkpunct_l

  _o__ismbblead

  _o__ismbblead_l

  _o__ismbbprint

  _o__ismbbprint_l

  _o__ismbbpunct

  _o__ismbbpunct_l

  _o__ismbbtrail

  _o__ismbbtrail_l

  _o__ismbcalnum

  _o__ismbcalnum_l

  _o__ismbcalpha

  _o__ismbcalpha_l

  _o__ismbcblank

  _o__ismbcblank_l

  _o__ismbcdigit

  _o__ismbcdigit_l

  _o__ismbcgraph

  _o__ismbcgraph_l

  _o__ismbchira

  _o__ismbchira_l

  _o__ismbckata

  _o__ismbckata_l

  _o__ismbcl0

  _o__ismbcl0_l

  _o__ismbcl1

  _o__ismbcl1_l

  _o__ismbcl2

  _o__ismbcl2_l

  _o__ismbclegal

  _o__ismbclegal_l

  _o__ismbclower

  _o__ismbclower_l

  _o__ismbcprint

  _o__ismbcprint_l

  _o__ismbcpunct

  _o__ismbcpunct_l

  _o__ismbcspace

  _o__ismbcspace_l

  _o__ismbcsymbol

  _o__ismbcsymbol_l

  _o__ismbcupper

  _o__ismbcupper_l

  _o__ismbslead

  _o__ismbslead_l

  _o__ismbstrail

  _o__ismbstrail_l

  _o__iswctype_l

  _o__itoa

  _o__itoa_s

  _o__itow

  _o__itow_s

  _o__j0

  _o__j1

  _o__jn

  _o__kbhit

  _o__ld_int

  _o__ldclass

  _o__ldexp

  _o__ldlog

  _o__ldpcomp

  _o__ldpoly

  _o__ldscale

  _o__ldsign

  _o__ldsin

  _o__ldtest

  _o__ldunscale

  _o__lfind

  _o__lfind_s

  _o__libm_sse2_acos_precise

  _o__libm_sse2_asin_precise

  _o__libm_sse2_atan_precise

  _o__libm_sse2_cos_precise

  _o__libm_sse2_exp_precise

  _o__libm_sse2_log10_precise

  _o__libm_sse2_log_precise

  _o__libm_sse2_pow_precise

  _o__libm_sse2_sin_precise

  _o__libm_sse2_sqrt_precise

  _o__libm_sse2_tan_precise

  _o__loaddll

  _o__localtime32

  _o__localtime32_s

  _o__localtime64

  _o__localtime64_s

  _o__lock_file

  _o__locking

  _o__logb

  _o__lsearch

  _o__lsearch_s

  _o__lseek

  _o__lseeki64

  _o__ltoa

  _o__ltoa_s

  _o__ltow

  _o__ltow_s

  _o__makepath

  _o__makepath_s

  _o__malloc_base

  _o__mbbtombc

  _o__mbbtombc_l

  _o__mbbtype

  _o__mbbtype_l

  _o__mbccpy

  _o__mbccpy_l

  _o__mbccpy_s

  _o__mbccpy_s_l

  _o__mbcjistojms

  _o__mbcjistojms_l

  _o__mbcjmstojis

  _o__mbcjmstojis_l

  _o__mbclen

  _o__mbclen_l

  _o__mbctohira

  _o__mbctohira_l

  _o__mbctokata

  _o__mbctokata_l

  _o__mbctolower

  _o__mbctolower_l

  _o__mbctombb

  _o__mbctombb_l

  Sections

  .text

  Size: 54KB - Virtual size: 54KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-crt-runtime-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  83:d2:a9:e3:8d:c3:e6:40:ee:11:44:d4:ca:10:0e:be:c8:24:1b:a9:13:51:90:ff:26:73:72:e1:89:11:20:0c

  Signer

  Actual PE Digest

  83:d2:a9:e3:8d:c3:e6:40:ee:11:44:d4:ca:10:0e:be:c8:24:1b:a9:13:51:90:ff:26:73:72:e1:89:11:20:0c

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-runtime-l1-1-0.pdb

  Exports

  Exports

  _Exit

  __control87_2

  __doserrno

  __fpe_flt_rounds

  __fpecode

  __p___argc

  __p___argv

  __p___wargv

  __p__acmdln

  __p__pgmptr

  __p__wcmdln

  __p__wpgmptr

  __pxcptinfoptrs

  __sys_errlist

  __sys_nerr

  __threadhandle

  __threadid

  __wcserror

  __wcserror_s

  _assert

  _beginthread

  _beginthreadex

  _c_exit

  _cexit

  _clearfp

  _configure_narrow_argv

  _configure_wide_argv

  _control87

  _controlfp

  _controlfp_s

  _crt_at_quick_exit

  _crt_atexit

  _crt_debugger_hook

  _endthread

  _endthreadex

  _errno

  _execute_onexit_table

  _exit

  _fpieee_flt

  _fpreset

  _get_doserrno

  _get_errno

  _get_initial_narrow_environment

  _get_initial_wide_environment

  _get_invalid_parameter_handler

  _get_narrow_winmain_command_line

  _get_pgmptr

  _get_terminate

  _get_thread_local_invalid_parameter_handler

  _get_wide_winmain_command_line

  _get_wpgmptr

  _getdllprocaddr

  _getpid

  _initialize_narrow_environment

  _initialize_onexit_table

  _initialize_wide_environment

  _initterm

  _initterm_e

  _invalid_parameter_noinfo

  _invalid_parameter_noinfo_noreturn

  _invoke_watson

  _query_app_type

  _register_onexit_function

  _register_thread_local_exe_atexit_callback

  _resetstkoflw

  _seh_filter_dll

  _seh_filter_exe

  _set_abort_behavior

  _set_app_type

  _set_controlfp

  _set_doserrno

  _set_errno

  _set_error_mode

  _set_invalid_parameter_handler

  _set_new_handler

  _set_thread_local_invalid_parameter_handler

  _seterrormode

  _sleep

  _statusfp

  _statusfp2

  _strerror

  _strerror_s

  _wassert

  _wcserror

  _wcserror_s

  _wperror

  _wsystem

  abort

  exit

  feclearexcept

  fegetenv

  fegetexceptflag

  fegetround

  feholdexcept

  fesetenv

  fesetexceptflag

  fesetround

  fetestexcept

  perror

  quick_exit

  raise

  set_terminate

  signal

  strerror

  strerror_s

  system

  terminate

  Sections

  .text

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-crt-stdio-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:d8:7f:39:8f:4a:20:88:45:11:59:3f:d7:4b:a7:66:83:0e:aa:26:c2:83:36:74:33:87:b7:a0:85:fa:e6:34

  Signer

  Actual PE Digest

  30:d8:7f:39:8f:4a:20:88:45:11:59:3f:d7:4b:a7:66:83:0e:aa:26:c2:83:36:74:33:87:b7:a0:85:fa:e6:34

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-stdio-l1-1-0.pdb

  Exports

  Exports

  __acrt_iob_func

  __p__commode

  __p__fmode

  __stdio_common_vfprintf

  __stdio_common_vfprintf_p

  __stdio_common_vfprintf_s

  __stdio_common_vfscanf

  __stdio_common_vfwprintf

  __stdio_common_vfwprintf_p

  __stdio_common_vfwprintf_s

  __stdio_common_vfwscanf

  __stdio_common_vsnprintf_s

  __stdio_common_vsnwprintf_s

  __stdio_common_vsprintf

  __stdio_common_vsprintf_p

  __stdio_common_vsprintf_s

  __stdio_common_vsscanf

  __stdio_common_vswprintf

  __stdio_common_vswprintf_p

  __stdio_common_vswprintf_s

  __stdio_common_vswscanf

  _chsize

  _chsize_s

  _close

  _commit

  _creat

  _dup

  _dup2

  _eof

  _fclose_nolock

  _fcloseall

  _fflush_nolock

  _fgetc_nolock

  _fgetchar

  _fgetwc_nolock

  _fgetwchar

  _filelength

  _filelengthi64

  _fileno

  _flushall

  _fputc_nolock

  _fputchar

  _fputwc_nolock

  _fputwchar

  _fread_nolock

  _fread_nolock_s

  _fseek_nolock

  _fseeki64

  _fseeki64_nolock

  _fsopen

  _ftell_nolock

  _ftelli64

  _ftelli64_nolock

  _fwrite_nolock

  _get_fmode

  _get_osfhandle

  _get_printf_count_output

  _get_stream_buffer_pointers

  _getc_nolock

  _getcwd

  _getdcwd

  _getmaxstdio

  _getw

  _getwc_nolock

  _getws

  _getws_s

  _isatty

  _kbhit

  _locking

  _lseek

  _lseeki64

  _mktemp

  _mktemp_s

  _open

  _open_osfhandle

  _pclose

  _pipe

  _popen

  _putc_nolock

  _putw

  _putwc_nolock

  _putws

  _read

  _rmtmp

  _set_fmode

  _set_printf_count_output

  _setmaxstdio

  _setmode

  _sopen

  _sopen_dispatch

  _sopen_s

  _tell

  _telli64

  _tempnam

  _ungetc_nolock

  _ungetwc_nolock

  _wcreat

  _wfdopen

  _wfopen

  _wfopen_s

  _wfreopen

  _wfreopen_s

  _wfsopen

  _wmktemp

  _wmktemp_s

  _wopen

  _wpopen

  _write

  _wsopen

  _wsopen_dispatch

  _wsopen_s

  _wtempnam

  _wtmpnam

  _wtmpnam_s

  clearerr

  clearerr_s

  fclose

  feof

  ferror

  fflush

  fgetc

  fgetpos

  fgets

  fgetwc

  fgetws

  fopen

  fopen_s

  fputc

  fputs

  fputwc

  fputws

  fread

  fread_s

  freopen

  freopen_s

  fseek

  fsetpos

  ftell

  fwrite

  getc

  getchar

  gets

  gets_s

  getwc

  getwchar

  putc

  putchar

  puts

  putwc

  putwchar

  rewind

  setbuf

  setvbuf

  tmpfile

  tmpfile_s

  tmpnam

  tmpnam_s

  ungetc

  ungetwc

  Sections

  .text

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-crt-string-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  d4:14:07:75:d4:f4:81:dd:20:bd:2c:69:71:4f:10:3b:a7:16:b0:e5:42:01:d7:b9:e4:a7:8a:a0:1a:e0:dd:33

  Signer

  Actual PE Digest

  d4:14:07:75:d4:f4:81:dd:20:bd:2c:69:71:4f:10:3b:a7:16:b0:e5:42:01:d7:b9:e4:a7:8a:a0:1a:e0:dd:33

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-string-l1-1-0.pdb

  Exports

  Exports

  __isascii

  __iscsym

  __iscsymf

  __iswcsym

  __iswcsymf

  __strncnt

  __wcsncnt

  _isalnum_l

  _isalpha_l

  _isblank_l

  _iscntrl_l

  _isctype

  _isctype_l

  _isdigit_l

  _isgraph_l

  _isleadbyte_l

  _islower_l

  _isprint_l

  _ispunct_l

  _isspace_l

  _isupper_l

  _iswalnum_l

  _iswalpha_l

  _iswblank_l

  _iswcntrl_l

  _iswcsym_l

  _iswcsymf_l

  _iswctype_l

  _iswdigit_l

  _iswgraph_l

  _iswlower_l

  _iswprint_l

  _iswpunct_l

  _iswspace_l

  _iswupper_l

  _iswxdigit_l

  _isxdigit_l

  _memccpy

  _memicmp

  _memicmp_l

  _strcoll_l

  _strdup

  _stricmp

  _stricmp_l

  _stricoll

  _stricoll_l

  _strlwr

  _strlwr_l

  _strlwr_s

  _strlwr_s_l

  _strncoll

  _strncoll_l

  _strnicmp

  _strnicmp_l

  _strnicoll

  _strnicoll_l

  _strnset

  _strnset_s

  _strrev

  _strset

  _strset_s

  _strupr

  _strupr_l

  _strupr_s

  _strupr_s_l

  _strxfrm_l

  _tolower

  _tolower_l

  _toupper

  _toupper_l

  _towlower_l

  _towupper_l

  _wcscoll_l

  _wcsdup

  _wcsicmp

  _wcsicmp_l

  _wcsicoll

  _wcsicoll_l

  _wcslwr

  _wcslwr_l

  _wcslwr_s

  _wcslwr_s_l

  _wcsncoll

  _wcsncoll_l

  _wcsnicmp

  _wcsnicmp_l

  _wcsnicoll

  _wcsnicoll_l

  _wcsnset

  _wcsnset_s

  _wcsrev

  _wcsset

  _wcsset_s

  _wcsupr

  _wcsupr_l

  _wcsupr_s

  _wcsupr_s_l

  _wcsxfrm_l

  _wctype

  is_wctype

  isalnum

  isalpha

  isblank

  iscntrl

  isdigit

  isgraph

  isleadbyte

  islower

  isprint

  ispunct

  isspace

  isupper

  iswalnum

  iswalpha

  iswascii

  iswblank

  iswcntrl

  iswctype

  iswdigit

  iswgraph

  iswlower

  iswprint

  iswpunct

  iswspace

  iswupper

  iswxdigit

  isxdigit

  mblen

  mbrlen

  memcpy_s

  memmove_s

  memset

  strcat

  strcat_s

  strcmp

  strcoll

  strcpy

  strcpy_s

  strcspn

  strlen

  strncat

  strncat_s

  strncmp

  strncpy

  strncpy_s

  strnlen

  strpbrk

  strspn

  strtok

  strtok_s

  strxfrm

  tolower

  toupper

  towctrans

  towlower

  towupper

  wcscat

  wcscat_s

  wcscmp

  wcscoll

  wcscpy

  wcscpy_s

  wcscspn

  wcslen

  wcsncat

  wcsncat_s

  wcsncmp

  wcsncpy

  wcsncpy_s

  wcsnlen

  wcspbrk

  wcsspn

  wcstok

  wcstok_s

  wcsxfrm

  wctype

  wmemcpy_s

  wmemmove_s

  Sections

  .text

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-crt-time-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  c8:05:45:75:04:9a:aa:bf:54:80:3c:1b:d8:28:e8:11:35:e9:d0:f1:ed:a6:3d:56:9f:83:72:81:51:be:67:c3

  Signer

  Actual PE Digest

  c8:05:45:75:04:9a:aa:bf:54:80:3c:1b:d8:28:e8:11:35:e9:d0:f1:ed:a6:3d:56:9f:83:72:81:51:be:67:c3

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-time-l1-1-0.pdb

  Exports

  Exports

  _Getdays

  _Getmonths

  _Gettnames

  _Strftime

  _W_Getdays

  _W_Getmonths

  _W_Gettnames

  _Wcsftime

  __daylight

  __dstbias

  __timezone

  __tzname

  _ctime32

  _ctime32_s

  _ctime64

  _ctime64_s

  _difftime32

  _difftime64

  _ftime32

  _ftime32_s

  _ftime64

  _ftime64_s

  _futime32

  _futime64

  _get_daylight

  _get_dstbias

  _get_timezone

  _get_tzname

  _getsystime

  _gmtime32

  _gmtime32_s

  _gmtime64

  _gmtime64_s

  _localtime32

  _localtime32_s

  _localtime64

  _localtime64_s

  _mkgmtime32

  _mkgmtime64

  _mktime32

  _mktime64

  _setsystime

  _strdate

  _strdate_s

  _strftime_l

  _strtime

  _strtime_s

  _time32

  _time64

  _timespec32_get

  _timespec64_get

  _tzset

  _utime32

  _utime64

  _wasctime

  _wasctime_s

  _wcsftime_l

  _wctime32

  _wctime32_s

  _wctime64

  _wctime64_s

  _wstrdate

  _wstrdate_s

  _wstrtime

  _wstrtime_s

  _wutime32

  _wutime64

  asctime

  asctime_s

  clock

  strftime

  wcsftime

  Sections

  .text

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/api-ms-win-crt-utility-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  69:03:e9:4b:2a:74:f6:97:82:87:cb:a9:d8:fa:b9:8b:4d:12:0b:67:90:d4:c7:43:5c:51:b5:d4:df:56:40:34

  Signer

  Actual PE Digest

  69:03:e9:4b:2a:74:f6:97:82:87:cb:a9:d8:fa:b9:8b:4d:12:0b:67:90:d4:c7:43:5c:51:b5:d4:df:56:40:34

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-utility-l1-1-0.pdb

  Exports

  Exports

  _abs64

  _byteswap_uint64

  _byteswap_ulong

  _byteswap_ushort

  _lfind

  _lfind_s

  _lrotl

  _lrotr

  _lsearch

  _lsearch_s

  _rotl

  _rotl64

  _rotr

  _rotr64

  _swab

  abs

  bsearch

  bsearch_s

  div

  imaxabs

  imaxdiv

  labs

  ldiv

  llabs

  lldiv

  qsort

  qsort_s

  rand

  rand_s

  srand

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/data_1.dat

  .exe windows:5 windows x86 arch:x86

  79b68a12e4eb6aa0c59dd1289006924f

  
  

  Code Sign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:5a:6b:ec:4d:7f:54:9f:e5:25:c8:52:df:67:0e:13

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  16-01-2023 00:00

  Not After

  15-01-2026 23:59

  Subject

  CN=Avast Software s.r.o.,O=Avast Software s.r.o.,L=Praha,C=CZ

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  17:c3:99:ba:64:90:c5:9c:5c:ad:31:b4:80:8b:6c:55:7d:bb:34:eb:1e:f4:ef:08:29:64:9d:89:19:34:7c:8c

  Signer

  Actual PE Digest

  17:c3:99:ba:64:90:c5:9c:5c:ad:31:b4:80:8b:6c:55:7d:bb:34:eb:1e:f4:ef:08:29:64:9d:89:19:34:7c:8c

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  C:\BUILD\work\8b0ebd312dc47f30\projects\avast\microstub\x86\Release\microstub.pdb

  Imports

  kernel32

  SetLastError

  Sleep

  GetFileSizeEx

  WriteFile

  SetEndOfFile

  SetFilePointerEx

  LocalFree

  CloseHandle

  MapViewOfFile

  UnmapViewOfFile

  CreateFileMappingW

  EnumResourceNamesW

  GetWindowsDirectoryW

  CreateDirectoryW

  CreateFileW

  CreateThread

  GetSystemTimeAsFileTime

  GetNativeSystemInfo

  lstrcatA

  lstrlenA

  GetVersionExA

  GetCurrentProcess

  GetExitCodeProcess

  ResumeThread

  ReleaseMutex

  WaitForSingleObject

  CreateMutexW

  CreateProcessW

  GetPrivateProfileIntW

  GetPrivateProfileStringW

  GetDiskFreeSpaceExW

  CopyFileW

  MoveFileExW

  CreateHardLinkW

  HeapAlloc

  GetProcessHeap

  HeapSetInformation

  ExitProcess

  IsProcessorFeaturePresent

  lstrcpyW

  GetModuleHandleW

  GetSystemDirectoryW

  SetDllDirectoryW

  InterlockedExchange

  LockResource

  WriteConsoleW

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  SetStdHandle

  LCMapStringW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetCPInfo

  GetOEMCP

  IsValidCodePage

  FindNextFileW

  FindFirstFileExW

  GetLastError

  HeapFree

  InterlockedExchangeAdd

  GetVersionExW

  FindResourceW

  LoadLibraryW

  SizeofResource

  LoadResource

  GlobalFree

  GlobalUnlock

  GlobalLock

  FindClose

  GetFileType

  GetStringTypeW

  GlobalAlloc

  FreeLibrary

  RaiseException

  GetSystemInfo

  VirtualProtect

  VirtualQuery

  LoadLibraryExA

  LoadLibraryA

  DecodePointer

  GetVersion

  HeapDestroy

  HeapReAlloc

  HeapSize

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  DeviceIoControl

  GetVolumeNameForVolumeMountPointW

  GetVolumePathNameW

  MultiByteToWideChar

  WideCharToMultiByte

  EnterCriticalSection

  LeaveCriticalSection

  SetEvent

  ResetEvent

  WaitForSingleObjectEx

  CreateEventW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  InitializeSListHead

  IsDebuggerPresent

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetStartupInfoW

  TerminateProcess

  OutputDebugStringW

  RtlUnwind

  EncodePointer

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  LoadLibraryExW

  GetCommandLineA

  GetCommandLineW

  GetStdHandle

  GetModuleFileNameW

  GetModuleHandleExW

  GetACP

  GetProcAddress

  user32

  GetMessageW

  TranslateMessage

  DispatchMessageW

  SendMessageW

  AllowSetForegroundWindow

  PostMessageW

  wsprintfA

  LoadStringW

  MessageBoxExW

  wsprintfW

  SystemParametersInfoW

  IsDialogMessageW

  LoadImageW

  DestroyIcon

  FindWindowW

  FillRect

  GetWindowRect

  InvalidateRect

  EndPaint

  BeginPaint

  ReleaseDC

  GetDC

  SetForegroundWindow

  GetSystemMetrics

  KillTimer

  SetTimer

  SetFocus

  SetWindowPos

  DestroyWindow

  CreateWindowExW

  RegisterClassExW

  PostQuitMessage

  DefWindowProcW

  gdi32

  GetTextExtentPoint32W

  GetObjectW

  CreateDIBSection

  SelectObject

  CreateFontIndirectW

  DeleteObject

  CreateSolidBrush

  CreatePatternBrush

  advapi32

  CryptDestroyHash

  CryptHashData

  CryptCreateHash

  CryptGenRandom

  CryptGetHashParam

  CryptReleaseContext

  CryptAcquireContextA

  GetSidSubAuthorityCount

  GetSidSubAuthority

  IsValidSid

  GetTokenInformation

  OpenProcessToken

  ConvertStringSecurityDescriptorToSecurityDescriptorA

  ole32

  CoCreateInstance

  CreateStreamOnHGlobal

  CoUninitialize

  CoInitializeEx

  comctl32

  ord17

  Sections

  .text

  Size: 134KB - Virtual size: 133KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 40KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didat

  Size: 512B - Virtual size: 76B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 61KB - Virtual size: 60KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/data_2.dat

  .exe windows:5 windows x86 arch:x86

  79b68a12e4eb6aa0c59dd1289006924f

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  C:\BUILD\work\8b0ebd312dc47f30\projects\avast\microstub\x86\Release\microstub.pdb

  Imports

  kernel32

  SetLastError

  Sleep

  GetFileSizeEx

  WriteFile

  SetEndOfFile

  SetFilePointerEx

  LocalFree

  CloseHandle

  MapViewOfFile

  UnmapViewOfFile

  CreateFileMappingW

  EnumResourceNamesW

  GetWindowsDirectoryW

  CreateDirectoryW

  CreateFileW

  CreateThread

  GetSystemTimeAsFileTime

  GetNativeSystemInfo

  lstrcatA

  lstrlenA

  GetVersionExA

  GetCurrentProcess

  GetExitCodeProcess

  ResumeThread

  ReleaseMutex

  WaitForSingleObject

  CreateMutexW

  CreateProcessW

  GetPrivateProfileIntW

  GetPrivateProfileStringW

  GetDiskFreeSpaceExW

  CopyFileW

  MoveFileExW

  CreateHardLinkW

  HeapAlloc

  GetProcessHeap

  HeapSetInformation

  ExitProcess

  IsProcessorFeaturePresent

  lstrcpyW

  GetModuleHandleW

  GetSystemDirectoryW

  SetDllDirectoryW

  InterlockedExchange

  LockResource

  WriteConsoleW

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  SetStdHandle

  LCMapStringW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetCPInfo

  GetOEMCP

  IsValidCodePage

  FindNextFileW

  FindFirstFileExW

  GetLastError

  HeapFree

  InterlockedExchangeAdd

  GetVersionExW

  FindResourceW

  LoadLibraryW

  SizeofResource

  LoadResource

  GlobalFree

  GlobalUnlock

  GlobalLock

  FindClose

  GetFileType

  GetStringTypeW

  GlobalAlloc

  FreeLibrary

  RaiseException

  GetSystemInfo

  VirtualProtect

  VirtualQuery

  LoadLibraryExA

  LoadLibraryA

  DecodePointer

  GetVersion

  HeapDestroy

  HeapReAlloc

  HeapSize

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  DeviceIoControl

  GetVolumeNameForVolumeMountPointW

  GetVolumePathNameW

  MultiByteToWideChar

  WideCharToMultiByte

  EnterCriticalSection

  LeaveCriticalSection

  SetEvent

  ResetEvent

  WaitForSingleObjectEx

  CreateEventW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  InitializeSListHead

  IsDebuggerPresent

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetStartupInfoW

  TerminateProcess

  OutputDebugStringW

  RtlUnwind

  EncodePointer

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  LoadLibraryExW

  GetCommandLineA

  GetCommandLineW

  GetStdHandle

  GetModuleFileNameW

  GetModuleHandleExW

  GetACP

  GetProcAddress

  user32

  GetMessageW

  TranslateMessage

  DispatchMessageW

  SendMessageW

  AllowSetForegroundWindow

  PostMessageW

  wsprintfA

  LoadStringW

  MessageBoxExW

  wsprintfW

  SystemParametersInfoW

  IsDialogMessageW

  LoadImageW

  DestroyIcon

  FindWindowW

  FillRect

  GetWindowRect

  InvalidateRect

  EndPaint

  BeginPaint

  ReleaseDC

  GetDC

  SetForegroundWindow

  GetSystemMetrics

  KillTimer

  SetTimer

  SetFocus

  SetWindowPos

  DestroyWindow

  CreateWindowExW

  RegisterClassExW

  PostQuitMessage

  DefWindowProcW

  gdi32

  GetTextExtentPoint32W

  GetObjectW

  CreateDIBSection

  SelectObject

  CreateFontIndirectW

  DeleteObject

  CreateSolidBrush

  CreatePatternBrush

  advapi32

  CryptDestroyHash

  CryptHashData

  CryptCreateHash

  CryptGenRandom

  CryptGetHashParam

  CryptReleaseContext

  CryptAcquireContextA

  GetSidSubAuthorityCount

  GetSidSubAuthority

  IsValidSid

  GetTokenInformation

  OpenProcessToken

  ConvertStringSecurityDescriptorToSecurityDescriptorA

  ole32

  CoCreateInstance

  CreateStreamOnHGlobal

  CoUninitialize

  CoInitializeEx

  comctl32

  ord17

  Sections

  .text

  Size: 134KB - Virtual size: 133KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 40KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didat

  Size: 512B - Virtual size: 76B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 33KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/llll.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:ed:05:f2:9f:eb:de:f6:19:4d:df:60:ab:ff:b8:66:35:e6:81:7e:53:fa:0d:a9:4d:c4:c1:2d:0e:f4:16:e6

  Signer

  Actual PE Digest

  05:ed:05:f2:9f:eb:de:f6:19:4d:df:60:ab:ff:b8:66:35:e6:81:7e:53:fa:0d:a9:4d:c4:c1:2d:0e:f4:16:e6

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-handle-l1-1-0.pdb

  Exports

  Exports

  CloseHandle

  CompareObjectHandles

  DuplicateHandle

  GetHandleInformation

  SetHandleInformation

  Sections

  .text

  Size: 1024B - Virtual size: 703B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/mui/sp.dll

  .exe windows:5 windows x86 arch:x86

  c7edaf3f3d9b0b390b0f0473c7a8cf06

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  03:15:43:e7:6c:a9:71:57:5e:ed:f2:2a:a3:71:9d:cc

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  06-06-2023 00:00

  Not After

  07-08-2024 23:59

  Subject

  CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  01

  Certificate

  Issuer

  CN=Unknown issuer

  Not Before

  01-01-2013 10:00

  Not After

  01-04-2013 10:00

  Subject

  CN=Dummy certificate

  Extended Key Usages

  Key Usages

  KeyUsageCertSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:15:43:e7:6c:a9:71:57:5e:ed:f2:2a:a3:71:9d:cc

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  06-06-2023 00:00

  Not After

  07-08-2024 23:59

  Subject

  CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e0:e8:a8:7c:c0:ca:b2:8c:e4:39:60:eb:f7:66:19:fa:b3:bd:d0:59:eb:2c:8c:79:97:bd:b3:c0:59:ba:95:0d

  Signer

  Actual PE Digest

  e0:e8:a8:7c:c0:ca:b2:8c:e4:39:60:eb:f7:66:19:fa:b3:bd:d0:59:eb:2c:8c:79:97:bd:b3:c0:59:ba:95:0d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  9d:55:17:b1:ad:47:6b:56:68:a3:33:2d:a3:32:28:97:9f:60:47:af

  Signer

  Actual PE Digest

  9d:55:17:b1:ad:47:6b:56:68:a3:33:2d:a3:32:28:97:9f:60:47:af

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  mi_exe_stub.pdb

  Imports

  kernel32

  InitializeSListHead

  IsDebuggerPresent

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetStartupInfoW

  IsProcessorFeaturePresent

  GetModuleHandleW

  GetCurrentProcess

  TerminateProcess

  RtlUnwind

  GetLastError

  SetLastError

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  FreeLibrary

  GetProcAddress

  LoadLibraryExW

  EncodePointer

  RaiseException

  GetStdHandle

  WriteFile

  GetModuleFileNameW

  ExitProcess

  GetModuleHandleExW

  OutputDebugStringW

  HeapAlloc

  HeapFree

  FindClose

  FindFirstFileExW

  FindNextFileW

  GetSystemTimeAsFileTime

  GetACP

  GetOEMCP

  GetCPInfo

  GetCommandLineA

  GetCommandLineW

  MultiByteToWideChar

  WideCharToMultiByte

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetStdHandle

  GetFileType

  GetStringTypeW

  LCMapStringW

  GetProcessHeap

  HeapSize

  HeapReAlloc

  FlushFileBuffers

  GetConsoleOutputCP

  GetConsoleMode

  SetFilePointerEx

  ReadFile

  CreateFileW

  CloseHandle

  WriteConsoleW

  DecodePointer

  lstrcpynW

  CreateEventW

  WaitForSingleObjectEx

  ResetEvent

  GetCurrentThreadId

  GetCurrentProcessId

  IsValidCodePage

  QueryPerformanceCounter

  CreateDirectoryW

  SizeofResource

  lstrlenW

  RemoveDirectoryW

  GetTempPathW

  FormatMessageW

  LockResource

  DeleteFileW

  FindResourceExW

  LoadResource

  FindResourceW

  HeapDestroy

  LocalFree

  VerSetConditionMask

  CopyFileW

  VerifyVersionInfoW

  GetTempFileNameW

  lstrcmpiW

  UnmapViewOfFile

  CreateFileMappingW

  MapViewOfFile

  VirtualQuery

  SetFilePointer

  WaitForSingleObject

  CreateProcessW

  GetExitCodeProcess

  SetEvent

  shlwapi

  PathQuoteSpacesW

  PathAppendW

  PathRemoveExtensionW

  PathStripPathW

  advapi32

  RegCreateKeyExW

  RegSetValueExW

  RegCloseKey

  ole32

  CoUninitialize

  CoInitializeEx

  shell32

  ord680

  SHGetFolderPathW

  user32

  MessageBoxW

  CharUpperBuffW

  CharLowerBuffW

  Sections

  .text

  Size: 99KB - Virtual size: 99KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 33KB - Virtual size: 33KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/Help/nvcpl/nv3d.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dara.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dchs.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dcht.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dcsy.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3ddan.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3ddeu.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dell.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3deng.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3desm.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3desn.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dfin.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dfra.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dheb.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dhun.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dita.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3djpn.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dkor.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dnld.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dnor.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dplk.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dptb.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dptg.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3drus.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dsky.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dslv.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dsve.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dtha.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nv3dtrk.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcpl.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplara.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplchs.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplcht.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplcsy.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcpldan.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcpldeu.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplell.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcpleng.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplesm.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplesn.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplfin.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplfra.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplheb.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplhun.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplita.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcpljpn.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplkor.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplnld.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplnor.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplplk.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplptb.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplptg.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplrus.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplsky.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplslv.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcplsve.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcpltha.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvcpltrk.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvdsp.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvdspdan.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvdspeng.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvdspesm.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvdspesn.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvdspnld.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvdspnor.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvdspptb.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlic.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicARA.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicCHS.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicCHT.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicCSY.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicDAN.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicDEU.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicELL.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicENG.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicESM.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicESN.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicFIN.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicFRA.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicHEB.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicHUN.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicITA.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicJPN.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicKOR.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicNLD.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicNOR.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicPLK.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicPTB.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicPTG.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicRUS.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicSKY.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicSLV.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicSVE.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicTHA.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvlicTRK.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmob.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobara.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobchs.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobcht.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobcsy.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobdan.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobdeu.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobell.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobeng.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobesm.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobesn.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobfin.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobfra.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobheb.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobhun.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobita.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobjpn.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobkor.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobnld.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobnor.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobplk.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobptb.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobptg.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobrus.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobsky.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobslv.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobsve.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobtha.chm

  .chm
• Аdоbе Асtivаtоr/Help/nvcpl/nvmobtrk.chm

  .chm
• Аdоbе Асtivаtоr/HelpPanel.dll

  .exe windows:10 windows x64 arch:x64

  3556ee82c88645e041669599b415bea8

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  helppane.pdb

  Imports

  advapi32

  RegisterTraceGuidsW

  GetTraceEnableLevel

  GetTraceEnableFlags

  GetTraceLoggerHandle

  TraceEvent

  RegOpenKeyW

  RegQueryValueExW

  RegCloseKey

  RegQueryInfoKeyW

  RegEnumKeyExW

  RegOpenKeyExW

  RegSetValueExW

  RegCreateKeyExW

  RegDeleteValueW

  UnregisterTraceGuids

  EventUnregister

  EventRegister

  EventSetInformation

  EventWriteTransfer

  RegGetValueW

  EqualSid

  OpenThreadToken

  OpenProcessToken

  GetTokenInformation

  GetSidLengthRequired

  InitializeSid

  IsValidSid

  GetSidSubAuthority

  GetLengthSid

  CopySid

  SetSecurityDescriptorDacl

  AllocateAndInitializeSid

  SetEntriesInAclW

  FreeSid

  InitializeSecurityDescriptor

  kernel32

  PostQueuedCompletionStatus

  GetSystemInfo

  CreateIoCompletionPort

  CreateEventW

  ProcessIdToSessionId

  GetCurrentProcessId

  GetExitCodeThread

  TerminateThread

  LoadLibraryExW

  lstrcmpiW

  CreateMutexW

  GetSystemDirectoryW

  SetCurrentDirectoryW

  HeapSetInformation

  ReleaseMutex

  HeapAlloc

  GetProcessHeap

  HeapFree

  GetCurrentThreadId

  GetModuleFileNameA

  DebugBreak

  IsDebuggerPresent

  OutputDebugStringW

  AcquireSRWLockExclusive

  ReleaseSRWLockExclusive

  ResetEvent

  ReleaseSRWLockShared

  ReleaseSemaphore

  SetThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  CloseThreadpoolTimer

  WaitForSingleObjectEx

  InitializeCriticalSectionEx

  OpenSemaphoreW

  CreateThreadpoolTimer

  GetFileAttributesW

  GetPackagesByPackageFamily

  GetCurrentThread

  CompareStringW

  InitOnceBeginInitialize

  InitOnceComplete

  CreateMutexExW

  CreateSemaphoreExW

  CreateThread

  ResumeThread

  MulDiv

  WaitForMultipleObjects

  GetCurrentProcess

  LocalAlloc

  GlobalFree

  GlobalAlloc

  DelayLoadFailureHook

  GetQueuedCompletionStatus

  SetEvent

  WaitForSingleObject

  GetLastError

  CloseHandle

  LocalFree

  FormatMessageW

  MultiByteToWideChar

  LoadLibraryW

  FreeLibrary

  AcquireSRWLockShared

  ResolveDelayLoadedAPI

  SetLastError

  GetModuleFileNameW

  InitializeCriticalSection

  ExpandEnvironmentStringsW

  FindResourceExW

  LoadResource

  LockResource

  SizeofResource

  GetProcessMitigationPolicy

  OpenEventW

  GetUserPreferredUILanguages

  GetProductInfo

  OutputDebugStringA

  HeapSize

  HeapReAlloc

  HeapDestroy

  GetTickCount

  RaiseException

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  GetModuleHandleW

  GetProcAddress

  GetVersionExW

  GetModuleHandleExW

  VirtualFree

  VirtualAlloc

  LoadLibraryExA

  EncodePointer

  DecodePointer

  FlushInstructionCache

  InterlockedPushEntrySList

  InterlockedPopEntrySList

  Sleep

  GetStartupInfoW

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  TerminateProcess

  WakeAllConditionVariable

  SleepConditionVariableSRW

  QueryPerformanceCounter

  GetSystemTimeAsFileTime

  gdi32

  GetTextExtentPoint32W

  SelectObject

  GetDeviceCaps

  GetStockObject

  CreateFontIndirectW

  GetObjectW

  SetTextColor

  SetBkMode

  DeleteObject

  user32

  EnableWindow

  IsDlgButtonChecked

  CheckDlgButton

  GetDlgItem

  ShowWindow

  ReleaseDC

  GetDC

  GetProcessDefaultLayout

  MonitorFromPoint

  GetWindowRect

  GetMonitorInfoW

  MonitorFromRect

  GetWindowPlacement

  IsIconic

  IsZoomed

  SetCursor

  LockWindowUpdate

  PostQuitMessage

  GetDlgItemTextW

  SystemParametersInfoW

  DestroyIcon

  DispatchMessageW

  UnregisterClassA

  BringWindowToTop

  GetMessageW

  LoadAcceleratorsW

  CharNextW

  PostMessageW

  KillTimer

  SetTimer

  MessageBoxW

  SetActiveWindow

  GetKeyState

  SetWindowTextW

  DestroyMenu

  DialogBoxParamW

  TrackPopupMenuEx

  ClientToScreen

  EnableMenuItem

  CheckMenuRadioItem

  InvalidateRect

  LoadMenuW

  GetSubMenu

  CallWindowProcW

  GetWindowLongPtrW

  SetWindowLongPtrW

  RegisterClassExW

  EndDialog

  TranslateAcceleratorW

  SetDlgItemTextW

  GetSystemMetrics

  TranslateMessage

  LoadCursorW

  GetClassInfoExW

  DefWindowProcW

  CreateWindowExW

  SetFocus

  IsWindowVisible

  IsWindowEnabled

  MoveWindow

  AdjustWindowRectEx

  GetMenu

  GetWindowLongW

  SetWindowPos

  GetSysColorBrush

  GetSysColor

  SendMessageW

  GetClientRect

  GetParent

  msvcrt

  memcpy

  memcmp

  __CxxFrameHandler3

  __C_specific_handler

  _wcsnicmp

  memcpy_s

  memset

  _wcsicmp

  iswspace

  _purecall

  free

  vswprintf_s

  _vscwprintf

  _wcslwr_s

  _resetstkoflw

  memmove_s

  __set_app_type

  malloc

  wcscpy_s

  wcscat_s

  _vsnwprintf

  towupper

  wcsstr

  calloc

  _beginthreadex

  _onexit

  __dllonexit

  _unlock

  _lock

  realloc

  _errno

  ??1type_info@@UEAA@XZ

  ?terminate@@YAXXZ

  _commode

  _fmode

  _wcmdln

  _initterm

  __setusermatherr

  _cexit

  _exit

  exit

  wcscmp

  __wgetmainargs

  _amsg_exit

  _XcptFilter

  _CxxThrowException

  _callnewh

  ??0exception@@QEAA@AEBQEBDH@Z

  _wtoi

  _itow_s

  swprintf_s

  _vsnprintf_s

  ??0exception@@QEAA@XZ

  ??0exception@@QEAA@AEBQEBD@Z

  ??1exception@@UEAA@XZ

  ?what@exception@@UEBAPEBDXZ

  ??0exception@@QEAA@AEBV0@@Z

  wcsncpy_s

  wcschr

  comctl32

  ord344

  InitCommonControlsEx

  ord345

  ord380

  ImageList_LoadImageW

  ImageList_Destroy

  ole32

  CoTaskMemRealloc

  CoTaskMemFree

  CoInitialize

  CoUninitialize

  CoCreateInstance

  CoTaskMemAlloc

  CoGetMalloc

  OleInitialize

  CoInitializeSecurity

  CoRegisterClassObject

  CoResumeClassObjects

  CoRevokeClassObject

  OleUninitialize

  CoImpersonateClient

  CoRevertToSelf

  PropVariantClear

  oleaut32

  SysAllocString

  VariantClear

  VariantInit

  SysStringLen

  LoadRegTypeLi

  LoadTypeLi

  SysFreeString

  SysAllocStringLen

  VariantCopy

  SysStringByteLen

  SysAllocStringByteLen

  VarUI4FromStr

  LoadTypeLibEx

  VarBstrCat

  DispCallFunc

  shell32

  SHGetPropertyStoreForWindow

  ShellExecuteW

  shlwapi

  UrlEscapeW

  SHGetValueW

  ord176

  SHRegGetValueW

  SHStrDupW

  ord2

  UrlUnescapeW

  slwga

  SLIsGenuineLocal

  ntdll

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  NtOpenProcessToken

  NtQueryInformationToken

  NtClose

  NtOpenThreadToken

  api-ms-win-core-path-l1-1-0

  PathCchAppend

  Sections

  .text

  Size: 364KB - Virtual size: 363KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 131KB - Virtual size: 130KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 15KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 11KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 96B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 524KB - Virtual size: 523KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/0409/cliconf.chm

  .chm
• Аdоbе Асtivаtоr/mui/0409/mmc.CHM

  .chm
• Аdоbе Асtivаtоr/mui/0409/msdasc.chm

  .chm
• Аdоbе Асtivаtоr/mui/0409/msorcl32.chm

  .chm
• Аdоbе Асtivаtоr/mui/0409/odbcinst.chm

  .chm
• Аdоbе Асtivаtоr/mui/0409/odbcjet.chm

  .chm
• Аdоbе Асtivаtоr/mui/0409/sqlsodbc.chm

  .chm
• Аdоbе Асtivаtоr/mui/0409/sqlsoldb.chm

  .chm
• Аdоbе Асtivаtоr/mui/0419/cliconf.chm

  .chm
• Аdоbе Асtivаtоr/mui/0419/dsfswdf.chm

  .chm
• Аdоbе Асtivаtоr/mui/0419/msdasc.chm

  .chm
• Аdоbе Асtivаtоr/mui/0419/msorcl32.chm

  .chm
• Аdоbе Асtivаtоr/mui/0419/odbcinst.chm

  .chm
• Аdоbе Асtivаtоr/mui/0419/odbcjet.chm

  .chm
• Аdоbе Асtivаtоr/mui/API-MS-Win-core-xstate-l2-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ac:d1:14:65:d0:c9:9a:29:36:b8:10:db:ac:98:ef:1f:68:6a:2c:94:83:10:b8:5b:79:69:52:54:3f:7a:ab:56

  Signer

  Actual PE Digest

  ac:d1:14:65:d0:c9:9a:29:36:b8:10:db:ac:98:ef:1f:68:6a:2c:94:83:10:b8:5b:79:69:52:54:3f:7a:ab:56

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-xstate-l2-1-0.pdb

  Exports

  Exports

  CopyContext

  GetEnabledXStateFeatures

  GetXStateFeaturesMask

  InitializeContext

  LocateXStateFeature

  SetXStateFeaturesMask

  Sections

  .text

  Size: 1024B - Virtual size: 778B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/Windows/en-US/credits.rtf

  .rtf
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3d.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dara.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dchs.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dcht.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dcsy.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3ddan.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3ddeu.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dell.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3deng.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3desm.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3desn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dfin.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dfra.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dheb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dhun.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dita.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3djpn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dkor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dnld.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dnor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dplk.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dptb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dptg.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3drus.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dsky.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dslv.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dsve.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dtha.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nv3dtrk.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcpl.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplara.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplchs.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplcht.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplcsy.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcpldan.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcpldeu.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplell.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcpleng.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplesm.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplesn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplfin.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplfra.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplheb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplhun.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplita.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcpljpn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplkor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplnld.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplnor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplplk.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplptb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplptg.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplrus.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplsky.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplslv.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcplsve.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcpltha.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvcpltrk.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvdsp.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvdspdan.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvdspeng.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvdspesm.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvdspesn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvdspnld.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvdspnor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvdspptb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlic.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicARA.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicCHS.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicCHT.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicCSY.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicDAN.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicDEU.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicELL.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicENG.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicESM.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicESN.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicFIN.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicFRA.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicHEB.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicHUN.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicITA.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicJPN.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicKOR.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicNLD.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicNOR.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicPLK.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicPTB.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicPTG.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicRUS.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicSKY.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicSLV.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicSVE.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicTHA.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvlicTRK.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmob.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobara.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobchs.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobcht.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobcsy.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobdan.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobdeu.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobell.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobeng.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobesm.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobesn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobfin.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobfra.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobheb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobhun.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobita.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobjpn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobkor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobnld.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobnor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobplk.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobptb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobptg.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobrus.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobsky.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobslv.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobsve.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobtha.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/Windows/nvcpl/nvmobtrk.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/en-US/credits.rtf

  .rtf
• Аdоbе Асtivаtоr/mui/Help/mui/0409/cliconf.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/0409/mmc.CHM

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/0409/msdasc.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/0409/msorcl32.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/0409/odbcinst.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/0409/odbcjet.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/0409/sqlsodbc.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/0409/sqlsoldb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/0419/cliconf.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/0419/dsfswdf.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/0419/msdasc.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/0419/msorcl32.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/0419/odbcinst.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/0419/odbcjet.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/mui/API-MS-Win-core-xstate-l2-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ac:d1:14:65:d0:c9:9a:29:36:b8:10:db:ac:98:ef:1f:68:6a:2c:94:83:10:b8:5b:79:69:52:54:3f:7a:ab:56

  Signer

  Actual PE Digest

  ac:d1:14:65:d0:c9:9a:29:36:b8:10:db:ac:98:ef:1f:68:6a:2c:94:83:10:b8:5b:79:69:52:54:3f:7a:ab:56

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-xstate-l2-1-0.pdb

  Exports

  Exports

  CopyContext

  GetEnabledXStateFeatures

  GetXStateFeaturesMask

  InitializeContext

  LocateXStateFeature

  SetXStateFeaturesMask

  Sections

  .text

  Size: 1024B - Virtual size: 778B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-datetime-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e9:22:fa:07:05:68:48:a4:c3:3b:71:a2:82:c3:14:a6:70:5f:8c:b6:a0:17:21:37:e5:75:7b:bb:e5:06:bf:15

  Signer

  Actual PE Digest

  e9:22:fa:07:05:68:48:a4:c3:3b:71:a2:82:c3:14:a6:70:5f:8c:b6:a0:17:21:37:e5:75:7b:bb:e5:06:bf:15

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-datetime-l1-1-0.pdb

  Exports

  Exports

  GetDateFormatA

  GetDateFormatW

  GetTimeFormatA

  GetTimeFormatW

  Sections

  .text

  Size: 1024B - Virtual size: 624B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-errorhandling-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  46:d5:10:39:f7:b8:a4:ab:6e:4c:80:77:80:38:ac:97:d7:05:15:14:ce:2f:00:03:3a:00:4f:72:67:36:16:29

  Signer

  Actual PE Digest

  46:d5:10:39:f7:b8:a4:ab:6e:4c:80:77:80:38:ac:97:d7:05:15:14:ce:2f:00:03:3a:00:4f:72:67:36:16:29

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-errorhandling-l1-1-0.pdb

  Exports

  Exports

  GetErrorMode

  GetLastError

  RaiseException

  SetErrorMode

  SetLastError

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  Sections

  .text

  Size: 1024B - Virtual size: 806B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-fibers-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8d:85:ba:7d:7a:eb:7f:e8:d4:22:39:e5:77:fb:e5:ba:dc:9f:a3:94:de:4c:a0:48:7e:20:ad:3d:fc:26:21:7b

  Signer

  Actual PE Digest

  8d:85:ba:7d:7a:eb:7f:e8:d4:22:39:e5:77:fb:e5:ba:dc:9f:a3:94:de:4c:a0:48:7e:20:ad:3d:fc:26:21:7b

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-fibers-l1-1-0.pdb

  Exports

  Exports

  FlsAlloc

  FlsFree

  FlsGetValue

  FlsSetValue

  Sections

  .text

  Size: 1024B - Virtual size: 584B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-file-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  f4:78:f8:26:0e:c8:49:30:ac:75:c5:ed:0f:45:bc:4c:40:da:0c:70:e0:52:12:b5:5d:aa:7b:a9:26:9e:5b:e7

  Signer

  Actual PE Digest

  f4:78:f8:26:0e:c8:49:30:ac:75:c5:ed:0f:45:bc:4c:40:da:0c:70:e0:52:12:b5:5d:aa:7b:a9:26:9e:5b:e7

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-file-l1-1-0.pdb

  Exports

  Exports

  CompareFileTime

  CreateDirectoryA

  CreateDirectoryW

  CreateFileA

  CreateFileW

  DefineDosDeviceW

  DeleteFileA

  DeleteFileW

  DeleteVolumeMountPointW

  FileTimeToLocalFileTime

  FindClose

  FindCloseChangeNotification

  FindFirstChangeNotificationA

  FindFirstChangeNotificationW

  FindFirstFileA

  FindFirstFileExA

  FindFirstFileExW

  FindFirstFileW

  FindFirstVolumeW

  FindNextChangeNotification

  FindNextFileA

  FindNextFileW

  FindNextVolumeW

  FindVolumeClose

  FlushFileBuffers

  GetDiskFreeSpaceA

  GetDiskFreeSpaceExA

  GetDiskFreeSpaceExW

  GetDiskFreeSpaceW

  GetDriveTypeA

  GetDriveTypeW

  GetFileAttributesA

  GetFileAttributesExA

  GetFileAttributesExW

  GetFileAttributesW

  GetFileInformationByHandle

  GetFileSize

  GetFileSizeEx

  GetFileTime

  GetFileType

  GetFinalPathNameByHandleA

  GetFinalPathNameByHandleW

  GetFullPathNameA

  GetFullPathNameW

  GetLogicalDriveStringsW

  GetLogicalDrives

  GetLongPathNameA

  GetLongPathNameW

  GetShortPathNameW

  GetTempFileNameW

  GetVolumeInformationByHandleW

  GetVolumeInformationW

  GetVolumePathNameW

  LocalFileTimeToFileTime

  LockFile

  LockFileEx

  QueryDosDeviceW

  ReadFile

  ReadFileEx

  ReadFileScatter

  RemoveDirectoryA

  RemoveDirectoryW

  SetEndOfFile

  SetFileAttributesA

  SetFileAttributesW

  SetFileInformationByHandle

  SetFilePointer

  SetFilePointerEx

  SetFileTime

  SetFileValidData

  UnlockFile

  UnlockFileEx

  WriteFile

  WriteFileEx

  WriteFileGather

  Sections

  .text

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-file-l2-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e2:8c:21:05:e8:da:61:fa:b8:b5:e9:d9:87:10:3a:fd:fa:18:6a:a7:2b:b5:79:6c:fd:d8:ae:37:b2:ca:50:da

  Signer

  Actual PE Digest

  e2:8c:21:05:e8:da:61:fa:b8:b5:e9:d9:87:10:3a:fd:fa:18:6a:a7:2b:b5:79:6c:fd:d8:ae:37:b2:ca:50:da

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-file-l2-1-0.pdb

  Exports

  Exports

  CopyFile2

  CopyFileExW

  CreateDirectoryExW

  CreateHardLinkW

  CreateSymbolicLinkW

  GetFileInformationByHandleEx

  MoveFileExW

  MoveFileWithProgressW

  ReOpenFile

  ReadDirectoryChangesW

  ReplaceFileW

  Sections

  .text

  Size: 1024B - Virtual size: 1005B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-interlocked-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e2:06:dd:80:05:bd:c5:92:51:4c:af:e0:c2:ef:5b:fc:98:74:da:3b:3c:ad:3d:4e:6a:8f:e6:b4:bd:85:ec:ce

  Signer

  Actual PE Digest

  e2:06:dd:80:05:bd:c5:92:51:4c:af:e0:c2:ef:5b:fc:98:74:da:3b:3c:ad:3d:4e:6a:8f:e6:b4:bd:85:ec:ce

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-interlocked-l1-1-0.pdb

  Exports

  Exports

  InitializeSListHead

  InterlockedCompareExchange

  InterlockedCompareExchange64

  InterlockedDecrement

  InterlockedExchange

  InterlockedExchangeAdd

  InterlockedFlushSList

  InterlockedIncrement

  InterlockedPopEntrySList

  InterlockedPushEntrySList

  InterlockedPushListSList

  QueryDepthSList

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-namedpipe-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  74:58:ab:e3:a3:b2:9b:b4:5c:19:1c:93:b5:bd:d6:aa:25:92:92:92:c3:ce:fd:26:56:49:fb:a8:dc:a9:21:4f

  Signer

  Actual PE Digest

  74:58:ab:e3:a3:b2:9b:b4:5c:19:1c:93:b5:bd:d6:aa:25:92:92:92:c3:ce:fd:26:56:49:fb:a8:dc:a9:21:4f

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-namedpipe-l1-1-0.pdb

  Exports

  Exports

  ConnectNamedPipe

  CreateNamedPipeW

  CreatePipe

  DisconnectNamedPipe

  GetNamedPipeClientComputerNameW

  ImpersonateNamedPipeClient

  PeekNamedPipe

  SetNamedPipeHandleState

  TransactNamedPipe

  WaitNamedPipeW

  Sections

  .text

  Size: 1024B - Virtual size: 1009B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-processenvironment-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e3:ea:37:a6:ea:91:f6:ef:51:6f:80:7a:10:9e:35:a0:f7:07:08:48:88:71:e7:be:ce:c9:b0:ef:4e:6a:1e:14

  Signer

  Actual PE Digest

  e3:ea:37:a6:ea:91:f6:ef:51:6f:80:7a:10:9e:35:a0:f7:07:08:48:88:71:e7:be:ce:c9:b0:ef:4e:6a:1e:14

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-processenvironment-l1-1-0.pdb

  Exports

  Exports

  ExpandEnvironmentStringsA

  ExpandEnvironmentStringsW

  FreeEnvironmentStringsA

  FreeEnvironmentStringsW

  GetCommandLineA

  GetCommandLineW

  GetCurrentDirectoryA

  GetCurrentDirectoryW

  GetEnvironmentStrings

  GetEnvironmentStringsW

  GetEnvironmentVariableA

  GetEnvironmentVariableW

  GetStdHandle

  SearchPathW

  SetCurrentDirectoryA

  SetCurrentDirectoryW

  SetEnvironmentStringsW

  SetEnvironmentVariableA

  SetEnvironmentVariableW

  SetStdHandle

  SetStdHandleEx

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-processthreads-l1-1-1.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  31:63:7a:46:b7:2b:b4:9d:a2:5e:c4:61:52:66:db:a2:9b:92:bc:7f:39:15:67:5e:5d:f5:16:7f:80:1b:7e:8c

  Signer

  Actual PE Digest

  31:63:7a:46:b7:2b:b4:9d:a2:5e:c4:61:52:66:db:a2:9b:92:bc:7f:39:15:67:5e:5d:f5:16:7f:80:1b:7e:8c

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-processthreads-l1-1-1.pdb

  Exports

  Exports

  FlushInstructionCache

  GetCurrentProcessorNumber

  GetCurrentProcessorNumberEx

  GetCurrentThreadStackLimits

  GetProcessHandleCount

  GetProcessMitigationPolicy

  GetThreadContext

  GetThreadIdealProcessorEx

  GetThreadTimes

  IsProcessorFeaturePresent

  OpenProcess

  SetProcessMitigationPolicy

  SetThreadContext

  SetThreadIdealProcessorEx

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-profile-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  9e:e2:13:38:99:fb:e4:63:ad:ec:bd:74:d8:4b:9f:7b:1e:37:72:5e:62:7e:95:a0:68:fe:4c:21:30:e9:a1:f8

  Signer

  Actual PE Digest

  9e:e2:13:38:99:fb:e4:63:ad:ec:bd:74:d8:4b:9f:7b:1e:37:72:5e:62:7e:95:a0:68:fe:4c:21:30:e9:a1:f8

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-profile-l1-1-0.pdb

  Exports

  Exports

  QueryPerformanceCounter

  QueryPerformanceFrequency

  Sections

  .text

  Size: 1024B - Virtual size: 565B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-synch-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  31:3a:27:a2:d9:59:23:88:16:6f:85:92:8d:cf:bd:6d:98:19:76:e8:6b:46:47:03:19:cb:83:40:2e:9e:cb:66

  Signer

  Actual PE Digest

  31:3a:27:a2:d9:59:23:88:16:6f:85:92:8d:cf:bd:6d:98:19:76:e8:6b:46:47:03:19:cb:83:40:2e:9e:cb:66

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-synch-l1-1-0.pdb

  Exports

  Exports

  AcquireSRWLockExclusive

  AcquireSRWLockShared

  CancelWaitableTimer

  CreateEventA

  CreateEventExA

  CreateEventExW

  CreateEventW

  CreateMutexA

  CreateMutexExA

  CreateMutexExW

  CreateMutexW

  CreateSemaphoreExW

  CreateWaitableTimerExW

  DeleteCriticalSection

  EnterCriticalSection

  InitializeCriticalSection

  InitializeCriticalSectionAndSpinCount

  InitializeCriticalSectionEx

  InitializeSRWLock

  LeaveCriticalSection

  OpenEventA

  OpenEventW

  OpenMutexW

  OpenSemaphoreW

  OpenWaitableTimerW

  ReleaseMutex

  ReleaseSRWLockExclusive

  ReleaseSRWLockShared

  ReleaseSemaphore

  ResetEvent

  SetCriticalSectionSpinCount

  SetEvent

  SetWaitableTimer

  SetWaitableTimerEx

  SleepEx

  TryAcquireSRWLockExclusive

  TryAcquireSRWLockShared

  TryEnterCriticalSection

  WaitForMultipleObjectsEx

  WaitForSingleObject

  WaitForSingleObjectEx

  Sections

  .text

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-sysinfo-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2e:d6:a0:4c:1d:f6:27:d8:7a:4f:04:ec:c6:f9:43:25:52:bc:37:bf:79:7f:ec:32:ec:76:5c:76:d0:7e:0c:0a

  Signer

  Actual PE Digest

  2e:d6:a0:4c:1d:f6:27:d8:7a:4f:04:ec:c6:f9:43:25:52:bc:37:bf:79:7f:ec:32:ec:76:5c:76:d0:7e:0c:0a

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-sysinfo-l1-1-0.pdb

  Exports

  Exports

  GetComputerNameExA

  GetComputerNameExW

  GetLocalTime

  GetLogicalProcessorInformation

  GetLogicalProcessorInformationEx

  GetSystemDirectoryA

  GetSystemDirectoryW

  GetSystemInfo

  GetSystemTime

  GetSystemTimeAdjustment

  GetSystemTimeAsFileTime

  GetSystemWindowsDirectoryA

  GetSystemWindowsDirectoryW

  GetTickCount

  GetTickCount64

  GetVersion

  GetVersionExA

  GetVersionExW

  GetWindowsDirectoryA

  GetWindowsDirectoryW

  GlobalMemoryStatusEx

  SetLocalTime

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-timezone-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  53:76:bd:75:0c:14:a2:a2:23:0a:4d:22:56:21:e3:cd:94:90:c7:2c:44:7d:f4:ec:9a:91:39:6e:c5:34:ca:b8

  Signer

  Actual PE Digest

  53:76:bd:75:0c:14:a2:a2:23:0a:4d:22:56:21:e3:cd:94:90:c7:2c:44:7d:f4:ec:9a:91:39:6e:c5:34:ca:b8

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-timezone-l1-1-0.pdb

  Exports

  Exports

  EnumDynamicTimeZoneInformation

  FileTimeToSystemTime

  GetDynamicTimeZoneInformation

  GetDynamicTimeZoneInformationEffectiveYears

  GetTimeZoneInformation

  GetTimeZoneInformationForYear

  SetDynamicTimeZoneInformation

  SetTimeZoneInformation

  SystemTimeToFileTime

  SystemTimeToTzSpecificLocalTime

  SystemTimeToTzSpecificLocalTimeEx

  TzSpecificLocalTimeToSystemTime

  TzSpecificLocalTimeToSystemTimeEx

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-core-util-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  f8:33:d8:a9:45:86:d5:f4:5a:22:f5:bf:ac:b2:e1:66:db:e5:08:7d:0f:ab:7a:98:de:12:83:3c:0c:d0:ab:49

  Signer

  Actual PE Digest

  f8:33:d8:a9:45:86:d5:f4:5a:22:f5:bf:ac:b2:e1:66:db:e5:08:7d:0f:ab:7a:98:de:12:83:3c:0c:d0:ab:49

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-util-l1-1-0.pdb

  Exports

  Exports

  Beep

  DecodePointer

  DecodeSystemPointer

  EncodePointer

  EncodeSystemPointer

  Sections

  .text

  Size: 1024B - Virtual size: 665B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-crt-conio-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  a3:d9:86:f6:39:45:f1:09:50:69:13:21:ea:0b:15:fa:af:d4:b9:15:1d:ae:a2:bf:22:c0:28:f1:cd:a2:af:95

  Signer

  Actual PE Digest

  a3:d9:86:f6:39:45:f1:09:50:69:13:21:ea:0b:15:fa:af:d4:b9:15:1d:ae:a2:bf:22:c0:28:f1:cd:a2:af:95

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-conio-l1-1-0.pdb

  Exports

  Exports

  __conio_common_vcprintf

  __conio_common_vcprintf_p

  __conio_common_vcprintf_s

  __conio_common_vcscanf

  __conio_common_vcwprintf

  __conio_common_vcwprintf_p

  __conio_common_vcwprintf_s

  __conio_common_vcwscanf

  _cgets

  _cgets_s

  _cgetws

  _cgetws_s

  _cputs

  _cputws

  _getch

  _getch_nolock

  _getche

  _getche_nolock

  _getwch

  _getwch_nolock

  _getwche

  _getwche_nolock

  _putch

  _putch_nolock

  _putwch

  _putwch_nolock

  _ungetch

  _ungetch_nolock

  _ungetwch

  _ungetwch_nolock

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-crt-environment-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  a8:3d:d4:93:57:00:a9:1a:fd:6d:95:9a:34:f6:9b:73:0e:f6:ac:ab:c8:ca:ff:bd:e0:8b:66:a6:e7:97:f8:be

  Signer

  Actual PE Digest

  a8:3d:d4:93:57:00:a9:1a:fd:6d:95:9a:34:f6:9b:73:0e:f6:ac:ab:c8:ca:ff:bd:e0:8b:66:a6:e7:97:f8:be

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-environment-l1-1-0.pdb

  Exports

  Exports

  __p__environ

  __p__wenviron

  _dupenv_s

  _putenv

  _putenv_s

  _searchenv

  _searchenv_s

  _wdupenv_s

  _wgetcwd

  _wgetdcwd

  _wgetenv

  _wgetenv_s

  _wputenv

  _wputenv_s

  _wsearchenv

  _wsearchenv_s

  getenv

  getenv_s

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-crt-filesystem-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  c3:2a:fe:54:44:f7:a5:ac:c1:52:65:a0:40:01:18:93:17:13:a6:5b:d9:67:38:e5:48:26:d1:be:6d:06:c1:5d

  Signer

  Actual PE Digest

  c3:2a:fe:54:44:f7:a5:ac:c1:52:65:a0:40:01:18:93:17:13:a6:5b:d9:67:38:e5:48:26:d1:be:6d:06:c1:5d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-filesystem-l1-1-0.pdb

  Exports

  Exports

  _access

  _access_s

  _chdir

  _chdrive

  _chmod

  _findclose

  _findfirst32

  _findfirst32i64

  _findfirst64

  _findfirst64i32

  _findnext32

  _findnext32i64

  _findnext64

  _findnext64i32

  _fstat32

  _fstat32i64

  _fstat64

  _fstat64i32

  _fullpath

  _getdiskfree

  _getdrive

  _getdrives

  _lock_file

  _makepath

  _makepath_s

  _mkdir

  _rmdir

  _splitpath

  _splitpath_s

  _stat32

  _stat32i64

  _stat64

  _stat64i32

  _umask

  _umask_s

  _unlink

  _unlock_file

  _waccess

  _waccess_s

  _wchdir

  _wchmod

  _wfindfirst32

  _wfindfirst32i64

  _wfindfirst64

  _wfindfirst64i32

  _wfindnext32

  _wfindnext32i64

  _wfindnext64

  _wfindnext64i32

  _wfullpath

  _wmakepath

  _wmakepath_s

  _wmkdir

  _wremove

  _wrename

  _wrmdir

  _wsplitpath

  _wsplitpath_s

  _wstat32

  _wstat32i64

  _wstat64

  _wstat64i32

  _wunlink

  remove

  rename

  Sections

  .text

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-crt-heap-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  28:bc:00:91:93:ea:33:3c:98:2f:27:38:8b:aa:3e:20:32:b8:96:03:09:d2:dc:f1:fd:c0:0c:e8:0c:c2:0a:b8

  Signer

  Actual PE Digest

  28:bc:00:91:93:ea:33:3c:98:2f:27:38:8b:aa:3e:20:32:b8:96:03:09:d2:dc:f1:fd:c0:0c:e8:0c:c2:0a:b8

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-heap-l1-1-0.pdb

  Exports

  Exports

  _aligned_free

  _aligned_malloc

  _aligned_msize

  _aligned_offset_malloc

  _aligned_offset_realloc

  _aligned_offset_recalloc

  _aligned_realloc

  _aligned_recalloc

  _callnewh

  _calloc_base

  _expand

  _free_base

  _get_heap_handle

  _heapchk

  _heapmin

  _heapwalk

  _malloc_base

  _msize

  _query_new_handler

  _query_new_mode

  _realloc_base

  _recalloc

  _set_new_mode

  calloc

  free

  malloc

  realloc

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-crt-locale-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  74:af:d4:8a:5b:22:b8:c5:6a:f8:60:0b:fc:63:77:b4:ee:ff:5a:55:b3:15:d3:d8:44:7b:e4:bd:9a:6c:c7:ba

  Signer

  Actual PE Digest

  74:af:d4:8a:5b:22:b8:c5:6a:f8:60:0b:fc:63:77:b4:ee:ff:5a:55:b3:15:d3:d8:44:7b:e4:bd:9a:6c:c7:ba

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-locale-l1-1-0.pdb

  Exports

  Exports

  ___lc_codepage_func

  ___lc_collate_cp_func

  ___lc_locale_name_func

  ___mb_cur_max_func

  ___mb_cur_max_l_func

  __initialize_lconv_for_unsigned_char

  __pctype_func

  __pwctype_func

  _configthreadlocale

  _create_locale

  _free_locale

  _get_current_locale

  _getmbcp

  _lock_locales

  _setmbcp

  _unlock_locales

  _wcreate_locale

  _wsetlocale

  localeconv

  setlocale

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-crt-math-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  29:f9:5c:e5:c7:d5:1c:e0:37:fd:ee:f9:30:0a:f9:9e:7e:40:83:09:a5:24:67:10:70:dc:82:8c:e7:ef:ab:c1

  Signer

  Actual PE Digest

  29:f9:5c:e5:c7:d5:1c:e0:37:fd:ee:f9:30:0a:f9:9e:7e:40:83:09:a5:24:67:10:70:dc:82:8c:e7:ef:ab:c1

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-math-l1-1-0.pdb

  Exports

  Exports

  _CIacos

  _CIasin

  _CIatan

  _CIatan2

  _CIcos

  _CIcosh

  _CIexp

  _CIfmod

  _CIlog

  _CIlog10

  _CIpow

  _CIsin

  _CIsinh

  _CIsqrt

  _CItan

  _CItanh

  _Cbuild

  _Cmulcc

  _Cmulcr

  _FCbuild

  _FCmulcc

  _FCmulcr

  _LCbuild

  _LCmulcc

  _LCmulcr

  __libm_sse2_acos

  __libm_sse2_acosf

  __libm_sse2_asin

  __libm_sse2_asinf

  __libm_sse2_atan

  __libm_sse2_atan2

  __libm_sse2_atanf

  __libm_sse2_cos

  __libm_sse2_cosf

  __libm_sse2_exp

  __libm_sse2_expf

  __libm_sse2_log

  __libm_sse2_log10

  __libm_sse2_log10f

  __libm_sse2_logf

  __libm_sse2_pow

  __libm_sse2_powf

  __libm_sse2_sin

  __libm_sse2_sinf

  __libm_sse2_tan

  __libm_sse2_tanf

  __setusermatherr

  _cabs

  _chgsign

  _chgsignf

  _copysign

  _copysignf

  _d_int

  _dclass

  _dexp

  _dlog

  _dnorm

  _dpcomp

  _dpoly

  _dscale

  _dsign

  _dsin

  _dtest

  _dunscale

  _except1

  _fd_int

  _fdclass

  _fdexp

  _fdlog

  _fdnorm

  _fdopen

  _fdpcomp

  _fdpoly

  _fdscale

  _fdsign

  _fdsin

  _fdtest

  _fdunscale

  _finite

  _fpclass

  _ftol

  _hypot

  _hypotf

  _isnan

  _j0

  _j1

  _jn

  _ld_int

  _ldclass

  _ldexp

  _ldlog

  _ldpcomp

  _ldpoly

  _ldscale

  _ldsign

  _ldsin

  _ldtest

  _ldunscale

  _libm_sse2_acos_precise

  _libm_sse2_asin_precise

  _libm_sse2_atan_precise

  _libm_sse2_cos_precise

  _libm_sse2_exp_precise

  _libm_sse2_log10_precise

  _libm_sse2_log_precise

  _libm_sse2_pow_precise

  _libm_sse2_sin_precise

  _libm_sse2_sqrt_precise

  _libm_sse2_tan_precise

  _logb

  _nextafter

  _scalb

  _set_SSE2_enable

  _y0

  _y1

  _yn

  acos

  acosh

  acoshf

  acoshl

  asin

  asinh

  asinhf

  asinhl

  atan

  atan2

  atanh

  atanhf

  atanhl

  cabs

  cabsf

  cabsl

  cacos

  cacosf

  cacosh

  cacoshf

  cacoshl

  cacosl

  carg

  cargf

  cargl

  casin

  casinf

  casinh

  casinhf

  casinhl

  casinl

  catan

  catanf

  catanh

  catanhf

  catanhl

  catanl

  cbrt

  cbrtf

  cbrtl

  ccos

  ccosf

  ccosh

  ccoshf

  ccoshl

  ccosl

  ceil

  cexp

  cexpf

  cexpl

  cimag

  cimagf

  cimagl

  clog

  clog10

  clog10f

  clog10l

  clogf

  clogl

  conj

  conjf

  conjl

  copysign

  copysignf

  copysignl

  cos

  cosh

  cpow

  cpowf

  cpowl

  cproj

  cprojf

  cprojl

  creal

  crealf

  creall

  csin

  csinf

  csinh

  csinhf

  csinhl

  csinl

  csqrt

  csqrtf

  csqrtl

  ctan

  ctanf

  ctanh

  ctanhf

  ctanhl

  ctanl

  erf

  erfc

  erfcf

  erfcl

  erff

  erfl

  exp

  exp2

  exp2f

  exp2l

  expm1

  expm1f

  expm1l

  fabs

  fdim

  fdimf

  fdiml

  floor

  fma

  fmaf

  fmal

  fmax

  fmaxf

  fmaxl

  fmin

  fminf

  fminl

  fmod

  frexp

  hypot

  ilogb

  ilogbf

  ilogbl

  ldexp

  lgamma

  lgammaf

  lgammal

  llrint

  llrintf

  llrintl

  llround

  llroundf

  llroundl

  log

  log10

  log1p

  log1pf

  log1pl

  log2

  log2f

  log2l

  logb

  logbf

  logbl

  lrint

  lrintf

  lrintl

  lround

  lroundf

  lroundl

  modf

  nan

  nanf

  nanl

  nearbyint

  nearbyintf

  nearbyintl

  nextafter

  nextafterf

  nextafterl

  nexttoward

  nexttowardf

  nexttowardl

  norm

  normf

  norml

  pow

  powf

  remainder

  remainderf

  remainderl

  remquo

  remquof

  remquol

  rint

  rintf

  rintl

  round

  roundf

  roundl

  scalbln

  scalblnf

  scalblnl

  scalbn

  scalbnf

  scalbnl

  sin

  sinh

  sqrt

  tan

  tanh

  tgamma

  tgammaf

  tgammal

  trunc

  truncf

  truncl

  Sections

  .text

  Size: 11KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-crt-multibyte-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ae:9c:b0:65:28:80:4c:61:b5:0d:c5:55:3d:22:27:a6:54:04:b1:7f:d8:a1:aa:53:04:bb:ce:64:91:c0:3b:e0

  Signer

  Actual PE Digest

  ae:9c:b0:65:28:80:4c:61:b5:0d:c5:55:3d:22:27:a6:54:04:b1:7f:d8:a1:aa:53:04:bb:ce:64:91:c0:3b:e0

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-multibyte-l1-1-0.pdb

  Exports

  Exports

  __p__mbcasemap

  __p__mbctype

  _ismbbalnum

  _ismbbalnum_l

  _ismbbalpha

  _ismbbalpha_l

  _ismbbblank

  _ismbbblank_l

  _ismbbgraph

  _ismbbgraph_l

  _ismbbkalnum

  _ismbbkalnum_l

  _ismbbkana

  _ismbbkana_l

  _ismbbkprint

  _ismbbkprint_l

  _ismbbkpunct

  _ismbbkpunct_l

  _ismbblead

  _ismbblead_l

  _ismbbprint

  _ismbbprint_l

  _ismbbpunct

  _ismbbpunct_l

  _ismbbtrail

  _ismbbtrail_l

  _ismbcalnum

  _ismbcalnum_l

  _ismbcalpha

  _ismbcalpha_l

  _ismbcblank

  _ismbcblank_l

  _ismbcdigit

  _ismbcdigit_l

  _ismbcgraph

  _ismbcgraph_l

  _ismbchira

  _ismbchira_l

  _ismbckata

  _ismbckata_l

  _ismbcl0

  _ismbcl0_l

  _ismbcl1

  _ismbcl1_l

  _ismbcl2

  _ismbcl2_l

  _ismbclegal

  _ismbclegal_l

  _ismbclower

  _ismbclower_l

  _ismbcprint

  _ismbcprint_l

  _ismbcpunct

  _ismbcpunct_l

  _ismbcspace

  _ismbcspace_l

  _ismbcsymbol

  _ismbcsymbol_l

  _ismbcupper

  _ismbcupper_l

  _ismbslead

  _ismbslead_l

  _ismbstrail

  _ismbstrail_l

  _mbbtombc

  _mbbtombc_l

  _mbbtype

  _mbbtype_l

  _mbcasemap

  _mbccpy

  _mbccpy_l

  _mbccpy_s

  _mbccpy_s_l

  _mbcjistojms

  _mbcjistojms_l

  _mbcjmstojis

  _mbcjmstojis_l

  _mbclen

  _mbclen_l

  _mbctohira

  _mbctohira_l

  _mbctokata

  _mbctokata_l

  _mbctolower

  _mbctolower_l

  _mbctombb

  _mbctombb_l

  _mbctoupper

  _mbctoupper_l

  _mblen_l

  _mbsbtype

  _mbsbtype_l

  _mbscat_s

  _mbscat_s_l

  _mbschr

  _mbschr_l

  _mbscmp

  _mbscmp_l

  _mbscoll

  _mbscoll_l

  _mbscpy_s

  _mbscpy_s_l

  _mbscspn

  _mbscspn_l

  _mbsdec

  _mbsdec_l

  _mbsdup

  _mbsicmp

  _mbsicmp_l

  _mbsicoll

  _mbsicoll_l

  _mbsinc

  _mbsinc_l

  _mbslen

  _mbslen_l

  _mbslwr

  _mbslwr_l

  _mbslwr_s

  _mbslwr_s_l

  _mbsnbcat

  _mbsnbcat_l

  _mbsnbcat_s

  _mbsnbcat_s_l

  _mbsnbcmp

  _mbsnbcmp_l

  _mbsnbcnt

  _mbsnbcnt_l

  _mbsnbcoll

  _mbsnbcoll_l

  _mbsnbcpy

  _mbsnbcpy_l

  _mbsnbcpy_s

  _mbsnbcpy_s_l

  _mbsnbicmp

  _mbsnbicmp_l

  _mbsnbicoll

  _mbsnbicoll_l

  _mbsnbset

  _mbsnbset_l

  _mbsnbset_s

  _mbsnbset_s_l

  _mbsncat

  _mbsncat_l

  _mbsncat_s

  _mbsncat_s_l

  _mbsnccnt

  _mbsnccnt_l

  _mbsncmp

  _mbsncmp_l

  _mbsncoll

  _mbsncoll_l

  _mbsncpy

  _mbsncpy_l

  _mbsncpy_s

  _mbsncpy_s_l

  _mbsnextc

  _mbsnextc_l

  _mbsnicmp

  _mbsnicmp_l

  _mbsnicoll

  _mbsnicoll_l

  _mbsninc

  _mbsninc_l

  _mbsnlen

  _mbsnlen_l

  _mbsnset

  _mbsnset_l

  _mbsnset_s

  _mbsnset_s_l

  _mbspbrk

  _mbspbrk_l

  _mbsrchr

  _mbsrchr_l

  _mbsrev

  _mbsrev_l

  _mbsset

  _mbsset_l

  _mbsset_s

  _mbsset_s_l

  _mbsspn

  _mbsspn_l

  _mbsspnp

  _mbsspnp_l

  _mbsstr

  _mbsstr_l

  _mbstok

  _mbstok_l

  _mbstok_s

  _mbstok_s_l

  _mbstowcs_l

  _mbstowcs_s_l

  _mbstrlen

  _mbstrlen_l

  _mbstrnlen

  _mbstrnlen_l

  _mbsupr

  _mbsupr_l

  _mbsupr_s

  _mbsupr_s_l

  _mbtowc_l

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-crt-private-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:ba:64:bb:77:60:ee:52:c4:63:3c:b7:42:43:1a:f8:d7:e1:e8:bc:75:fe:17:07:5e:f0:aa:d2:74:19:83:94

  Signer

  Actual PE Digest

  7b:ba:64:bb:77:60:ee:52:c4:63:3c:b7:42:43:1a:f8:d7:e1:e8:bc:75:fe:17:07:5e:f0:aa:d2:74:19:83:94

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-private-l1-1-0.pdb

  Exports

  Exports

  _CreateFrameInfo

  _CxxThrowException

  _EH_prolog

  _FindAndUnlinkFrame

  _IsExceptionObjectToBeDestroyed

  _NLG_Dispatch2

  _NLG_Return

  _NLG_Return2

  _SetWinRTOutOfMemoryExceptionCallback

  __AdjustPointer

  __BuildCatchObject

  __BuildCatchObjectHelper

  __CxxDetectRethrow

  __CxxExceptionFilter

  __CxxFrameHandler

  __CxxFrameHandler2

  __CxxFrameHandler3

  __CxxLongjmpUnwind

  __CxxQueryExceptionSize

  __CxxRegisterExceptionObject

  __CxxUnregisterExceptionObject

  __DestructExceptionObject

  __FrameUnwindFilter

  __GetPlatformExceptionInfo

  __RTCastToVoid

  __RTDynamicCast

  __RTtypeid

  __TypeMatch

  __current_exception

  __current_exception_context

  __dcrt_get_wide_environment_from_os

  __dcrt_initial_narrow_environment

  __intrinsic_abnormal_termination

  __intrinsic_setjmp

  __processing_throw

  __report_gsfailure

  __std_exception_copy

  __std_exception_destroy

  __std_terminate

  __std_type_info_compare

  __std_type_info_destroy_list

  __std_type_info_hash

  __std_type_info_name

  __unDName

  __unDNameEx

  __uncaught_exception

  __uncaught_exceptions

  _chkesp

  _except_handler2

  _except_handler3

  _except_handler4_common

  _get_purecall_handler

  _get_unexpected

  _global_unwind2

  _is_exception_typeof

  _local_unwind2

  _local_unwind4

  _longjmpex

  _o__CIacos

  _o__CIasin

  _o__CIatan

  _o__CIatan2

  _o__CIcos

  _o__CIcosh

  _o__CIexp

  _o__CIfmod

  _o__CIlog

  _o__CIlog10

  _o__CIpow

  _o__CIsin

  _o__CIsinh

  _o__CIsqrt

  _o__CItan

  _o__CItanh

  _o__Getdays

  _o__Getmonths

  _o__Gettnames

  _o__Strftime

  _o__W_Getdays

  _o__W_Getmonths

  _o__W_Gettnames

  _o__Wcsftime

  _o____lc_codepage_func

  _o____lc_collate_cp_func

  _o____lc_locale_name_func

  _o____mb_cur_max_func

  _o___acrt_iob_func

  _o___conio_common_vcprintf

  _o___conio_common_vcprintf_p

  _o___conio_common_vcprintf_s

  _o___conio_common_vcscanf

  _o___conio_common_vcwprintf

  _o___conio_common_vcwprintf_p

  _o___conio_common_vcwprintf_s

  _o___conio_common_vcwscanf

  _o___daylight

  _o___dstbias

  _o___fpe_flt_rounds

  _o___libm_sse2_acos

  _o___libm_sse2_acosf

  _o___libm_sse2_asin

  _o___libm_sse2_asinf

  _o___libm_sse2_atan

  _o___libm_sse2_atan2

  _o___libm_sse2_atanf

  _o___libm_sse2_cos

  _o___libm_sse2_cosf

  _o___libm_sse2_exp

  _o___libm_sse2_expf

  _o___libm_sse2_log

  _o___libm_sse2_log10

  _o___libm_sse2_log10f

  _o___libm_sse2_logf

  _o___libm_sse2_pow

  _o___libm_sse2_powf

  _o___libm_sse2_sin

  _o___libm_sse2_sinf

  _o___libm_sse2_tan

  _o___libm_sse2_tanf

  _o___p___argc

  _o___p___argv

  _o___p___wargv

  _o___p__acmdln

  _o___p__commode

  _o___p__environ

  _o___p__fmode

  _o___p__mbcasemap

  _o___p__mbctype

  _o___p__pgmptr

  _o___p__wcmdln

  _o___p__wenviron

  _o___p__wpgmptr

  _o___pctype_func

  _o___pwctype_func

  _o___std_exception_copy

  _o___std_exception_destroy

  _o___std_type_info_destroy_list

  _o___std_type_info_name

  _o___stdio_common_vfprintf

  _o___stdio_common_vfprintf_p

  _o___stdio_common_vfprintf_s

  _o___stdio_common_vfscanf

  _o___stdio_common_vfwprintf

  _o___stdio_common_vfwprintf_p

  _o___stdio_common_vfwprintf_s

  _o___stdio_common_vfwscanf

  _o___stdio_common_vsnprintf_s

  _o___stdio_common_vsnwprintf_s

  _o___stdio_common_vsprintf

  _o___stdio_common_vsprintf_p

  _o___stdio_common_vsprintf_s

  _o___stdio_common_vsscanf

  _o___stdio_common_vswprintf

  _o___stdio_common_vswprintf_p

  _o___stdio_common_vswprintf_s

  _o___stdio_common_vswscanf

  _o___timezone

  _o___tzname

  _o___wcserror

  _o__access

  _o__access_s

  _o__aligned_free

  _o__aligned_malloc

  _o__aligned_msize

  _o__aligned_offset_malloc

  _o__aligned_offset_realloc

  _o__aligned_offset_recalloc

  _o__aligned_realloc

  _o__aligned_recalloc

  _o__atodbl

  _o__atodbl_l

  _o__atof_l

  _o__atoflt

  _o__atoflt_l

  _o__atoi64

  _o__atoi64_l

  _o__atoi_l

  _o__atol_l

  _o__atoldbl

  _o__atoldbl_l

  _o__atoll_l

  _o__beep

  _o__beginthread

  _o__beginthreadex

  _o__cabs

  _o__callnewh

  _o__calloc_base

  _o__cexit

  _o__cgets

  _o__cgets_s

  _o__cgetws

  _o__cgetws_s

  _o__chdir

  _o__chdrive

  _o__chmod

  _o__chsize

  _o__chsize_s

  _o__close

  _o__commit

  _o__configthreadlocale

  _o__configure_narrow_argv

  _o__configure_wide_argv

  _o__controlfp_s

  _o__cputs

  _o__cputws

  _o__creat

  _o__create_locale

  _o__crt_atexit

  _o__ctime32_s

  _o__ctime64_s

  _o__cwait

  _o__d_int

  _o__dclass

  _o__difftime32

  _o__difftime64

  _o__dlog

  _o__dnorm

  _o__dpcomp

  _o__dpoly

  _o__dscale

  _o__dsign

  _o__dsin

  _o__dtest

  _o__dunscale

  _o__dup

  _o__dup2

  _o__dupenv_s

  _o__ecvt

  _o__ecvt_s

  _o__endthread

  _o__endthreadex

  _o__eof

  _o__errno

  _o__except1

  _o__execute_onexit_table

  _o__execv

  _o__execve

  _o__execvp

  _o__execvpe

  _o__exit

  _o__expand

  _o__fclose_nolock

  _o__fcloseall

  _o__fcvt

  _o__fcvt_s

  _o__fd_int

  _o__fdclass

  _o__fdexp

  _o__fdlog

  _o__fdopen

  _o__fdpcomp

  _o__fdpoly

  _o__fdscale

  _o__fdsign

  _o__fdsin

  _o__fflush_nolock

  _o__fgetc_nolock

  _o__fgetchar

  _o__fgetwc_nolock

  _o__fgetwchar

  _o__filelength

  _o__filelengthi64

  _o__fileno

  _o__findclose

  _o__findfirst32

  _o__findfirst32i64

  _o__findfirst64

  _o__findfirst64i32

  _o__findnext32

  _o__findnext32i64

  _o__findnext64

  _o__findnext64i32

  _o__flushall

  _o__fpclass

  _o__fputc_nolock

  _o__fputchar

  _o__fputwc_nolock

  _o__fputwchar

  _o__fread_nolock

  _o__fread_nolock_s

  _o__free_base

  _o__free_locale

  _o__fseek_nolock

  _o__fseeki64

  _o__fseeki64_nolock

  _o__fsopen

  _o__fstat32

  _o__fstat32i64

  _o__fstat64

  _o__fstat64i32

  _o__ftell_nolock

  _o__ftelli64

  _o__ftelli64_nolock

  _o__ftime32

  _o__ftime32_s

  _o__ftime64

  _o__ftime64_s

  _o__fullpath

  _o__futime32

  _o__futime64

  _o__fwrite_nolock

  _o__gcvt

  _o__gcvt_s

  _o__get_daylight

  _o__get_doserrno

  _o__get_dstbias

  _o__get_errno

  _o__get_fmode

  _o__get_heap_handle

  _o__get_initial_narrow_environment

  _o__get_initial_wide_environment

  _o__get_invalid_parameter_handler

  _o__get_narrow_winmain_command_line

  _o__get_osfhandle

  _o__get_pgmptr

  _o__get_stream_buffer_pointers

  _o__get_terminate

  _o__get_thread_local_invalid_parameter_handler

  _o__get_timezone

  _o__get_tzname

  _o__get_wide_winmain_command_line

  _o__get_wpgmptr

  _o__getc_nolock

  _o__getch

  _o__getch_nolock

  _o__getche

  _o__getche_nolock

  _o__getcwd

  _o__getdcwd

  _o__getdiskfree

  _o__getdllprocaddr

  _o__getdrive

  _o__getdrives

  _o__getmbcp

  _o__getsystime

  _o__getw

  _o__getwc_nolock

  _o__getwch

  _o__getwch_nolock

  _o__getwche

  _o__getwche_nolock

  _o__getws

  _o__getws_s

  _o__gmtime32

  _o__gmtime32_s

  _o__gmtime64

  _o__gmtime64_s

  _o__heapchk

  _o__heapmin

  _o__hypot

  _o__hypotf

  _o__i64toa

  _o__i64toa_s

  _o__i64tow

  _o__i64tow_s

  _o__initialize_narrow_environment

  _o__initialize_onexit_table

  _o__initialize_wide_environment

  _o__invalid_parameter_noinfo

  _o__invalid_parameter_noinfo_noreturn

  _o__isatty

  _o__isctype

  _o__isctype_l

  _o__isleadbyte_l

  _o__ismbbalnum

  _o__ismbbalnum_l

  _o__ismbbalpha

  _o__ismbbalpha_l

  _o__ismbbblank

  _o__ismbbblank_l

  _o__ismbbgraph

  _o__ismbbgraph_l

  _o__ismbbkalnum

  _o__ismbbkalnum_l

  _o__ismbbkana

  _o__ismbbkana_l

  _o__ismbbkprint

  _o__ismbbkprint_l

  _o__ismbbkpunct

  _o__ismbbkpunct_l

  _o__ismbblead

  _o__ismbblead_l

  _o__ismbbprint

  _o__ismbbprint_l

  _o__ismbbpunct

  _o__ismbbpunct_l

  _o__ismbbtrail

  _o__ismbbtrail_l

  _o__ismbcalnum

  _o__ismbcalnum_l

  _o__ismbcalpha

  _o__ismbcalpha_l

  _o__ismbcblank

  _o__ismbcblank_l

  _o__ismbcdigit

  _o__ismbcdigit_l

  _o__ismbcgraph

  _o__ismbcgraph_l

  _o__ismbchira

  _o__ismbchira_l

  _o__ismbckata

  _o__ismbckata_l

  _o__ismbcl0

  _o__ismbcl0_l

  _o__ismbcl1

  _o__ismbcl1_l

  _o__ismbcl2

  _o__ismbcl2_l

  _o__ismbclegal

  _o__ismbclegal_l

  _o__ismbclower

  _o__ismbclower_l

  _o__ismbcprint

  _o__ismbcprint_l

  _o__ismbcpunct

  _o__ismbcpunct_l

  _o__ismbcspace

  _o__ismbcspace_l

  _o__ismbcsymbol

  _o__ismbcsymbol_l

  _o__ismbcupper

  _o__ismbcupper_l

  _o__ismbslead

  _o__ismbslead_l

  _o__ismbstrail

  _o__ismbstrail_l

  _o__iswctype_l

  _o__itoa

  _o__itoa_s

  _o__itow

  _o__itow_s

  _o__j0

  _o__j1

  _o__jn

  _o__kbhit

  _o__ld_int

  _o__ldclass

  _o__ldexp

  _o__ldlog

  _o__ldpcomp

  _o__ldpoly

  _o__ldscale

  _o__ldsign

  _o__ldsin

  _o__ldtest

  _o__ldunscale

  _o__lfind

  _o__lfind_s

  _o__libm_sse2_acos_precise

  _o__libm_sse2_asin_precise

  _o__libm_sse2_atan_precise

  _o__libm_sse2_cos_precise

  _o__libm_sse2_exp_precise

  _o__libm_sse2_log10_precise

  _o__libm_sse2_log_precise

  _o__libm_sse2_pow_precise

  _o__libm_sse2_sin_precise

  _o__libm_sse2_sqrt_precise

  _o__libm_sse2_tan_precise

  _o__loaddll

  _o__localtime32

  _o__localtime32_s

  _o__localtime64

  _o__localtime64_s

  _o__lock_file

  _o__locking

  _o__logb

  _o__lsearch

  _o__lsearch_s

  _o__lseek

  _o__lseeki64

  _o__ltoa

  _o__ltoa_s

  _o__ltow

  _o__ltow_s

  _o__makepath

  _o__makepath_s

  _o__malloc_base

  _o__mbbtombc

  _o__mbbtombc_l

  _o__mbbtype

  _o__mbbtype_l

  _o__mbccpy

  _o__mbccpy_l

  _o__mbccpy_s

  _o__mbccpy_s_l

  _o__mbcjistojms

  _o__mbcjistojms_l

  _o__mbcjmstojis

  _o__mbcjmstojis_l

  _o__mbclen

  _o__mbclen_l

  _o__mbctohira

  _o__mbctohira_l

  _o__mbctokata

  _o__mbctokata_l

  _o__mbctolower

  _o__mbctolower_l

  _o__mbctombb

  _o__mbctombb_l

  Sections

  .text

  Size: 54KB - Virtual size: 54KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-crt-runtime-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  83:d2:a9:e3:8d:c3:e6:40:ee:11:44:d4:ca:10:0e:be:c8:24:1b:a9:13:51:90:ff:26:73:72:e1:89:11:20:0c

  Signer

  Actual PE Digest

  83:d2:a9:e3:8d:c3:e6:40:ee:11:44:d4:ca:10:0e:be:c8:24:1b:a9:13:51:90:ff:26:73:72:e1:89:11:20:0c

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-runtime-l1-1-0.pdb

  Exports

  Exports

  _Exit

  __control87_2

  __doserrno

  __fpe_flt_rounds

  __fpecode

  __p___argc

  __p___argv

  __p___wargv

  __p__acmdln

  __p__pgmptr

  __p__wcmdln

  __p__wpgmptr

  __pxcptinfoptrs

  __sys_errlist

  __sys_nerr

  __threadhandle

  __threadid

  __wcserror

  __wcserror_s

  _assert

  _beginthread

  _beginthreadex

  _c_exit

  _cexit

  _clearfp

  _configure_narrow_argv

  _configure_wide_argv

  _control87

  _controlfp

  _controlfp_s

  _crt_at_quick_exit

  _crt_atexit

  _crt_debugger_hook

  _endthread

  _endthreadex

  _errno

  _execute_onexit_table

  _exit

  _fpieee_flt

  _fpreset

  _get_doserrno

  _get_errno

  _get_initial_narrow_environment

  _get_initial_wide_environment

  _get_invalid_parameter_handler

  _get_narrow_winmain_command_line

  _get_pgmptr

  _get_terminate

  _get_thread_local_invalid_parameter_handler

  _get_wide_winmain_command_line

  _get_wpgmptr

  _getdllprocaddr

  _getpid

  _initialize_narrow_environment

  _initialize_onexit_table

  _initialize_wide_environment

  _initterm

  _initterm_e

  _invalid_parameter_noinfo

  _invalid_parameter_noinfo_noreturn

  _invoke_watson

  _query_app_type

  _register_onexit_function

  _register_thread_local_exe_atexit_callback

  _resetstkoflw

  _seh_filter_dll

  _seh_filter_exe

  _set_abort_behavior

  _set_app_type

  _set_controlfp

  _set_doserrno

  _set_errno

  _set_error_mode

  _set_invalid_parameter_handler

  _set_new_handler

  _set_thread_local_invalid_parameter_handler

  _seterrormode

  _sleep

  _statusfp

  _statusfp2

  _strerror

  _strerror_s

  _wassert

  _wcserror

  _wcserror_s

  _wperror

  _wsystem

  abort

  exit

  feclearexcept

  fegetenv

  fegetexceptflag

  fegetround

  feholdexcept

  fesetenv

  fesetexceptflag

  fesetround

  fetestexcept

  perror

  quick_exit

  raise

  set_terminate

  signal

  strerror

  strerror_s

  system

  terminate

  Sections

  .text

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-crt-stdio-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:d8:7f:39:8f:4a:20:88:45:11:59:3f:d7:4b:a7:66:83:0e:aa:26:c2:83:36:74:33:87:b7:a0:85:fa:e6:34

  Signer

  Actual PE Digest

  30:d8:7f:39:8f:4a:20:88:45:11:59:3f:d7:4b:a7:66:83:0e:aa:26:c2:83:36:74:33:87:b7:a0:85:fa:e6:34

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-stdio-l1-1-0.pdb

  Exports

  Exports

  __acrt_iob_func

  __p__commode

  __p__fmode

  __stdio_common_vfprintf

  __stdio_common_vfprintf_p

  __stdio_common_vfprintf_s

  __stdio_common_vfscanf

  __stdio_common_vfwprintf

  __stdio_common_vfwprintf_p

  __stdio_common_vfwprintf_s

  __stdio_common_vfwscanf

  __stdio_common_vsnprintf_s

  __stdio_common_vsnwprintf_s

  __stdio_common_vsprintf

  __stdio_common_vsprintf_p

  __stdio_common_vsprintf_s

  __stdio_common_vsscanf

  __stdio_common_vswprintf

  __stdio_common_vswprintf_p

  __stdio_common_vswprintf_s

  __stdio_common_vswscanf

  _chsize

  _chsize_s

  _close

  _commit

  _creat

  _dup

  _dup2

  _eof

  _fclose_nolock

  _fcloseall

  _fflush_nolock

  _fgetc_nolock

  _fgetchar

  _fgetwc_nolock

  _fgetwchar

  _filelength

  _filelengthi64

  _fileno

  _flushall

  _fputc_nolock

  _fputchar

  _fputwc_nolock

  _fputwchar

  _fread_nolock

  _fread_nolock_s

  _fseek_nolock

  _fseeki64

  _fseeki64_nolock

  _fsopen

  _ftell_nolock

  _ftelli64

  _ftelli64_nolock

  _fwrite_nolock

  _get_fmode

  _get_osfhandle

  _get_printf_count_output

  _get_stream_buffer_pointers

  _getc_nolock

  _getcwd

  _getdcwd

  _getmaxstdio

  _getw

  _getwc_nolock

  _getws

  _getws_s

  _isatty

  _kbhit

  _locking

  _lseek

  _lseeki64

  _mktemp

  _mktemp_s

  _open

  _open_osfhandle

  _pclose

  _pipe

  _popen

  _putc_nolock

  _putw

  _putwc_nolock

  _putws

  _read

  _rmtmp

  _set_fmode

  _set_printf_count_output

  _setmaxstdio

  _setmode

  _sopen

  _sopen_dispatch

  _sopen_s

  _tell

  _telli64

  _tempnam

  _ungetc_nolock

  _ungetwc_nolock

  _wcreat

  _wfdopen

  _wfopen

  _wfopen_s

  _wfreopen

  _wfreopen_s

  _wfsopen

  _wmktemp

  _wmktemp_s

  _wopen

  _wpopen

  _write

  _wsopen

  _wsopen_dispatch

  _wsopen_s

  _wtempnam

  _wtmpnam

  _wtmpnam_s

  clearerr

  clearerr_s

  fclose

  feof

  ferror

  fflush

  fgetc

  fgetpos

  fgets

  fgetwc

  fgetws

  fopen

  fopen_s

  fputc

  fputs

  fputwc

  fputws

  fread

  fread_s

  freopen

  freopen_s

  fseek

  fsetpos

  ftell

  fwrite

  getc

  getchar

  gets

  gets_s

  getwc

  getwchar

  putc

  putchar

  puts

  putwc

  putwchar

  rewind

  setbuf

  setvbuf

  tmpfile

  tmpfile_s

  tmpnam

  tmpnam_s

  ungetc

  ungetwc

  Sections

  .text

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-crt-string-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  d4:14:07:75:d4:f4:81:dd:20:bd:2c:69:71:4f:10:3b:a7:16:b0:e5:42:01:d7:b9:e4:a7:8a:a0:1a:e0:dd:33

  Signer

  Actual PE Digest

  d4:14:07:75:d4:f4:81:dd:20:bd:2c:69:71:4f:10:3b:a7:16:b0:e5:42:01:d7:b9:e4:a7:8a:a0:1a:e0:dd:33

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-string-l1-1-0.pdb

  Exports

  Exports

  __isascii

  __iscsym

  __iscsymf

  __iswcsym

  __iswcsymf

  __strncnt

  __wcsncnt

  _isalnum_l

  _isalpha_l

  _isblank_l

  _iscntrl_l

  _isctype

  _isctype_l

  _isdigit_l

  _isgraph_l

  _isleadbyte_l

  _islower_l

  _isprint_l

  _ispunct_l

  _isspace_l

  _isupper_l

  _iswalnum_l

  _iswalpha_l

  _iswblank_l

  _iswcntrl_l

  _iswcsym_l

  _iswcsymf_l

  _iswctype_l

  _iswdigit_l

  _iswgraph_l

  _iswlower_l

  _iswprint_l

  _iswpunct_l

  _iswspace_l

  _iswupper_l

  _iswxdigit_l

  _isxdigit_l

  _memccpy

  _memicmp

  _memicmp_l

  _strcoll_l

  _strdup

  _stricmp

  _stricmp_l

  _stricoll

  _stricoll_l

  _strlwr

  _strlwr_l

  _strlwr_s

  _strlwr_s_l

  _strncoll

  _strncoll_l

  _strnicmp

  _strnicmp_l

  _strnicoll

  _strnicoll_l

  _strnset

  _strnset_s

  _strrev

  _strset

  _strset_s

  _strupr

  _strupr_l

  _strupr_s

  _strupr_s_l

  _strxfrm_l

  _tolower

  _tolower_l

  _toupper

  _toupper_l

  _towlower_l

  _towupper_l

  _wcscoll_l

  _wcsdup

  _wcsicmp

  _wcsicmp_l

  _wcsicoll

  _wcsicoll_l

  _wcslwr

  _wcslwr_l

  _wcslwr_s

  _wcslwr_s_l

  _wcsncoll

  _wcsncoll_l

  _wcsnicmp

  _wcsnicmp_l

  _wcsnicoll

  _wcsnicoll_l

  _wcsnset

  _wcsnset_s

  _wcsrev

  _wcsset

  _wcsset_s

  _wcsupr

  _wcsupr_l

  _wcsupr_s

  _wcsupr_s_l

  _wcsxfrm_l

  _wctype

  is_wctype

  isalnum

  isalpha

  isblank

  iscntrl

  isdigit

  isgraph

  isleadbyte

  islower

  isprint

  ispunct

  isspace

  isupper

  iswalnum

  iswalpha

  iswascii

  iswblank

  iswcntrl

  iswctype

  iswdigit

  iswgraph

  iswlower

  iswprint

  iswpunct

  iswspace

  iswupper

  iswxdigit

  isxdigit

  mblen

  mbrlen

  memcpy_s

  memmove_s

  memset

  strcat

  strcat_s

  strcmp

  strcoll

  strcpy

  strcpy_s

  strcspn

  strlen

  strncat

  strncat_s

  strncmp

  strncpy

  strncpy_s

  strnlen

  strpbrk

  strspn

  strtok

  strtok_s

  strxfrm

  tolower

  toupper

  towctrans

  towlower

  towupper

  wcscat

  wcscat_s

  wcscmp

  wcscoll

  wcscpy

  wcscpy_s

  wcscspn

  wcslen

  wcsncat

  wcsncat_s

  wcsncmp

  wcsncpy

  wcsncpy_s

  wcsnlen

  wcspbrk

  wcsspn

  wcstok

  wcstok_s

  wcsxfrm

  wctype

  wmemcpy_s

  wmemmove_s

  Sections

  .text

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-crt-time-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  c8:05:45:75:04:9a:aa:bf:54:80:3c:1b:d8:28:e8:11:35:e9:d0:f1:ed:a6:3d:56:9f:83:72:81:51:be:67:c3

  Signer

  Actual PE Digest

  c8:05:45:75:04:9a:aa:bf:54:80:3c:1b:d8:28:e8:11:35:e9:d0:f1:ed:a6:3d:56:9f:83:72:81:51:be:67:c3

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-time-l1-1-0.pdb

  Exports

  Exports

  _Getdays

  _Getmonths

  _Gettnames

  _Strftime

  _W_Getdays

  _W_Getmonths

  _W_Gettnames

  _Wcsftime

  __daylight

  __dstbias

  __timezone

  __tzname

  _ctime32

  _ctime32_s

  _ctime64

  _ctime64_s

  _difftime32

  _difftime64

  _ftime32

  _ftime32_s

  _ftime64

  _ftime64_s

  _futime32

  _futime64

  _get_daylight

  _get_dstbias

  _get_timezone

  _get_tzname

  _getsystime

  _gmtime32

  _gmtime32_s

  _gmtime64

  _gmtime64_s

  _localtime32

  _localtime32_s

  _localtime64

  _localtime64_s

  _mkgmtime32

  _mkgmtime64

  _mktime32

  _mktime64

  _setsystime

  _strdate

  _strdate_s

  _strftime_l

  _strtime

  _strtime_s

  _time32

  _time64

  _timespec32_get

  _timespec64_get

  _tzset

  _utime32

  _utime64

  _wasctime

  _wasctime_s

  _wcsftime_l

  _wctime32

  _wctime32_s

  _wctime64

  _wctime64_s

  _wstrdate

  _wstrdate_s

  _wstrtime

  _wstrtime_s

  _wutime32

  _wutime64

  asctime

  asctime_s

  clock

  strftime

  wcsftime

  Sections

  .text

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/api-ms-win-crt-utility-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  69:03:e9:4b:2a:74:f6:97:82:87:cb:a9:d8:fa:b9:8b:4d:12:0b:67:90:d4:c7:43:5c:51:b5:d4:df:56:40:34

  Signer

  Actual PE Digest

  69:03:e9:4b:2a:74:f6:97:82:87:cb:a9:d8:fa:b9:8b:4d:12:0b:67:90:d4:c7:43:5c:51:b5:d4:df:56:40:34

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-utility-l1-1-0.pdb

  Exports

  Exports

  _abs64

  _byteswap_uint64

  _byteswap_ulong

  _byteswap_ushort

  _lfind

  _lfind_s

  _lrotl

  _lrotr

  _lsearch

  _lsearch_s

  _rotl

  _rotl64

  _rotr

  _rotr64

  _swab

  abs

  bsearch

  bsearch_s

  div

  imaxabs

  imaxdiv

  labs

  ldiv

  llabs

  lldiv

  qsort

  qsort_s

  rand

  rand_s

  srand

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/data_1.dat

  .exe windows:5 windows x86 arch:x86

  79b68a12e4eb6aa0c59dd1289006924f

  
  

  Code Sign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:5a:6b:ec:4d:7f:54:9f:e5:25:c8:52:df:67:0e:13

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  16-01-2023 00:00

  Not After

  15-01-2026 23:59

  Subject

  CN=Avast Software s.r.o.,O=Avast Software s.r.o.,L=Praha,C=CZ

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  17:c3:99:ba:64:90:c5:9c:5c:ad:31:b4:80:8b:6c:55:7d:bb:34:eb:1e:f4:ef:08:29:64:9d:89:19:34:7c:8c

  Signer

  Actual PE Digest

  17:c3:99:ba:64:90:c5:9c:5c:ad:31:b4:80:8b:6c:55:7d:bb:34:eb:1e:f4:ef:08:29:64:9d:89:19:34:7c:8c

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  C:\BUILD\work\8b0ebd312dc47f30\projects\avast\microstub\x86\Release\microstub.pdb

  Imports

  kernel32

  SetLastError

  Sleep

  GetFileSizeEx

  WriteFile

  SetEndOfFile

  SetFilePointerEx

  LocalFree

  CloseHandle

  MapViewOfFile

  UnmapViewOfFile

  CreateFileMappingW

  EnumResourceNamesW

  GetWindowsDirectoryW

  CreateDirectoryW

  CreateFileW

  CreateThread

  GetSystemTimeAsFileTime

  GetNativeSystemInfo

  lstrcatA

  lstrlenA

  GetVersionExA

  GetCurrentProcess

  GetExitCodeProcess

  ResumeThread

  ReleaseMutex

  WaitForSingleObject

  CreateMutexW

  CreateProcessW

  GetPrivateProfileIntW

  GetPrivateProfileStringW

  GetDiskFreeSpaceExW

  CopyFileW

  MoveFileExW

  CreateHardLinkW

  HeapAlloc

  GetProcessHeap

  HeapSetInformation

  ExitProcess

  IsProcessorFeaturePresent

  lstrcpyW

  GetModuleHandleW

  GetSystemDirectoryW

  SetDllDirectoryW

  InterlockedExchange

  LockResource

  WriteConsoleW

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  SetStdHandle

  LCMapStringW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetCPInfo

  GetOEMCP

  IsValidCodePage

  FindNextFileW

  FindFirstFileExW

  GetLastError

  HeapFree

  InterlockedExchangeAdd

  GetVersionExW

  FindResourceW

  LoadLibraryW

  SizeofResource

  LoadResource

  GlobalFree

  GlobalUnlock

  GlobalLock

  FindClose

  GetFileType

  GetStringTypeW

  GlobalAlloc

  FreeLibrary

  RaiseException

  GetSystemInfo

  VirtualProtect

  VirtualQuery

  LoadLibraryExA

  LoadLibraryA

  DecodePointer

  GetVersion

  HeapDestroy

  HeapReAlloc

  HeapSize

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  DeviceIoControl

  GetVolumeNameForVolumeMountPointW

  GetVolumePathNameW

  MultiByteToWideChar

  WideCharToMultiByte

  EnterCriticalSection

  LeaveCriticalSection

  SetEvent

  ResetEvent

  WaitForSingleObjectEx

  CreateEventW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  InitializeSListHead

  IsDebuggerPresent

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetStartupInfoW

  TerminateProcess

  OutputDebugStringW

  RtlUnwind

  EncodePointer

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  LoadLibraryExW

  GetCommandLineA

  GetCommandLineW

  GetStdHandle

  GetModuleFileNameW

  GetModuleHandleExW

  GetACP

  GetProcAddress

  user32

  GetMessageW

  TranslateMessage

  DispatchMessageW

  SendMessageW

  AllowSetForegroundWindow

  PostMessageW

  wsprintfA

  LoadStringW

  MessageBoxExW

  wsprintfW

  SystemParametersInfoW

  IsDialogMessageW

  LoadImageW

  DestroyIcon

  FindWindowW

  FillRect

  GetWindowRect

  InvalidateRect

  EndPaint

  BeginPaint

  ReleaseDC

  GetDC

  SetForegroundWindow

  GetSystemMetrics

  KillTimer

  SetTimer

  SetFocus

  SetWindowPos

  DestroyWindow

  CreateWindowExW

  RegisterClassExW

  PostQuitMessage

  DefWindowProcW

  gdi32

  GetTextExtentPoint32W

  GetObjectW

  CreateDIBSection

  SelectObject

  CreateFontIndirectW

  DeleteObject

  CreateSolidBrush

  CreatePatternBrush

  advapi32

  CryptDestroyHash

  CryptHashData

  CryptCreateHash

  CryptGenRandom

  CryptGetHashParam

  CryptReleaseContext

  CryptAcquireContextA

  GetSidSubAuthorityCount

  GetSidSubAuthority

  IsValidSid

  GetTokenInformation

  OpenProcessToken

  ConvertStringSecurityDescriptorToSecurityDescriptorA

  ole32

  CoCreateInstance

  CreateStreamOnHGlobal

  CoUninitialize

  CoInitializeEx

  comctl32

  ord17

  Sections

  .text

  Size: 134KB - Virtual size: 133KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 40KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didat

  Size: 512B - Virtual size: 76B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 61KB - Virtual size: 60KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/data_2.dat

  .exe windows:5 windows x86 arch:x86

  79b68a12e4eb6aa0c59dd1289006924f

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  C:\BUILD\work\8b0ebd312dc47f30\projects\avast\microstub\x86\Release\microstub.pdb

  Imports

  kernel32

  SetLastError

  Sleep

  GetFileSizeEx

  WriteFile

  SetEndOfFile

  SetFilePointerEx

  LocalFree

  CloseHandle

  MapViewOfFile

  UnmapViewOfFile

  CreateFileMappingW

  EnumResourceNamesW

  GetWindowsDirectoryW

  CreateDirectoryW

  CreateFileW

  CreateThread

  GetSystemTimeAsFileTime

  GetNativeSystemInfo

  lstrcatA

  lstrlenA

  GetVersionExA

  GetCurrentProcess

  GetExitCodeProcess

  ResumeThread

  ReleaseMutex

  WaitForSingleObject

  CreateMutexW

  CreateProcessW

  GetPrivateProfileIntW

  GetPrivateProfileStringW

  GetDiskFreeSpaceExW

  CopyFileW

  MoveFileExW

  CreateHardLinkW

  HeapAlloc

  GetProcessHeap

  HeapSetInformation

  ExitProcess

  IsProcessorFeaturePresent

  lstrcpyW

  GetModuleHandleW

  GetSystemDirectoryW

  SetDllDirectoryW

  InterlockedExchange

  LockResource

  WriteConsoleW

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  SetStdHandle

  LCMapStringW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetCPInfo

  GetOEMCP

  IsValidCodePage

  FindNextFileW

  FindFirstFileExW

  GetLastError

  HeapFree

  InterlockedExchangeAdd

  GetVersionExW

  FindResourceW

  LoadLibraryW

  SizeofResource

  LoadResource

  GlobalFree

  GlobalUnlock

  GlobalLock

  FindClose

  GetFileType

  GetStringTypeW

  GlobalAlloc

  FreeLibrary

  RaiseException

  GetSystemInfo

  VirtualProtect

  VirtualQuery

  LoadLibraryExA

  LoadLibraryA

  DecodePointer

  GetVersion

  HeapDestroy

  HeapReAlloc

  HeapSize

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  DeviceIoControl

  GetVolumeNameForVolumeMountPointW

  GetVolumePathNameW

  MultiByteToWideChar

  WideCharToMultiByte

  EnterCriticalSection

  LeaveCriticalSection

  SetEvent

  ResetEvent

  WaitForSingleObjectEx

  CreateEventW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  InitializeSListHead

  IsDebuggerPresent

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetStartupInfoW

  TerminateProcess

  OutputDebugStringW

  RtlUnwind

  EncodePointer

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  LoadLibraryExW

  GetCommandLineA

  GetCommandLineW

  GetStdHandle

  GetModuleFileNameW

  GetModuleHandleExW

  GetACP

  GetProcAddress

  user32

  GetMessageW

  TranslateMessage

  DispatchMessageW

  SendMessageW

  AllowSetForegroundWindow

  PostMessageW

  wsprintfA

  LoadStringW

  MessageBoxExW

  wsprintfW

  SystemParametersInfoW

  IsDialogMessageW

  LoadImageW

  DestroyIcon

  FindWindowW

  FillRect

  GetWindowRect

  InvalidateRect

  EndPaint

  BeginPaint

  ReleaseDC

  GetDC

  SetForegroundWindow

  GetSystemMetrics

  KillTimer

  SetTimer

  SetFocus

  SetWindowPos

  DestroyWindow

  CreateWindowExW

  RegisterClassExW

  PostQuitMessage

  DefWindowProcW

  gdi32

  GetTextExtentPoint32W

  GetObjectW

  CreateDIBSection

  SelectObject

  CreateFontIndirectW

  DeleteObject

  CreateSolidBrush

  CreatePatternBrush

  advapi32

  CryptDestroyHash

  CryptHashData

  CryptCreateHash

  CryptGenRandom

  CryptGetHashParam

  CryptReleaseContext

  CryptAcquireContextA

  GetSidSubAuthorityCount

  GetSidSubAuthority

  IsValidSid

  GetTokenInformation

  OpenProcessToken

  ConvertStringSecurityDescriptorToSecurityDescriptorA

  ole32

  CoCreateInstance

  CreateStreamOnHGlobal

  CoUninitialize

  CoInitializeEx

  comctl32

  ord17

  Sections

  .text

  Size: 134KB - Virtual size: 133KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 40KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didat

  Size: 512B - Virtual size: 76B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 33KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/llll.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:ed:05:f2:9f:eb:de:f6:19:4d:df:60:ab:ff:b8:66:35:e6:81:7e:53:fa:0d:a9:4d:c4:c1:2d:0e:f4:16:e6

  Signer

  Actual PE Digest

  05:ed:05:f2:9f:eb:de:f6:19:4d:df:60:ab:ff:b8:66:35:e6:81:7e:53:fa:0d:a9:4d:c4:c1:2d:0e:f4:16:e6

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-handle-l1-1-0.pdb

  Exports

  Exports

  CloseHandle

  CompareObjectHandles

  DuplicateHandle

  GetHandleInformation

  SetHandleInformation

  Sections

  .text

  Size: 1024B - Virtual size: 703B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/mui/sp.dll

  .exe windows:5 windows x86 arch:x86

  c7edaf3f3d9b0b390b0f0473c7a8cf06

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  03:15:43:e7:6c:a9:71:57:5e:ed:f2:2a:a3:71:9d:cc

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  06-06-2023 00:00

  Not After

  07-08-2024 23:59

  Subject

  CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  01

  Certificate

  Issuer

  CN=Unknown issuer

  Not Before

  01-01-2013 10:00

  Not After

  01-04-2013 10:00

  Subject

  CN=Dummy certificate

  Extended Key Usages

  Key Usages

  KeyUsageCertSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:15:43:e7:6c:a9:71:57:5e:ed:f2:2a:a3:71:9d:cc

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  06-06-2023 00:00

  Not After

  07-08-2024 23:59

  Subject

  CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e0:e8:a8:7c:c0:ca:b2:8c:e4:39:60:eb:f7:66:19:fa:b3:bd:d0:59:eb:2c:8c:79:97:bd:b3:c0:59:ba:95:0d

  Signer

  Actual PE Digest

  e0:e8:a8:7c:c0:ca:b2:8c:e4:39:60:eb:f7:66:19:fa:b3:bd:d0:59:eb:2c:8c:79:97:bd:b3:c0:59:ba:95:0d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  9d:55:17:b1:ad:47:6b:56:68:a3:33:2d:a3:32:28:97:9f:60:47:af

  Signer

  Actual PE Digest

  9d:55:17:b1:ad:47:6b:56:68:a3:33:2d:a3:32:28:97:9f:60:47:af

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  mi_exe_stub.pdb

  Imports

  kernel32

  InitializeSListHead

  IsDebuggerPresent

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetStartupInfoW

  IsProcessorFeaturePresent

  GetModuleHandleW

  GetCurrentProcess

  TerminateProcess

  RtlUnwind

  GetLastError

  SetLastError

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  FreeLibrary

  GetProcAddress

  LoadLibraryExW

  EncodePointer

  RaiseException

  GetStdHandle

  WriteFile

  GetModuleFileNameW

  ExitProcess

  GetModuleHandleExW

  OutputDebugStringW

  HeapAlloc

  HeapFree

  FindClose

  FindFirstFileExW

  FindNextFileW

  GetSystemTimeAsFileTime

  GetACP

  GetOEMCP

  GetCPInfo

  GetCommandLineA

  GetCommandLineW

  MultiByteToWideChar

  WideCharToMultiByte

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetStdHandle

  GetFileType

  GetStringTypeW

  LCMapStringW

  GetProcessHeap

  HeapSize

  HeapReAlloc

  FlushFileBuffers

  GetConsoleOutputCP

  GetConsoleMode

  SetFilePointerEx

  ReadFile

  CreateFileW

  CloseHandle

  WriteConsoleW

  DecodePointer

  lstrcpynW

  CreateEventW

  WaitForSingleObjectEx

  ResetEvent

  GetCurrentThreadId

  GetCurrentProcessId

  IsValidCodePage

  QueryPerformanceCounter

  CreateDirectoryW

  SizeofResource

  lstrlenW

  RemoveDirectoryW

  GetTempPathW

  FormatMessageW

  LockResource

  DeleteFileW

  FindResourceExW

  LoadResource

  FindResourceW

  HeapDestroy

  LocalFree

  VerSetConditionMask

  CopyFileW

  VerifyVersionInfoW

  GetTempFileNameW

  lstrcmpiW

  UnmapViewOfFile

  CreateFileMappingW

  MapViewOfFile

  VirtualQuery

  SetFilePointer

  WaitForSingleObject

  CreateProcessW

  GetExitCodeProcess

  SetEvent

  shlwapi

  PathQuoteSpacesW

  PathAppendW

  PathRemoveExtensionW

  PathStripPathW

  advapi32

  RegCreateKeyExW

  RegSetValueExW

  RegCloseKey

  ole32

  CoUninitialize

  CoInitializeEx

  shell32

  ord680

  SHGetFolderPathW

  user32

  MessageBoxW

  CharUpperBuffW

  CharLowerBuffW

  Sections

  .text

  Size: 99KB - Virtual size: 99KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 33KB - Virtual size: 33KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3d.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dara.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dchs.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dcht.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dcsy.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3ddan.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3ddeu.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dell.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3deng.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3desm.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3desn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dfin.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dfra.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dheb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dhun.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dita.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3djpn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dkor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dnld.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dnor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dplk.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dptb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dptg.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3drus.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dsky.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dslv.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dsve.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dtha.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nv3dtrk.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcpl.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplara.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplchs.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplcht.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplcsy.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcpldan.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcpldeu.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplell.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcpleng.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplesm.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplesn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplfin.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplfra.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplheb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplhun.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplita.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcpljpn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplkor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplnld.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplnor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplplk.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplptb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplptg.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplrus.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplsky.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplslv.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcplsve.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcpltha.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvcpltrk.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvdsp.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvdspdan.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvdspeng.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvdspesm.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvdspesn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvdspnld.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvdspnor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvdspptb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlic.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicARA.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicCHS.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicCHT.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicCSY.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicDAN.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicDEU.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicELL.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicENG.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicESM.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicESN.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicFIN.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicFRA.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicHEB.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicHUN.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicITA.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicJPN.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicKOR.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicNLD.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicNOR.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicPLK.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicPTB.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicPTG.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicRUS.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicSKY.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicSLV.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicSVE.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicTHA.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvlicTRK.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmob.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobara.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobchs.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobcht.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobcsy.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobdan.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobdeu.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobell.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobeng.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobesm.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobesn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobfin.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobfra.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobheb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobhun.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobita.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobjpn.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobkor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobnld.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobnor.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobplk.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobptb.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobptg.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobrus.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobsky.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobslv.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobsve.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobtha.chm

  .chm
• Аdоbе Асtivаtоr/mui/Help/nvcpl/nvmobtrk.chm

  .chm
• Аdоbе Асtivаtоr/mui/api-ms-win-core-datetime-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e9:22:fa:07:05:68:48:a4:c3:3b:71:a2:82:c3:14:a6:70:5f:8c:b6:a0:17:21:37:e5:75:7b:bb:e5:06:bf:15

  Signer

  Actual PE Digest

  e9:22:fa:07:05:68:48:a4:c3:3b:71:a2:82:c3:14:a6:70:5f:8c:b6:a0:17:21:37:e5:75:7b:bb:e5:06:bf:15

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-datetime-l1-1-0.pdb

  Exports

  Exports

  GetDateFormatA

  GetDateFormatW

  GetTimeFormatA

  GetTimeFormatW

  Sections

  .text

  Size: 1024B - Virtual size: 624B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-core-errorhandling-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  46:d5:10:39:f7:b8:a4:ab:6e:4c:80:77:80:38:ac:97:d7:05:15:14:ce:2f:00:03:3a:00:4f:72:67:36:16:29

  Signer

  Actual PE Digest

  46:d5:10:39:f7:b8:a4:ab:6e:4c:80:77:80:38:ac:97:d7:05:15:14:ce:2f:00:03:3a:00:4f:72:67:36:16:29

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-errorhandling-l1-1-0.pdb

  Exports

  Exports

  GetErrorMode

  GetLastError

  RaiseException

  SetErrorMode

  SetLastError

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  Sections

  .text

  Size: 1024B - Virtual size: 806B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-core-fibers-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8d:85:ba:7d:7a:eb:7f:e8:d4:22:39:e5:77:fb:e5:ba:dc:9f:a3:94:de:4c:a0:48:7e:20:ad:3d:fc:26:21:7b

  Signer

  Actual PE Digest

  8d:85:ba:7d:7a:eb:7f:e8:d4:22:39:e5:77:fb:e5:ba:dc:9f:a3:94:de:4c:a0:48:7e:20:ad:3d:fc:26:21:7b

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-fibers-l1-1-0.pdb

  Exports

  Exports

  FlsAlloc

  FlsFree

  FlsGetValue

  FlsSetValue

  Sections

  .text

  Size: 1024B - Virtual size: 584B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-core-file-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  f4:78:f8:26:0e:c8:49:30:ac:75:c5:ed:0f:45:bc:4c:40:da:0c:70:e0:52:12:b5:5d:aa:7b:a9:26:9e:5b:e7

  Signer

  Actual PE Digest

  f4:78:f8:26:0e:c8:49:30:ac:75:c5:ed:0f:45:bc:4c:40:da:0c:70:e0:52:12:b5:5d:aa:7b:a9:26:9e:5b:e7

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-file-l1-1-0.pdb

  Exports

  Exports

  CompareFileTime

  CreateDirectoryA

  CreateDirectoryW

  CreateFileA

  CreateFileW

  DefineDosDeviceW

  DeleteFileA

  DeleteFileW

  DeleteVolumeMountPointW

  FileTimeToLocalFileTime

  FindClose

  FindCloseChangeNotification

  FindFirstChangeNotificationA

  FindFirstChangeNotificationW

  FindFirstFileA

  FindFirstFileExA

  FindFirstFileExW

  FindFirstFileW

  FindFirstVolumeW

  FindNextChangeNotification

  FindNextFileA

  FindNextFileW

  FindNextVolumeW

  FindVolumeClose

  FlushFileBuffers

  GetDiskFreeSpaceA

  GetDiskFreeSpaceExA

  GetDiskFreeSpaceExW

  GetDiskFreeSpaceW

  GetDriveTypeA

  GetDriveTypeW

  GetFileAttributesA

  GetFileAttributesExA

  GetFileAttributesExW

  GetFileAttributesW

  GetFileInformationByHandle

  GetFileSize

  GetFileSizeEx

  GetFileTime

  GetFileType

  GetFinalPathNameByHandleA

  GetFinalPathNameByHandleW

  GetFullPathNameA

  GetFullPathNameW

  GetLogicalDriveStringsW

  GetLogicalDrives

  GetLongPathNameA

  GetLongPathNameW

  GetShortPathNameW

  GetTempFileNameW

  GetVolumeInformationByHandleW

  GetVolumeInformationW

  GetVolumePathNameW

  LocalFileTimeToFileTime

  LockFile

  LockFileEx

  QueryDosDeviceW

  ReadFile

  ReadFileEx

  ReadFileScatter

  RemoveDirectoryA

  RemoveDirectoryW

  SetEndOfFile

  SetFileAttributesA

  SetFileAttributesW

  SetFileInformationByHandle

  SetFilePointer

  SetFilePointerEx

  SetFileTime

  SetFileValidData

  UnlockFile

  UnlockFileEx

  WriteFile

  WriteFileEx

  WriteFileGather

  Sections

  .text

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-core-file-l2-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e2:8c:21:05:e8:da:61:fa:b8:b5:e9:d9:87:10:3a:fd:fa:18:6a:a7:2b:b5:79:6c:fd:d8:ae:37:b2:ca:50:da

  Signer

  Actual PE Digest

  e2:8c:21:05:e8:da:61:fa:b8:b5:e9:d9:87:10:3a:fd:fa:18:6a:a7:2b:b5:79:6c:fd:d8:ae:37:b2:ca:50:da

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-file-l2-1-0.pdb

  Exports

  Exports

  CopyFile2

  CopyFileExW

  CreateDirectoryExW

  CreateHardLinkW

  CreateSymbolicLinkW

  GetFileInformationByHandleEx

  MoveFileExW

  MoveFileWithProgressW

  ReOpenFile

  ReadDirectoryChangesW

  ReplaceFileW

  Sections

  .text

  Size: 1024B - Virtual size: 1005B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-core-interlocked-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e2:06:dd:80:05:bd:c5:92:51:4c:af:e0:c2:ef:5b:fc:98:74:da:3b:3c:ad:3d:4e:6a:8f:e6:b4:bd:85:ec:ce

  Signer

  Actual PE Digest

  e2:06:dd:80:05:bd:c5:92:51:4c:af:e0:c2:ef:5b:fc:98:74:da:3b:3c:ad:3d:4e:6a:8f:e6:b4:bd:85:ec:ce

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-interlocked-l1-1-0.pdb

  Exports

  Exports

  InitializeSListHead

  InterlockedCompareExchange

  InterlockedCompareExchange64

  InterlockedDecrement

  InterlockedExchange

  InterlockedExchangeAdd

  InterlockedFlushSList

  InterlockedIncrement

  InterlockedPopEntrySList

  InterlockedPushEntrySList

  InterlockedPushListSList

  QueryDepthSList

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-core-namedpipe-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  74:58:ab:e3:a3:b2:9b:b4:5c:19:1c:93:b5:bd:d6:aa:25:92:92:92:c3:ce:fd:26:56:49:fb:a8:dc:a9:21:4f

  Signer

  Actual PE Digest

  74:58:ab:e3:a3:b2:9b:b4:5c:19:1c:93:b5:bd:d6:aa:25:92:92:92:c3:ce:fd:26:56:49:fb:a8:dc:a9:21:4f

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-namedpipe-l1-1-0.pdb

  Exports

  Exports

  ConnectNamedPipe

  CreateNamedPipeW

  CreatePipe

  DisconnectNamedPipe

  GetNamedPipeClientComputerNameW

  ImpersonateNamedPipeClient

  PeekNamedPipe

  SetNamedPipeHandleState

  TransactNamedPipe

  WaitNamedPipeW

  Sections

  .text

  Size: 1024B - Virtual size: 1009B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-core-processenvironment-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e3:ea:37:a6:ea:91:f6:ef:51:6f:80:7a:10:9e:35:a0:f7:07:08:48:88:71:e7:be:ce:c9:b0:ef:4e:6a:1e:14

  Signer

  Actual PE Digest

  e3:ea:37:a6:ea:91:f6:ef:51:6f:80:7a:10:9e:35:a0:f7:07:08:48:88:71:e7:be:ce:c9:b0:ef:4e:6a:1e:14

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-processenvironment-l1-1-0.pdb

  Exports

  Exports

  ExpandEnvironmentStringsA

  ExpandEnvironmentStringsW

  FreeEnvironmentStringsA

  FreeEnvironmentStringsW

  GetCommandLineA

  GetCommandLineW

  GetCurrentDirectoryA

  GetCurrentDirectoryW

  GetEnvironmentStrings

  GetEnvironmentStringsW

  GetEnvironmentVariableA

  GetEnvironmentVariableW

  GetStdHandle

  SearchPathW

  SetCurrentDirectoryA

  SetCurrentDirectoryW

  SetEnvironmentStringsW

  SetEnvironmentVariableA

  SetEnvironmentVariableW

  SetStdHandle

  SetStdHandleEx

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-core-processthreads-l1-1-1.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  31:63:7a:46:b7:2b:b4:9d:a2:5e:c4:61:52:66:db:a2:9b:92:bc:7f:39:15:67:5e:5d:f5:16:7f:80:1b:7e:8c

  Signer

  Actual PE Digest

  31:63:7a:46:b7:2b:b4:9d:a2:5e:c4:61:52:66:db:a2:9b:92:bc:7f:39:15:67:5e:5d:f5:16:7f:80:1b:7e:8c

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-processthreads-l1-1-1.pdb

  Exports

  Exports

  FlushInstructionCache

  GetCurrentProcessorNumber

  GetCurrentProcessorNumberEx

  GetCurrentThreadStackLimits

  GetProcessHandleCount

  GetProcessMitigationPolicy

  GetThreadContext

  GetThreadIdealProcessorEx

  GetThreadTimes

  IsProcessorFeaturePresent

  OpenProcess

  SetProcessMitigationPolicy

  SetThreadContext

  SetThreadIdealProcessorEx

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-core-profile-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  9e:e2:13:38:99:fb:e4:63:ad:ec:bd:74:d8:4b:9f:7b:1e:37:72:5e:62:7e:95:a0:68:fe:4c:21:30:e9:a1:f8

  Signer

  Actual PE Digest

  9e:e2:13:38:99:fb:e4:63:ad:ec:bd:74:d8:4b:9f:7b:1e:37:72:5e:62:7e:95:a0:68:fe:4c:21:30:e9:a1:f8

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-profile-l1-1-0.pdb

  Exports

  Exports

  QueryPerformanceCounter

  QueryPerformanceFrequency

  Sections

  .text

  Size: 1024B - Virtual size: 565B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-core-synch-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  31:3a:27:a2:d9:59:23:88:16:6f:85:92:8d:cf:bd:6d:98:19:76:e8:6b:46:47:03:19:cb:83:40:2e:9e:cb:66

  Signer

  Actual PE Digest

  31:3a:27:a2:d9:59:23:88:16:6f:85:92:8d:cf:bd:6d:98:19:76:e8:6b:46:47:03:19:cb:83:40:2e:9e:cb:66

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-synch-l1-1-0.pdb

  Exports

  Exports

  AcquireSRWLockExclusive

  AcquireSRWLockShared

  CancelWaitableTimer

  CreateEventA

  CreateEventExA

  CreateEventExW

  CreateEventW

  CreateMutexA

  CreateMutexExA

  CreateMutexExW

  CreateMutexW

  CreateSemaphoreExW

  CreateWaitableTimerExW

  DeleteCriticalSection

  EnterCriticalSection

  InitializeCriticalSection

  InitializeCriticalSectionAndSpinCount

  InitializeCriticalSectionEx

  InitializeSRWLock

  LeaveCriticalSection

  OpenEventA

  OpenEventW

  OpenMutexW

  OpenSemaphoreW

  OpenWaitableTimerW

  ReleaseMutex

  ReleaseSRWLockExclusive

  ReleaseSRWLockShared

  ReleaseSemaphore

  ResetEvent

  SetCriticalSectionSpinCount

  SetEvent

  SetWaitableTimer

  SetWaitableTimerEx

  SleepEx

  TryAcquireSRWLockExclusive

  TryAcquireSRWLockShared

  TryEnterCriticalSection

  WaitForMultipleObjectsEx

  WaitForSingleObject

  WaitForSingleObjectEx

  Sections

  .text

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-core-sysinfo-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2e:d6:a0:4c:1d:f6:27:d8:7a:4f:04:ec:c6:f9:43:25:52:bc:37:bf:79:7f:ec:32:ec:76:5c:76:d0:7e:0c:0a

  Signer

  Actual PE Digest

  2e:d6:a0:4c:1d:f6:27:d8:7a:4f:04:ec:c6:f9:43:25:52:bc:37:bf:79:7f:ec:32:ec:76:5c:76:d0:7e:0c:0a

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-sysinfo-l1-1-0.pdb

  Exports

  Exports

  GetComputerNameExA

  GetComputerNameExW

  GetLocalTime

  GetLogicalProcessorInformation

  GetLogicalProcessorInformationEx

  GetSystemDirectoryA

  GetSystemDirectoryW

  GetSystemInfo

  GetSystemTime

  GetSystemTimeAdjustment

  GetSystemTimeAsFileTime

  GetSystemWindowsDirectoryA

  GetSystemWindowsDirectoryW

  GetTickCount

  GetTickCount64

  GetVersion

  GetVersionExA

  GetVersionExW

  GetWindowsDirectoryA

  GetWindowsDirectoryW

  GlobalMemoryStatusEx

  SetLocalTime

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-core-timezone-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  53:76:bd:75:0c:14:a2:a2:23:0a:4d:22:56:21:e3:cd:94:90:c7:2c:44:7d:f4:ec:9a:91:39:6e:c5:34:ca:b8

  Signer

  Actual PE Digest

  53:76:bd:75:0c:14:a2:a2:23:0a:4d:22:56:21:e3:cd:94:90:c7:2c:44:7d:f4:ec:9a:91:39:6e:c5:34:ca:b8

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-timezone-l1-1-0.pdb

  Exports

  Exports

  EnumDynamicTimeZoneInformation

  FileTimeToSystemTime

  GetDynamicTimeZoneInformation

  GetDynamicTimeZoneInformationEffectiveYears

  GetTimeZoneInformation

  GetTimeZoneInformationForYear

  SetDynamicTimeZoneInformation

  SetTimeZoneInformation

  SystemTimeToFileTime

  SystemTimeToTzSpecificLocalTime

  SystemTimeToTzSpecificLocalTimeEx

  TzSpecificLocalTimeToSystemTime

  TzSpecificLocalTimeToSystemTimeEx

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-core-util-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  f8:33:d8:a9:45:86:d5:f4:5a:22:f5:bf:ac:b2:e1:66:db:e5:08:7d:0f:ab:7a:98:de:12:83:3c:0c:d0:ab:49

  Signer

  Actual PE Digest

  f8:33:d8:a9:45:86:d5:f4:5a:22:f5:bf:ac:b2:e1:66:db:e5:08:7d:0f:ab:7a:98:de:12:83:3c:0c:d0:ab:49

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-util-l1-1-0.pdb

  Exports

  Exports

  Beep

  DecodePointer

  DecodeSystemPointer

  EncodePointer

  EncodeSystemPointer

  Sections

  .text

  Size: 1024B - Virtual size: 665B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-crt-conio-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  a3:d9:86:f6:39:45:f1:09:50:69:13:21:ea:0b:15:fa:af:d4:b9:15:1d:ae:a2:bf:22:c0:28:f1:cd:a2:af:95

  Signer

  Actual PE Digest

  a3:d9:86:f6:39:45:f1:09:50:69:13:21:ea:0b:15:fa:af:d4:b9:15:1d:ae:a2:bf:22:c0:28:f1:cd:a2:af:95

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-conio-l1-1-0.pdb

  Exports

  Exports

  __conio_common_vcprintf

  __conio_common_vcprintf_p

  __conio_common_vcprintf_s

  __conio_common_vcscanf

  __conio_common_vcwprintf

  __conio_common_vcwprintf_p

  __conio_common_vcwprintf_s

  __conio_common_vcwscanf

  _cgets

  _cgets_s

  _cgetws

  _cgetws_s

  _cputs

  _cputws

  _getch

  _getch_nolock

  _getche

  _getche_nolock

  _getwch

  _getwch_nolock

  _getwche

  _getwche_nolock

  _putch

  _putch_nolock

  _putwch

  _putwch_nolock

  _ungetch

  _ungetch_nolock

  _ungetwch

  _ungetwch_nolock

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-crt-environment-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  a8:3d:d4:93:57:00:a9:1a:fd:6d:95:9a:34:f6:9b:73:0e:f6:ac:ab:c8:ca:ff:bd:e0:8b:66:a6:e7:97:f8:be

  Signer

  Actual PE Digest

  a8:3d:d4:93:57:00:a9:1a:fd:6d:95:9a:34:f6:9b:73:0e:f6:ac:ab:c8:ca:ff:bd:e0:8b:66:a6:e7:97:f8:be

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-environment-l1-1-0.pdb

  Exports

  Exports

  __p__environ

  __p__wenviron

  _dupenv_s

  _putenv

  _putenv_s

  _searchenv

  _searchenv_s

  _wdupenv_s

  _wgetcwd

  _wgetdcwd

  _wgetenv

  _wgetenv_s

  _wputenv

  _wputenv_s

  _wsearchenv

  _wsearchenv_s

  getenv

  getenv_s

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-crt-filesystem-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  c3:2a:fe:54:44:f7:a5:ac:c1:52:65:a0:40:01:18:93:17:13:a6:5b:d9:67:38:e5:48:26:d1:be:6d:06:c1:5d

  Signer

  Actual PE Digest

  c3:2a:fe:54:44:f7:a5:ac:c1:52:65:a0:40:01:18:93:17:13:a6:5b:d9:67:38:e5:48:26:d1:be:6d:06:c1:5d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-filesystem-l1-1-0.pdb

  Exports

  Exports

  _access

  _access_s

  _chdir

  _chdrive

  _chmod

  _findclose

  _findfirst32

  _findfirst32i64

  _findfirst64

  _findfirst64i32

  _findnext32

  _findnext32i64

  _findnext64

  _findnext64i32

  _fstat32

  _fstat32i64

  _fstat64

  _fstat64i32

  _fullpath

  _getdiskfree

  _getdrive

  _getdrives

  _lock_file

  _makepath

  _makepath_s

  _mkdir

  _rmdir

  _splitpath

  _splitpath_s

  _stat32

  _stat32i64

  _stat64

  _stat64i32

  _umask

  _umask_s

  _unlink

  _unlock_file

  _waccess

  _waccess_s

  _wchdir

  _wchmod

  _wfindfirst32

  _wfindfirst32i64

  _wfindfirst64

  _wfindfirst64i32

  _wfindnext32

  _wfindnext32i64

  _wfindnext64

  _wfindnext64i32

  _wfullpath

  _wmakepath

  _wmakepath_s

  _wmkdir

  _wremove

  _wrename

  _wrmdir

  _wsplitpath

  _wsplitpath_s

  _wstat32

  _wstat32i64

  _wstat64

  _wstat64i32

  _wunlink

  remove

  rename

  Sections

  .text

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-crt-heap-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  28:bc:00:91:93:ea:33:3c:98:2f:27:38:8b:aa:3e:20:32:b8:96:03:09:d2:dc:f1:fd:c0:0c:e8:0c:c2:0a:b8

  Signer

  Actual PE Digest

  28:bc:00:91:93:ea:33:3c:98:2f:27:38:8b:aa:3e:20:32:b8:96:03:09:d2:dc:f1:fd:c0:0c:e8:0c:c2:0a:b8

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-heap-l1-1-0.pdb

  Exports

  Exports

  _aligned_free

  _aligned_malloc

  _aligned_msize

  _aligned_offset_malloc

  _aligned_offset_realloc

  _aligned_offset_recalloc

  _aligned_realloc

  _aligned_recalloc

  _callnewh

  _calloc_base

  _expand

  _free_base

  _get_heap_handle

  _heapchk

  _heapmin

  _heapwalk

  _malloc_base

  _msize

  _query_new_handler

  _query_new_mode

  _realloc_base

  _recalloc

  _set_new_mode

  calloc

  free

  malloc

  realloc

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-crt-locale-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  74:af:d4:8a:5b:22:b8:c5:6a:f8:60:0b:fc:63:77:b4:ee:ff:5a:55:b3:15:d3:d8:44:7b:e4:bd:9a:6c:c7:ba

  Signer

  Actual PE Digest

  74:af:d4:8a:5b:22:b8:c5:6a:f8:60:0b:fc:63:77:b4:ee:ff:5a:55:b3:15:d3:d8:44:7b:e4:bd:9a:6c:c7:ba

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-locale-l1-1-0.pdb

  Exports

  Exports

  ___lc_codepage_func

  ___lc_collate_cp_func

  ___lc_locale_name_func

  ___mb_cur_max_func

  ___mb_cur_max_l_func

  __initialize_lconv_for_unsigned_char

  __pctype_func

  __pwctype_func

  _configthreadlocale

  _create_locale

  _free_locale

  _get_current_locale

  _getmbcp

  _lock_locales

  _setmbcp

  _unlock_locales

  _wcreate_locale

  _wsetlocale

  localeconv

  setlocale

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-crt-math-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  29:f9:5c:e5:c7:d5:1c:e0:37:fd:ee:f9:30:0a:f9:9e:7e:40:83:09:a5:24:67:10:70:dc:82:8c:e7:ef:ab:c1

  Signer

  Actual PE Digest

  29:f9:5c:e5:c7:d5:1c:e0:37:fd:ee:f9:30:0a:f9:9e:7e:40:83:09:a5:24:67:10:70:dc:82:8c:e7:ef:ab:c1

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-math-l1-1-0.pdb

  Exports

  Exports

  _CIacos

  _CIasin

  _CIatan

  _CIatan2

  _CIcos

  _CIcosh

  _CIexp

  _CIfmod

  _CIlog

  _CIlog10

  _CIpow

  _CIsin

  _CIsinh

  _CIsqrt

  _CItan

  _CItanh

  _Cbuild

  _Cmulcc

  _Cmulcr

  _FCbuild

  _FCmulcc

  _FCmulcr

  _LCbuild

  _LCmulcc

  _LCmulcr

  __libm_sse2_acos

  __libm_sse2_acosf

  __libm_sse2_asin

  __libm_sse2_asinf

  __libm_sse2_atan

  __libm_sse2_atan2

  __libm_sse2_atanf

  __libm_sse2_cos

  __libm_sse2_cosf

  __libm_sse2_exp

  __libm_sse2_expf

  __libm_sse2_log

  __libm_sse2_log10

  __libm_sse2_log10f

  __libm_sse2_logf

  __libm_sse2_pow

  __libm_sse2_powf

  __libm_sse2_sin

  __libm_sse2_sinf

  __libm_sse2_tan

  __libm_sse2_tanf

  __setusermatherr

  _cabs

  _chgsign

  _chgsignf

  _copysign

  _copysignf

  _d_int

  _dclass

  _dexp

  _dlog

  _dnorm

  _dpcomp

  _dpoly

  _dscale

  _dsign

  _dsin

  _dtest

  _dunscale

  _except1

  _fd_int

  _fdclass

  _fdexp

  _fdlog

  _fdnorm

  _fdopen

  _fdpcomp

  _fdpoly

  _fdscale

  _fdsign

  _fdsin

  _fdtest

  _fdunscale

  _finite

  _fpclass

  _ftol

  _hypot

  _hypotf

  _isnan

  _j0

  _j1

  _jn

  _ld_int

  _ldclass

  _ldexp

  _ldlog

  _ldpcomp

  _ldpoly

  _ldscale

  _ldsign

  _ldsin

  _ldtest

  _ldunscale

  _libm_sse2_acos_precise

  _libm_sse2_asin_precise

  _libm_sse2_atan_precise

  _libm_sse2_cos_precise

  _libm_sse2_exp_precise

  _libm_sse2_log10_precise

  _libm_sse2_log_precise

  _libm_sse2_pow_precise

  _libm_sse2_sin_precise

  _libm_sse2_sqrt_precise

  _libm_sse2_tan_precise

  _logb

  _nextafter

  _scalb

  _set_SSE2_enable

  _y0

  _y1

  _yn

  acos

  acosh

  acoshf

  acoshl

  asin

  asinh

  asinhf

  asinhl

  atan

  atan2

  atanh

  atanhf

  atanhl

  cabs

  cabsf

  cabsl

  cacos

  cacosf

  cacosh

  cacoshf

  cacoshl

  cacosl

  carg

  cargf

  cargl

  casin

  casinf

  casinh

  casinhf

  casinhl

  casinl

  catan

  catanf

  catanh

  catanhf

  catanhl

  catanl

  cbrt

  cbrtf

  cbrtl

  ccos

  ccosf

  ccosh

  ccoshf

  ccoshl

  ccosl

  ceil

  cexp

  cexpf

  cexpl

  cimag

  cimagf

  cimagl

  clog

  clog10

  clog10f

  clog10l

  clogf

  clogl

  conj

  conjf

  conjl

  copysign

  copysignf

  copysignl

  cos

  cosh

  cpow

  cpowf

  cpowl

  cproj

  cprojf

  cprojl

  creal

  crealf

  creall

  csin

  csinf

  csinh

  csinhf

  csinhl

  csinl

  csqrt

  csqrtf

  csqrtl

  ctan

  ctanf

  ctanh

  ctanhf

  ctanhl

  ctanl

  erf

  erfc

  erfcf

  erfcl

  erff

  erfl

  exp

  exp2

  exp2f

  exp2l

  expm1

  expm1f

  expm1l

  fabs

  fdim

  fdimf

  fdiml

  floor

  fma

  fmaf

  fmal

  fmax

  fmaxf

  fmaxl

  fmin

  fminf

  fminl

  fmod

  frexp

  hypot

  ilogb

  ilogbf

  ilogbl

  ldexp

  lgamma

  lgammaf

  lgammal

  llrint

  llrintf

  llrintl

  llround

  llroundf

  llroundl

  log

  log10

  log1p

  log1pf

  log1pl

  log2

  log2f

  log2l

  logb

  logbf

  logbl

  lrint

  lrintf

  lrintl

  lround

  lroundf

  lroundl

  modf

  nan

  nanf

  nanl

  nearbyint

  nearbyintf

  nearbyintl

  nextafter

  nextafterf

  nextafterl

  nexttoward

  nexttowardf

  nexttowardl

  norm

  normf

  norml

  pow

  powf

  remainder

  remainderf

  remainderl

  remquo

  remquof

  remquol

  rint

  rintf

  rintl

  round

  roundf

  roundl

  scalbln

  scalblnf

  scalblnl

  scalbn

  scalbnf

  scalbnl

  sin

  sinh

  sqrt

  tan

  tanh

  tgamma

  tgammaf

  tgammal

  trunc

  truncf

  truncl

  Sections

  .text

  Size: 11KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-crt-multibyte-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ae:9c:b0:65:28:80:4c:61:b5:0d:c5:55:3d:22:27:a6:54:04:b1:7f:d8:a1:aa:53:04:bb:ce:64:91:c0:3b:e0

  Signer

  Actual PE Digest

  ae:9c:b0:65:28:80:4c:61:b5:0d:c5:55:3d:22:27:a6:54:04:b1:7f:d8:a1:aa:53:04:bb:ce:64:91:c0:3b:e0

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-multibyte-l1-1-0.pdb

  Exports

  Exports

  __p__mbcasemap

  __p__mbctype

  _ismbbalnum

  _ismbbalnum_l

  _ismbbalpha

  _ismbbalpha_l

  _ismbbblank

  _ismbbblank_l

  _ismbbgraph

  _ismbbgraph_l

  _ismbbkalnum

  _ismbbkalnum_l

  _ismbbkana

  _ismbbkana_l

  _ismbbkprint

  _ismbbkprint_l

  _ismbbkpunct

  _ismbbkpunct_l

  _ismbblead

  _ismbblead_l

  _ismbbprint

  _ismbbprint_l

  _ismbbpunct

  _ismbbpunct_l

  _ismbbtrail

  _ismbbtrail_l

  _ismbcalnum

  _ismbcalnum_l

  _ismbcalpha

  _ismbcalpha_l

  _ismbcblank

  _ismbcblank_l

  _ismbcdigit

  _ismbcdigit_l

  _ismbcgraph

  _ismbcgraph_l

  _ismbchira

  _ismbchira_l

  _ismbckata

  _ismbckata_l

  _ismbcl0

  _ismbcl0_l

  _ismbcl1

  _ismbcl1_l

  _ismbcl2

  _ismbcl2_l

  _ismbclegal

  _ismbclegal_l

  _ismbclower

  _ismbclower_l

  _ismbcprint

  _ismbcprint_l

  _ismbcpunct

  _ismbcpunct_l

  _ismbcspace

  _ismbcspace_l

  _ismbcsymbol

  _ismbcsymbol_l

  _ismbcupper

  _ismbcupper_l

  _ismbslead

  _ismbslead_l

  _ismbstrail

  _ismbstrail_l

  _mbbtombc

  _mbbtombc_l

  _mbbtype

  _mbbtype_l

  _mbcasemap

  _mbccpy

  _mbccpy_l

  _mbccpy_s

  _mbccpy_s_l

  _mbcjistojms

  _mbcjistojms_l

  _mbcjmstojis

  _mbcjmstojis_l

  _mbclen

  _mbclen_l

  _mbctohira

  _mbctohira_l

  _mbctokata

  _mbctokata_l

  _mbctolower

  _mbctolower_l

  _mbctombb

  _mbctombb_l

  _mbctoupper

  _mbctoupper_l

  _mblen_l

  _mbsbtype

  _mbsbtype_l

  _mbscat_s

  _mbscat_s_l

  _mbschr

  _mbschr_l

  _mbscmp

  _mbscmp_l

  _mbscoll

  _mbscoll_l

  _mbscpy_s

  _mbscpy_s_l

  _mbscspn

  _mbscspn_l

  _mbsdec

  _mbsdec_l

  _mbsdup

  _mbsicmp

  _mbsicmp_l

  _mbsicoll

  _mbsicoll_l

  _mbsinc

  _mbsinc_l

  _mbslen

  _mbslen_l

  _mbslwr

  _mbslwr_l

  _mbslwr_s

  _mbslwr_s_l

  _mbsnbcat

  _mbsnbcat_l

  _mbsnbcat_s

  _mbsnbcat_s_l

  _mbsnbcmp

  _mbsnbcmp_l

  _mbsnbcnt

  _mbsnbcnt_l

  _mbsnbcoll

  _mbsnbcoll_l

  _mbsnbcpy

  _mbsnbcpy_l

  _mbsnbcpy_s

  _mbsnbcpy_s_l

  _mbsnbicmp

  _mbsnbicmp_l

  _mbsnbicoll

  _mbsnbicoll_l

  _mbsnbset

  _mbsnbset_l

  _mbsnbset_s

  _mbsnbset_s_l

  _mbsncat

  _mbsncat_l

  _mbsncat_s

  _mbsncat_s_l

  _mbsnccnt

  _mbsnccnt_l

  _mbsncmp

  _mbsncmp_l

  _mbsncoll

  _mbsncoll_l

  _mbsncpy

  _mbsncpy_l

  _mbsncpy_s

  _mbsncpy_s_l

  _mbsnextc

  _mbsnextc_l

  _mbsnicmp

  _mbsnicmp_l

  _mbsnicoll

  _mbsnicoll_l

  _mbsninc

  _mbsninc_l

  _mbsnlen

  _mbsnlen_l

  _mbsnset

  _mbsnset_l

  _mbsnset_s

  _mbsnset_s_l

  _mbspbrk

  _mbspbrk_l

  _mbsrchr

  _mbsrchr_l

  _mbsrev

  _mbsrev_l

  _mbsset

  _mbsset_l

  _mbsset_s

  _mbsset_s_l

  _mbsspn

  _mbsspn_l

  _mbsspnp

  _mbsspnp_l

  _mbsstr

  _mbsstr_l

  _mbstok

  _mbstok_l

  _mbstok_s

  _mbstok_s_l

  _mbstowcs_l

  _mbstowcs_s_l

  _mbstrlen

  _mbstrlen_l

  _mbstrnlen

  _mbstrnlen_l

  _mbsupr

  _mbsupr_l

  _mbsupr_s

  _mbsupr_s_l

  _mbtowc_l

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-crt-private-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:ba:64:bb:77:60:ee:52:c4:63:3c:b7:42:43:1a:f8:d7:e1:e8:bc:75:fe:17:07:5e:f0:aa:d2:74:19:83:94

  Signer

  Actual PE Digest

  7b:ba:64:bb:77:60:ee:52:c4:63:3c:b7:42:43:1a:f8:d7:e1:e8:bc:75:fe:17:07:5e:f0:aa:d2:74:19:83:94

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-private-l1-1-0.pdb

  Exports

  Exports

  _CreateFrameInfo

  _CxxThrowException

  _EH_prolog

  _FindAndUnlinkFrame

  _IsExceptionObjectToBeDestroyed

  _NLG_Dispatch2

  _NLG_Return

  _NLG_Return2

  _SetWinRTOutOfMemoryExceptionCallback

  __AdjustPointer

  __BuildCatchObject

  __BuildCatchObjectHelper

  __CxxDetectRethrow

  __CxxExceptionFilter

  __CxxFrameHandler

  __CxxFrameHandler2

  __CxxFrameHandler3

  __CxxLongjmpUnwind

  __CxxQueryExceptionSize

  __CxxRegisterExceptionObject

  __CxxUnregisterExceptionObject

  __DestructExceptionObject

  __FrameUnwindFilter

  __GetPlatformExceptionInfo

  __RTCastToVoid

  __RTDynamicCast

  __RTtypeid

  __TypeMatch

  __current_exception

  __current_exception_context

  __dcrt_get_wide_environment_from_os

  __dcrt_initial_narrow_environment

  __intrinsic_abnormal_termination

  __intrinsic_setjmp

  __processing_throw

  __report_gsfailure

  __std_exception_copy

  __std_exception_destroy

  __std_terminate

  __std_type_info_compare

  __std_type_info_destroy_list

  __std_type_info_hash

  __std_type_info_name

  __unDName

  __unDNameEx

  __uncaught_exception

  __uncaught_exceptions

  _chkesp

  _except_handler2

  _except_handler3

  _except_handler4_common

  _get_purecall_handler

  _get_unexpected

  _global_unwind2

  _is_exception_typeof

  _local_unwind2

  _local_unwind4

  _longjmpex

  _o__CIacos

  _o__CIasin

  _o__CIatan

  _o__CIatan2

  _o__CIcos

  _o__CIcosh

  _o__CIexp

  _o__CIfmod

  _o__CIlog

  _o__CIlog10

  _o__CIpow

  _o__CIsin

  _o__CIsinh

  _o__CIsqrt

  _o__CItan

  _o__CItanh

  _o__Getdays

  _o__Getmonths

  _o__Gettnames

  _o__Strftime

  _o__W_Getdays

  _o__W_Getmonths

  _o__W_Gettnames

  _o__Wcsftime

  _o____lc_codepage_func

  _o____lc_collate_cp_func

  _o____lc_locale_name_func

  _o____mb_cur_max_func

  _o___acrt_iob_func

  _o___conio_common_vcprintf

  _o___conio_common_vcprintf_p

  _o___conio_common_vcprintf_s

  _o___conio_common_vcscanf

  _o___conio_common_vcwprintf

  _o___conio_common_vcwprintf_p

  _o___conio_common_vcwprintf_s

  _o___conio_common_vcwscanf

  _o___daylight

  _o___dstbias

  _o___fpe_flt_rounds

  _o___libm_sse2_acos

  _o___libm_sse2_acosf

  _o___libm_sse2_asin

  _o___libm_sse2_asinf

  _o___libm_sse2_atan

  _o___libm_sse2_atan2

  _o___libm_sse2_atanf

  _o___libm_sse2_cos

  _o___libm_sse2_cosf

  _o___libm_sse2_exp

  _o___libm_sse2_expf

  _o___libm_sse2_log

  _o___libm_sse2_log10

  _o___libm_sse2_log10f

  _o___libm_sse2_logf

  _o___libm_sse2_pow

  _o___libm_sse2_powf

  _o___libm_sse2_sin

  _o___libm_sse2_sinf

  _o___libm_sse2_tan

  _o___libm_sse2_tanf

  _o___p___argc

  _o___p___argv

  _o___p___wargv

  _o___p__acmdln

  _o___p__commode

  _o___p__environ

  _o___p__fmode

  _o___p__mbcasemap

  _o___p__mbctype

  _o___p__pgmptr

  _o___p__wcmdln

  _o___p__wenviron

  _o___p__wpgmptr

  _o___pctype_func

  _o___pwctype_func

  _o___std_exception_copy

  _o___std_exception_destroy

  _o___std_type_info_destroy_list

  _o___std_type_info_name

  _o___stdio_common_vfprintf

  _o___stdio_common_vfprintf_p

  _o___stdio_common_vfprintf_s

  _o___stdio_common_vfscanf

  _o___stdio_common_vfwprintf

  _o___stdio_common_vfwprintf_p

  _o___stdio_common_vfwprintf_s

  _o___stdio_common_vfwscanf

  _o___stdio_common_vsnprintf_s

  _o___stdio_common_vsnwprintf_s

  _o___stdio_common_vsprintf

  _o___stdio_common_vsprintf_p

  _o___stdio_common_vsprintf_s

  _o___stdio_common_vsscanf

  _o___stdio_common_vswprintf

  _o___stdio_common_vswprintf_p

  _o___stdio_common_vswprintf_s

  _o___stdio_common_vswscanf

  _o___timezone

  _o___tzname

  _o___wcserror

  _o__access

  _o__access_s

  _o__aligned_free

  _o__aligned_malloc

  _o__aligned_msize

  _o__aligned_offset_malloc

  _o__aligned_offset_realloc

  _o__aligned_offset_recalloc

  _o__aligned_realloc

  _o__aligned_recalloc

  _o__atodbl

  _o__atodbl_l

  _o__atof_l

  _o__atoflt

  _o__atoflt_l

  _o__atoi64

  _o__atoi64_l

  _o__atoi_l

  _o__atol_l

  _o__atoldbl

  _o__atoldbl_l

  _o__atoll_l

  _o__beep

  _o__beginthread

  _o__beginthreadex

  _o__cabs

  _o__callnewh

  _o__calloc_base

  _o__cexit

  _o__cgets

  _o__cgets_s

  _o__cgetws

  _o__cgetws_s

  _o__chdir

  _o__chdrive

  _o__chmod

  _o__chsize

  _o__chsize_s

  _o__close

  _o__commit

  _o__configthreadlocale

  _o__configure_narrow_argv

  _o__configure_wide_argv

  _o__controlfp_s

  _o__cputs

  _o__cputws

  _o__creat

  _o__create_locale

  _o__crt_atexit

  _o__ctime32_s

  _o__ctime64_s

  _o__cwait

  _o__d_int

  _o__dclass

  _o__difftime32

  _o__difftime64

  _o__dlog

  _o__dnorm

  _o__dpcomp

  _o__dpoly

  _o__dscale

  _o__dsign

  _o__dsin

  _o__dtest

  _o__dunscale

  _o__dup

  _o__dup2

  _o__dupenv_s

  _o__ecvt

  _o__ecvt_s

  _o__endthread

  _o__endthreadex

  _o__eof

  _o__errno

  _o__except1

  _o__execute_onexit_table

  _o__execv

  _o__execve

  _o__execvp

  _o__execvpe

  _o__exit

  _o__expand

  _o__fclose_nolock

  _o__fcloseall

  _o__fcvt

  _o__fcvt_s

  _o__fd_int

  _o__fdclass

  _o__fdexp

  _o__fdlog

  _o__fdopen

  _o__fdpcomp

  _o__fdpoly

  _o__fdscale

  _o__fdsign

  _o__fdsin

  _o__fflush_nolock

  _o__fgetc_nolock

  _o__fgetchar

  _o__fgetwc_nolock

  _o__fgetwchar

  _o__filelength

  _o__filelengthi64

  _o__fileno

  _o__findclose

  _o__findfirst32

  _o__findfirst32i64

  _o__findfirst64

  _o__findfirst64i32

  _o__findnext32

  _o__findnext32i64

  _o__findnext64

  _o__findnext64i32

  _o__flushall

  _o__fpclass

  _o__fputc_nolock

  _o__fputchar

  _o__fputwc_nolock

  _o__fputwchar

  _o__fread_nolock

  _o__fread_nolock_s

  _o__free_base

  _o__free_locale

  _o__fseek_nolock

  _o__fseeki64

  _o__fseeki64_nolock

  _o__fsopen

  _o__fstat32

  _o__fstat32i64

  _o__fstat64

  _o__fstat64i32

  _o__ftell_nolock

  _o__ftelli64

  _o__ftelli64_nolock

  _o__ftime32

  _o__ftime32_s

  _o__ftime64

  _o__ftime64_s

  _o__fullpath

  _o__futime32

  _o__futime64

  _o__fwrite_nolock

  _o__gcvt

  _o__gcvt_s

  _o__get_daylight

  _o__get_doserrno

  _o__get_dstbias

  _o__get_errno

  _o__get_fmode

  _o__get_heap_handle

  _o__get_initial_narrow_environment

  _o__get_initial_wide_environment

  _o__get_invalid_parameter_handler

  _o__get_narrow_winmain_command_line

  _o__get_osfhandle

  _o__get_pgmptr

  _o__get_stream_buffer_pointers

  _o__get_terminate

  _o__get_thread_local_invalid_parameter_handler

  _o__get_timezone

  _o__get_tzname

  _o__get_wide_winmain_command_line

  _o__get_wpgmptr

  _o__getc_nolock

  _o__getch

  _o__getch_nolock

  _o__getche

  _o__getche_nolock

  _o__getcwd

  _o__getdcwd

  _o__getdiskfree

  _o__getdllprocaddr

  _o__getdrive

  _o__getdrives

  _o__getmbcp

  _o__getsystime

  _o__getw

  _o__getwc_nolock

  _o__getwch

  _o__getwch_nolock

  _o__getwche

  _o__getwche_nolock

  _o__getws

  _o__getws_s

  _o__gmtime32

  _o__gmtime32_s

  _o__gmtime64

  _o__gmtime64_s

  _o__heapchk

  _o__heapmin

  _o__hypot

  _o__hypotf

  _o__i64toa

  _o__i64toa_s

  _o__i64tow

  _o__i64tow_s

  _o__initialize_narrow_environment

  _o__initialize_onexit_table

  _o__initialize_wide_environment

  _o__invalid_parameter_noinfo

  _o__invalid_parameter_noinfo_noreturn

  _o__isatty

  _o__isctype

  _o__isctype_l

  _o__isleadbyte_l

  _o__ismbbalnum

  _o__ismbbalnum_l

  _o__ismbbalpha

  _o__ismbbalpha_l

  _o__ismbbblank

  _o__ismbbblank_l

  _o__ismbbgraph

  _o__ismbbgraph_l

  _o__ismbbkalnum

  _o__ismbbkalnum_l

  _o__ismbbkana

  _o__ismbbkana_l

  _o__ismbbkprint

  _o__ismbbkprint_l

  _o__ismbbkpunct

  _o__ismbbkpunct_l

  _o__ismbblead

  _o__ismbblead_l

  _o__ismbbprint

  _o__ismbbprint_l

  _o__ismbbpunct

  _o__ismbbpunct_l

  _o__ismbbtrail

  _o__ismbbtrail_l

  _o__ismbcalnum

  _o__ismbcalnum_l

  _o__ismbcalpha

  _o__ismbcalpha_l

  _o__ismbcblank

  _o__ismbcblank_l

  _o__ismbcdigit

  _o__ismbcdigit_l

  _o__ismbcgraph

  _o__ismbcgraph_l

  _o__ismbchira

  _o__ismbchira_l

  _o__ismbckata

  _o__ismbckata_l

  _o__ismbcl0

  _o__ismbcl0_l

  _o__ismbcl1

  _o__ismbcl1_l

  _o__ismbcl2

  _o__ismbcl2_l

  _o__ismbclegal

  _o__ismbclegal_l

  _o__ismbclower

  _o__ismbclower_l

  _o__ismbcprint

  _o__ismbcprint_l

  _o__ismbcpunct

  _o__ismbcpunct_l

  _o__ismbcspace

  _o__ismbcspace_l

  _o__ismbcsymbol

  _o__ismbcsymbol_l

  _o__ismbcupper

  _o__ismbcupper_l

  _o__ismbslead

  _o__ismbslead_l

  _o__ismbstrail

  _o__ismbstrail_l

  _o__iswctype_l

  _o__itoa

  _o__itoa_s

  _o__itow

  _o__itow_s

  _o__j0

  _o__j1

  _o__jn

  _o__kbhit

  _o__ld_int

  _o__ldclass

  _o__ldexp

  _o__ldlog

  _o__ldpcomp

  _o__ldpoly

  _o__ldscale

  _o__ldsign

  _o__ldsin

  _o__ldtest

  _o__ldunscale

  _o__lfind

  _o__lfind_s

  _o__libm_sse2_acos_precise

  _o__libm_sse2_asin_precise

  _o__libm_sse2_atan_precise

  _o__libm_sse2_cos_precise

  _o__libm_sse2_exp_precise

  _o__libm_sse2_log10_precise

  _o__libm_sse2_log_precise

  _o__libm_sse2_pow_precise

  _o__libm_sse2_sin_precise

  _o__libm_sse2_sqrt_precise

  _o__libm_sse2_tan_precise

  _o__loaddll

  _o__localtime32

  _o__localtime32_s

  _o__localtime64

  _o__localtime64_s

  _o__lock_file

  _o__locking

  _o__logb

  _o__lsearch

  _o__lsearch_s

  _o__lseek

  _o__lseeki64

  _o__ltoa

  _o__ltoa_s

  _o__ltow

  _o__ltow_s

  _o__makepath

  _o__makepath_s

  _o__malloc_base

  _o__mbbtombc

  _o__mbbtombc_l

  _o__mbbtype

  _o__mbbtype_l

  _o__mbccpy

  _o__mbccpy_l

  _o__mbccpy_s

  _o__mbccpy_s_l

  _o__mbcjistojms

  _o__mbcjistojms_l

  _o__mbcjmstojis

  _o__mbcjmstojis_l

  _o__mbclen

  _o__mbclen_l

  _o__mbctohira

  _o__mbctohira_l

  _o__mbctokata

  _o__mbctokata_l

  _o__mbctolower

  _o__mbctolower_l

  _o__mbctombb

  _o__mbctombb_l

  Sections

  .text

  Size: 54KB - Virtual size: 54KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-crt-runtime-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  83:d2:a9:e3:8d:c3:e6:40:ee:11:44:d4:ca:10:0e:be:c8:24:1b:a9:13:51:90:ff:26:73:72:e1:89:11:20:0c

  Signer

  Actual PE Digest

  83:d2:a9:e3:8d:c3:e6:40:ee:11:44:d4:ca:10:0e:be:c8:24:1b:a9:13:51:90:ff:26:73:72:e1:89:11:20:0c

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-runtime-l1-1-0.pdb

  Exports

  Exports

  _Exit

  __control87_2

  __doserrno

  __fpe_flt_rounds

  __fpecode

  __p___argc

  __p___argv

  __p___wargv

  __p__acmdln

  __p__pgmptr

  __p__wcmdln

  __p__wpgmptr

  __pxcptinfoptrs

  __sys_errlist

  __sys_nerr

  __threadhandle

  __threadid

  __wcserror

  __wcserror_s

  _assert

  _beginthread

  _beginthreadex

  _c_exit

  _cexit

  _clearfp

  _configure_narrow_argv

  _configure_wide_argv

  _control87

  _controlfp

  _controlfp_s

  _crt_at_quick_exit

  _crt_atexit

  _crt_debugger_hook

  _endthread

  _endthreadex

  _errno

  _execute_onexit_table

  _exit

  _fpieee_flt

  _fpreset

  _get_doserrno

  _get_errno

  _get_initial_narrow_environment

  _get_initial_wide_environment

  _get_invalid_parameter_handler

  _get_narrow_winmain_command_line

  _get_pgmptr

  _get_terminate

  _get_thread_local_invalid_parameter_handler

  _get_wide_winmain_command_line

  _get_wpgmptr

  _getdllprocaddr

  _getpid

  _initialize_narrow_environment

  _initialize_onexit_table

  _initialize_wide_environment

  _initterm

  _initterm_e

  _invalid_parameter_noinfo

  _invalid_parameter_noinfo_noreturn

  _invoke_watson

  _query_app_type

  _register_onexit_function

  _register_thread_local_exe_atexit_callback

  _resetstkoflw

  _seh_filter_dll

  _seh_filter_exe

  _set_abort_behavior

  _set_app_type

  _set_controlfp

  _set_doserrno

  _set_errno

  _set_error_mode

  _set_invalid_parameter_handler

  _set_new_handler

  _set_thread_local_invalid_parameter_handler

  _seterrormode

  _sleep

  _statusfp

  _statusfp2

  _strerror

  _strerror_s

  _wassert

  _wcserror

  _wcserror_s

  _wperror

  _wsystem

  abort

  exit

  feclearexcept

  fegetenv

  fegetexceptflag

  fegetround

  feholdexcept

  fesetenv

  fesetexceptflag

  fesetround

  fetestexcept

  perror

  quick_exit

  raise

  set_terminate

  signal

  strerror

  strerror_s

  system

  terminate

  Sections

  .text

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-crt-stdio-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:d8:7f:39:8f:4a:20:88:45:11:59:3f:d7:4b:a7:66:83:0e:aa:26:c2:83:36:74:33:87:b7:a0:85:fa:e6:34

  Signer

  Actual PE Digest

  30:d8:7f:39:8f:4a:20:88:45:11:59:3f:d7:4b:a7:66:83:0e:aa:26:c2:83:36:74:33:87:b7:a0:85:fa:e6:34

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-stdio-l1-1-0.pdb

  Exports

  Exports

  __acrt_iob_func

  __p__commode

  __p__fmode

  __stdio_common_vfprintf

  __stdio_common_vfprintf_p

  __stdio_common_vfprintf_s

  __stdio_common_vfscanf

  __stdio_common_vfwprintf

  __stdio_common_vfwprintf_p

  __stdio_common_vfwprintf_s

  __stdio_common_vfwscanf

  __stdio_common_vsnprintf_s

  __stdio_common_vsnwprintf_s

  __stdio_common_vsprintf

  __stdio_common_vsprintf_p

  __stdio_common_vsprintf_s

  __stdio_common_vsscanf

  __stdio_common_vswprintf

  __stdio_common_vswprintf_p

  __stdio_common_vswprintf_s

  __stdio_common_vswscanf

  _chsize

  _chsize_s

  _close

  _commit

  _creat

  _dup

  _dup2

  _eof

  _fclose_nolock

  _fcloseall

  _fflush_nolock

  _fgetc_nolock

  _fgetchar

  _fgetwc_nolock

  _fgetwchar

  _filelength

  _filelengthi64

  _fileno

  _flushall

  _fputc_nolock

  _fputchar

  _fputwc_nolock

  _fputwchar

  _fread_nolock

  _fread_nolock_s

  _fseek_nolock

  _fseeki64

  _fseeki64_nolock

  _fsopen

  _ftell_nolock

  _ftelli64

  _ftelli64_nolock

  _fwrite_nolock

  _get_fmode

  _get_osfhandle

  _get_printf_count_output

  _get_stream_buffer_pointers

  _getc_nolock

  _getcwd

  _getdcwd

  _getmaxstdio

  _getw

  _getwc_nolock

  _getws

  _getws_s

  _isatty

  _kbhit

  _locking

  _lseek

  _lseeki64

  _mktemp

  _mktemp_s

  _open

  _open_osfhandle

  _pclose

  _pipe

  _popen

  _putc_nolock

  _putw

  _putwc_nolock

  _putws

  _read

  _rmtmp

  _set_fmode

  _set_printf_count_output

  _setmaxstdio

  _setmode

  _sopen

  _sopen_dispatch

  _sopen_s

  _tell

  _telli64

  _tempnam

  _ungetc_nolock

  _ungetwc_nolock

  _wcreat

  _wfdopen

  _wfopen

  _wfopen_s

  _wfreopen

  _wfreopen_s

  _wfsopen

  _wmktemp

  _wmktemp_s

  _wopen

  _wpopen

  _write

  _wsopen

  _wsopen_dispatch

  _wsopen_s

  _wtempnam

  _wtmpnam

  _wtmpnam_s

  clearerr

  clearerr_s

  fclose

  feof

  ferror

  fflush

  fgetc

  fgetpos

  fgets

  fgetwc

  fgetws

  fopen

  fopen_s

  fputc

  fputs

  fputwc

  fputws

  fread

  fread_s

  freopen

  freopen_s

  fseek

  fsetpos

  ftell

  fwrite

  getc

  getchar

  gets

  gets_s

  getwc

  getwchar

  putc

  putchar

  puts

  putwc

  putwchar

  rewind

  setbuf

  setvbuf

  tmpfile

  tmpfile_s

  tmpnam

  tmpnam_s

  ungetc

  ungetwc

  Sections

  .text

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-crt-string-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  d4:14:07:75:d4:f4:81:dd:20:bd:2c:69:71:4f:10:3b:a7:16:b0:e5:42:01:d7:b9:e4:a7:8a:a0:1a:e0:dd:33

  Signer

  Actual PE Digest

  d4:14:07:75:d4:f4:81:dd:20:bd:2c:69:71:4f:10:3b:a7:16:b0:e5:42:01:d7:b9:e4:a7:8a:a0:1a:e0:dd:33

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-string-l1-1-0.pdb

  Exports

  Exports

  __isascii

  __iscsym

  __iscsymf

  __iswcsym

  __iswcsymf

  __strncnt

  __wcsncnt

  _isalnum_l

  _isalpha_l

  _isblank_l

  _iscntrl_l

  _isctype

  _isctype_l

  _isdigit_l

  _isgraph_l

  _isleadbyte_l

  _islower_l

  _isprint_l

  _ispunct_l

  _isspace_l

  _isupper_l

  _iswalnum_l

  _iswalpha_l

  _iswblank_l

  _iswcntrl_l

  _iswcsym_l

  _iswcsymf_l

  _iswctype_l

  _iswdigit_l

  _iswgraph_l

  _iswlower_l

  _iswprint_l

  _iswpunct_l

  _iswspace_l

  _iswupper_l

  _iswxdigit_l

  _isxdigit_l

  _memccpy

  _memicmp

  _memicmp_l

  _strcoll_l

  _strdup

  _stricmp

  _stricmp_l

  _stricoll

  _stricoll_l

  _strlwr

  _strlwr_l

  _strlwr_s

  _strlwr_s_l

  _strncoll

  _strncoll_l

  _strnicmp

  _strnicmp_l

  _strnicoll

  _strnicoll_l

  _strnset

  _strnset_s

  _strrev

  _strset

  _strset_s

  _strupr

  _strupr_l

  _strupr_s

  _strupr_s_l

  _strxfrm_l

  _tolower

  _tolower_l

  _toupper

  _toupper_l

  _towlower_l

  _towupper_l

  _wcscoll_l

  _wcsdup

  _wcsicmp

  _wcsicmp_l

  _wcsicoll

  _wcsicoll_l

  _wcslwr

  _wcslwr_l

  _wcslwr_s

  _wcslwr_s_l

  _wcsncoll

  _wcsncoll_l

  _wcsnicmp

  _wcsnicmp_l

  _wcsnicoll

  _wcsnicoll_l

  _wcsnset

  _wcsnset_s

  _wcsrev

  _wcsset

  _wcsset_s

  _wcsupr

  _wcsupr_l

  _wcsupr_s

  _wcsupr_s_l

  _wcsxfrm_l

  _wctype

  is_wctype

  isalnum

  isalpha

  isblank

  iscntrl

  isdigit

  isgraph

  isleadbyte

  islower

  isprint

  ispunct

  isspace

  isupper

  iswalnum

  iswalpha

  iswascii

  iswblank

  iswcntrl

  iswctype

  iswdigit

  iswgraph

  iswlower

  iswprint

  iswpunct

  iswspace

  iswupper

  iswxdigit

  isxdigit

  mblen

  mbrlen

  memcpy_s

  memmove_s

  memset

  strcat

  strcat_s

  strcmp

  strcoll

  strcpy

  strcpy_s

  strcspn

  strlen

  strncat

  strncat_s

  strncmp

  strncpy

  strncpy_s

  strnlen

  strpbrk

  strspn

  strtok

  strtok_s

  strxfrm

  tolower

  toupper

  towctrans

  towlower

  towupper

  wcscat

  wcscat_s

  wcscmp

  wcscoll

  wcscpy

  wcscpy_s

  wcscspn

  wcslen

  wcsncat

  wcsncat_s

  wcsncmp

  wcsncpy

  wcsncpy_s

  wcsnlen

  wcspbrk

  wcsspn

  wcstok

  wcstok_s

  wcsxfrm

  wctype

  wmemcpy_s

  wmemmove_s

  Sections

  .text

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-crt-time-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  c8:05:45:75:04:9a:aa:bf:54:80:3c:1b:d8:28:e8:11:35:e9:d0:f1:ed:a6:3d:56:9f:83:72:81:51:be:67:c3

  Signer

  Actual PE Digest

  c8:05:45:75:04:9a:aa:bf:54:80:3c:1b:d8:28:e8:11:35:e9:d0:f1:ed:a6:3d:56:9f:83:72:81:51:be:67:c3

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-time-l1-1-0.pdb

  Exports

  Exports

  _Getdays

  _Getmonths

  _Gettnames

  _Strftime

  _W_Getdays

  _W_Getmonths

  _W_Gettnames

  _Wcsftime

  __daylight

  __dstbias

  __timezone

  __tzname

  _ctime32

  _ctime32_s

  _ctime64

  _ctime64_s

  _difftime32

  _difftime64

  _ftime32

  _ftime32_s

  _ftime64

  _ftime64_s

  _futime32

  _futime64

  _get_daylight

  _get_dstbias

  _get_timezone

  _get_tzname

  _getsystime

  _gmtime32

  _gmtime32_s

  _gmtime64

  _gmtime64_s

  _localtime32

  _localtime32_s

  _localtime64

  _localtime64_s

  _mkgmtime32

  _mkgmtime64

  _mktime32

  _mktime64

  _setsystime

  _strdate

  _strdate_s

  _strftime_l

  _strtime

  _strtime_s

  _time32

  _time64

  _timespec32_get

  _timespec64_get

  _tzset

  _utime32

  _utime64

  _wasctime

  _wasctime_s

  _wcsftime_l

  _wctime32

  _wctime32_s

  _wctime64

  _wctime64_s

  _wstrdate

  _wstrdate_s

  _wstrtime

  _wstrtime_s

  _wutime32

  _wutime64

  asctime

  asctime_s

  clock

  strftime

  wcsftime

  Sections

  .text

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/api-ms-win-crt-utility-l1-1-0.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  69:03:e9:4b:2a:74:f6:97:82:87:cb:a9:d8:fa:b9:8b:4d:12:0b:67:90:d4:c7:43:5c:51:b5:d4:df:56:40:34

  Signer

  Actual PE Digest

  69:03:e9:4b:2a:74:f6:97:82:87:cb:a9:d8:fa:b9:8b:4d:12:0b:67:90:d4:c7:43:5c:51:b5:d4:df:56:40:34

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-crt-utility-l1-1-0.pdb

  Exports

  Exports

  _abs64

  _byteswap_uint64

  _byteswap_ulong

  _byteswap_ushort

  _lfind

  _lfind_s

  _lrotl

  _lrotr

  _lsearch

  _lsearch_s

  _rotl

  _rotl64

  _rotr

  _rotr64

  _swab

  abs

  bsearch

  bsearch_s

  div

  imaxabs

  imaxdiv

  labs

  ldiv

  llabs

  lldiv

  qsort

  qsort_s

  rand

  rand_s

  srand

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/data_1.dat

  .exe windows:5 windows x86 arch:x86

  79b68a12e4eb6aa0c59dd1289006924f

  
  

  Code Sign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:5a:6b:ec:4d:7f:54:9f:e5:25:c8:52:df:67:0e:13

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  16-01-2023 00:00

  Not After

  15-01-2026 23:59

  Subject

  CN=Avast Software s.r.o.,O=Avast Software s.r.o.,L=Praha,C=CZ

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  17:c3:99:ba:64:90:c5:9c:5c:ad:31:b4:80:8b:6c:55:7d:bb:34:eb:1e:f4:ef:08:29:64:9d:89:19:34:7c:8c

  Signer

  Actual PE Digest

  17:c3:99:ba:64:90:c5:9c:5c:ad:31:b4:80:8b:6c:55:7d:bb:34:eb:1e:f4:ef:08:29:64:9d:89:19:34:7c:8c

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  C:\BUILD\work\8b0ebd312dc47f30\projects\avast\microstub\x86\Release\microstub.pdb

  Imports

  kernel32

  SetLastError

  Sleep

  GetFileSizeEx

  WriteFile

  SetEndOfFile

  SetFilePointerEx

  LocalFree

  CloseHandle

  MapViewOfFile

  UnmapViewOfFile

  CreateFileMappingW

  EnumResourceNamesW

  GetWindowsDirectoryW

  CreateDirectoryW

  CreateFileW

  CreateThread

  GetSystemTimeAsFileTime

  GetNativeSystemInfo

  lstrcatA

  lstrlenA

  GetVersionExA

  GetCurrentProcess

  GetExitCodeProcess

  ResumeThread

  ReleaseMutex

  WaitForSingleObject

  CreateMutexW

  CreateProcessW

  GetPrivateProfileIntW

  GetPrivateProfileStringW

  GetDiskFreeSpaceExW

  CopyFileW

  MoveFileExW

  CreateHardLinkW

  HeapAlloc

  GetProcessHeap

  HeapSetInformation

  ExitProcess

  IsProcessorFeaturePresent

  lstrcpyW

  GetModuleHandleW

  GetSystemDirectoryW

  SetDllDirectoryW

  InterlockedExchange

  LockResource

  WriteConsoleW

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  SetStdHandle

  LCMapStringW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetCPInfo

  GetOEMCP

  IsValidCodePage

  FindNextFileW

  FindFirstFileExW

  GetLastError

  HeapFree

  InterlockedExchangeAdd

  GetVersionExW

  FindResourceW

  LoadLibraryW

  SizeofResource

  LoadResource

  GlobalFree

  GlobalUnlock

  GlobalLock

  FindClose

  GetFileType

  GetStringTypeW

  GlobalAlloc

  FreeLibrary

  RaiseException

  GetSystemInfo

  VirtualProtect

  VirtualQuery

  LoadLibraryExA

  LoadLibraryA

  DecodePointer

  GetVersion

  HeapDestroy

  HeapReAlloc

  HeapSize

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  DeviceIoControl

  GetVolumeNameForVolumeMountPointW

  GetVolumePathNameW

  MultiByteToWideChar

  WideCharToMultiByte

  EnterCriticalSection

  LeaveCriticalSection

  SetEvent

  ResetEvent

  WaitForSingleObjectEx

  CreateEventW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  InitializeSListHead

  IsDebuggerPresent

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetStartupInfoW

  TerminateProcess

  OutputDebugStringW

  RtlUnwind

  EncodePointer

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  LoadLibraryExW

  GetCommandLineA

  GetCommandLineW

  GetStdHandle

  GetModuleFileNameW

  GetModuleHandleExW

  GetACP

  GetProcAddress

  user32

  GetMessageW

  TranslateMessage

  DispatchMessageW

  SendMessageW

  AllowSetForegroundWindow

  PostMessageW

  wsprintfA

  LoadStringW

  MessageBoxExW

  wsprintfW

  SystemParametersInfoW

  IsDialogMessageW

  LoadImageW

  DestroyIcon

  FindWindowW

  FillRect

  GetWindowRect

  InvalidateRect

  EndPaint

  BeginPaint

  ReleaseDC

  GetDC

  SetForegroundWindow

  GetSystemMetrics

  KillTimer

  SetTimer

  SetFocus

  SetWindowPos

  DestroyWindow

  CreateWindowExW

  RegisterClassExW

  PostQuitMessage

  DefWindowProcW

  gdi32

  GetTextExtentPoint32W

  GetObjectW

  CreateDIBSection

  SelectObject

  CreateFontIndirectW

  DeleteObject

  CreateSolidBrush

  CreatePatternBrush

  advapi32

  CryptDestroyHash

  CryptHashData

  CryptCreateHash

  CryptGenRandom

  CryptGetHashParam

  CryptReleaseContext

  CryptAcquireContextA

  GetSidSubAuthorityCount

  GetSidSubAuthority

  IsValidSid

  GetTokenInformation

  OpenProcessToken

  ConvertStringSecurityDescriptorToSecurityDescriptorA

  ole32

  CoCreateInstance

  CreateStreamOnHGlobal

  CoUninitialize

  CoInitializeEx

  comctl32

  ord17

  Sections

  .text

  Size: 134KB - Virtual size: 133KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 40KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didat

  Size: 512B - Virtual size: 76B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 61KB - Virtual size: 60KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/data_2.dat

  .exe windows:5 windows x86 arch:x86

  79b68a12e4eb6aa0c59dd1289006924f

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  C:\BUILD\work\8b0ebd312dc47f30\projects\avast\microstub\x86\Release\microstub.pdb

  Imports

  kernel32

  SetLastError

  Sleep

  GetFileSizeEx

  WriteFile

  SetEndOfFile

  SetFilePointerEx

  LocalFree

  CloseHandle

  MapViewOfFile

  UnmapViewOfFile

  CreateFileMappingW

  EnumResourceNamesW

  GetWindowsDirectoryW

  CreateDirectoryW

  CreateFileW

  CreateThread

  GetSystemTimeAsFileTime

  GetNativeSystemInfo

  lstrcatA

  lstrlenA

  GetVersionExA

  GetCurrentProcess

  GetExitCodeProcess

  ResumeThread

  ReleaseMutex

  WaitForSingleObject

  CreateMutexW

  CreateProcessW

  GetPrivateProfileIntW

  GetPrivateProfileStringW

  GetDiskFreeSpaceExW

  CopyFileW

  MoveFileExW

  CreateHardLinkW

  HeapAlloc

  GetProcessHeap

  HeapSetInformation

  ExitProcess

  IsProcessorFeaturePresent

  lstrcpyW

  GetModuleHandleW

  GetSystemDirectoryW

  SetDllDirectoryW

  InterlockedExchange

  LockResource

  WriteConsoleW

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  SetStdHandle

  LCMapStringW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetCPInfo

  GetOEMCP

  IsValidCodePage

  FindNextFileW

  FindFirstFileExW

  GetLastError

  HeapFree

  InterlockedExchangeAdd

  GetVersionExW

  FindResourceW

  LoadLibraryW

  SizeofResource

  LoadResource

  GlobalFree

  GlobalUnlock

  GlobalLock

  FindClose

  GetFileType

  GetStringTypeW

  GlobalAlloc

  FreeLibrary

  RaiseException

  GetSystemInfo

  VirtualProtect

  VirtualQuery

  LoadLibraryExA

  LoadLibraryA

  DecodePointer

  GetVersion

  HeapDestroy

  HeapReAlloc

  HeapSize

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  DeviceIoControl

  GetVolumeNameForVolumeMountPointW

  GetVolumePathNameW

  MultiByteToWideChar

  WideCharToMultiByte

  EnterCriticalSection

  LeaveCriticalSection

  SetEvent

  ResetEvent

  WaitForSingleObjectEx

  CreateEventW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  InitializeSListHead

  IsDebuggerPresent

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetStartupInfoW

  TerminateProcess

  OutputDebugStringW

  RtlUnwind

  EncodePointer

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  LoadLibraryExW

  GetCommandLineA

  GetCommandLineW

  GetStdHandle

  GetModuleFileNameW

  GetModuleHandleExW

  GetACP

  GetProcAddress

  user32

  GetMessageW

  TranslateMessage

  DispatchMessageW

  SendMessageW

  AllowSetForegroundWindow

  PostMessageW

  wsprintfA

  LoadStringW

  MessageBoxExW

  wsprintfW

  SystemParametersInfoW

  IsDialogMessageW

  LoadImageW

  DestroyIcon

  FindWindowW

  FillRect

  GetWindowRect

  InvalidateRect

  EndPaint

  BeginPaint

  ReleaseDC

  GetDC

  SetForegroundWindow

  GetSystemMetrics

  KillTimer

  SetTimer

  SetFocus

  SetWindowPos

  DestroyWindow

  CreateWindowExW

  RegisterClassExW

  PostQuitMessage

  DefWindowProcW

  gdi32

  GetTextExtentPoint32W

  GetObjectW

  CreateDIBSection

  SelectObject

  CreateFontIndirectW

  DeleteObject

  CreateSolidBrush

  CreatePatternBrush

  advapi32

  CryptDestroyHash

  CryptHashData

  CryptCreateHash

  CryptGenRandom

  CryptGetHashParam

  CryptReleaseContext

  CryptAcquireContextA

  GetSidSubAuthorityCount

  GetSidSubAuthority

  IsValidSid

  GetTokenInformation

  OpenProcessToken

  ConvertStringSecurityDescriptorToSecurityDescriptorA

  ole32

  CoCreateInstance

  CreateStreamOnHGlobal

  CoUninitialize

  CoInitializeEx

  comctl32

  ord17

  Sections

  .text

  Size: 134KB - Virtual size: 133KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 40KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didat

  Size: 512B - Virtual size: 76B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 33KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/llll.dll

  .dll windows:10 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:04:3a:75:e5:2f:9e:0b:29:98:1e:00:00:00:00:04:3a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02-09-2021 18:25

  Not After

  01-09-2022 18:25

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-07-2010 20:40

  Not After

  06-07-2025 20:50

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:ed:05:f2:9f:eb:de:f6:19:4d:df:60:ab:ff:b8:66:35:e6:81:7e:53:fa:0d:a9:4d:c4:c1:2d:0e:f4:16:e6

  Signer

  Actual PE Digest

  05:ed:05:f2:9f:eb:de:f6:19:4d:df:60:ab:ff:b8:66:35:e6:81:7e:53:fa:0d:a9:4d:c4:c1:2d:0e:f4:16:e6

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  api-ms-win-core-handle-l1-1-0.pdb

  Exports

  Exports

  CloseHandle

  CompareObjectHandles

  DuplicateHandle

  GetHandleInformation

  SetHandleInformation

  Sections

  .text

  Size: 1024B - Virtual size: 703B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Аdоbе Асtivаtоr/mui/sp.dll

  .exe windows:5 windows x86 arch:x86

  c7edaf3f3d9b0b390b0f0473c7a8cf06

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  03:15:43:e7:6c:a9:71:57:5e:ed:f2:2a:a3:71:9d:cc

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  06-06-2023 00:00

  Not After

  07-08-2024 23:59

  Subject

  CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  01

  Certificate

  Issuer

  CN=Unknown issuer

  Not Before

  01-01-2013 10:00

  Not After

  01-04-2013 10:00

  Subject

  CN=Dummy certificate

  Extended Key Usages

  Key Usages

  KeyUsageCertSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:15:43:e7:6c:a9:71:57:5e:ed:f2:2a:a3:71:9d:cc

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  06-06-2023 00:00

  Not After

  07-08-2024 23:59

  Subject

  CN=Brave Software\, Inc.,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  14-07-2023 00:00

  Not After

  13-10-2034 23:59

  Subject

  CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e0:e8:a8:7c:c0:ca:b2:8c:e4:39:60:eb:f7:66:19:fa:b3:bd:d0:59:eb:2c:8c:79:97:bd:b3:c0:59:ba:95:0d

  Signer

  Actual PE Digest

  e0:e8:a8:7c:c0:ca:b2:8c:e4:39:60:eb:f7:66:19:fa:b3:bd:d0:59:eb:2c:8c:79:97:bd:b3:c0:59:ba:95:0d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  9d:55:17:b1:ad:47:6b:56:68:a3:33:2d:a3:32:28:97:9f:60:47:af

  Signer

  Actual PE Digest

  9d:55:17:b1:ad:47:6b:56:68:a3:33:2d:a3:32:28:97:9f:60:47:af

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  mi_exe_stub.pdb

  Imports

  kernel32

  InitializeSListHead

  IsDebuggerPresent

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetStartupInfoW

  IsProcessorFeaturePresent

  GetModuleHandleW

  GetCurrentProcess

  TerminateProcess

  RtlUnwind

  GetLastError

  SetLastError

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  FreeLibrary

  GetProcAddress

  LoadLibraryExW

  EncodePointer

  RaiseException

  GetStdHandle

  WriteFile

  GetModuleFileNameW

  ExitProcess

  GetModuleHandleExW

  OutputDebugStringW

  HeapAlloc

  HeapFree

  FindClose

  FindFirstFileExW

  FindNextFileW

  GetSystemTimeAsFileTime

  GetACP

  GetOEMCP

  GetCPInfo

  GetCommandLineA

  GetCommandLineW

  MultiByteToWideChar

  WideCharToMultiByte

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetStdHandle

  GetFileType

  GetStringTypeW

  LCMapStringW

  GetProcessHeap

  HeapSize

  HeapReAlloc

  FlushFileBuffers

  GetConsoleOutputCP

  GetConsoleMode

  SetFilePointerEx

  ReadFile

  CreateFileW

  CloseHandle

  WriteConsoleW

  DecodePointer

  lstrcpynW

  CreateEventW

  WaitForSingleObjectEx

  ResetEvent

  GetCurrentThreadId

  GetCurrentProcessId

  IsValidCodePage

  QueryPerformanceCounter

  CreateDirectoryW

  SizeofResource

  lstrlenW

  RemoveDirectoryW

  GetTempPathW

  FormatMessageW

  LockResource

  DeleteFileW

  FindResourceExW

  LoadResource

  FindResourceW

  HeapDestroy

  LocalFree

  VerSetConditionMask

  CopyFileW

  VerifyVersionInfoW

  GetTempFileNameW

  lstrcmpiW

  UnmapViewOfFile

  CreateFileMappingW

  MapViewOfFile

  VirtualQuery

  SetFilePointer

  WaitForSingleObject

  CreateProcessW

  GetExitCodeProcess

  SetEvent

  shlwapi

  PathQuoteSpacesW

  PathAppendW

  PathRemoveExtensionW

  PathStripPathW

  advapi32

  RegCreateKeyExW

  RegSetValueExW

  RegCloseKey

  ole32

  CoUninitialize

  CoInitializeEx

  shell32

  ord680

  SHGetFolderPathW

  user32

  MessageBoxW

  CharUpperBuffW

  CharLowerBuffW

  Sections

  .text

  Size: 99KB - Virtual size: 99KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 33KB - Virtual size: 33KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ