OPTIMISATIONS_PACK[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

OPTIMISATIONS_PACK.zip
Size

4.8MB
MD5

9fa70422c7006045392fabe20e11a38f
SHA1

bec41e9c04de337322dcff903a8a48a8fb475f58
SHA256

89b49c236f326a4982b20b7bdc1422d671c6530e1468b6e3078438b84e610cf3
SHA512

45a62f7755e26382567bb153532756b9e3ad3765d10a37bc79eb8db639ad43509679d026cd5db90cac2a3612ab99135544c40a04be23d5a3889a0797ce656cdb
SSDEEP

98304:ekAGRJgXKaiXyUL9jImrGIXy/1rAAZ8Oad8Ls6lR9P5JNkDK:epGRJgrKyZd/BAAfqAsoPlkDK

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/98ME/hidusbf.sys
unpack001/OPTIMISATIONS_PACK/9. GPU/MSI Mode Tool.exe
unpack001/OPTIMISATIONS_PACK/9. GPU/nvidiaProfileInspector.exe
unpack002/$PLUGINSDIR/INetC.dll
unpack002/$PLUGINSDIR/LangDLL.dll
unpack002/$PLUGINSDIR/System.dll

Files

OPTIMISATIONS_PACK.zip
.zip
OPTIMISATIONS_PACK/1. DO FIRST/1 Create A Restore Point.lnk
.lnk
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/1kHz.cmd
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/2kHz-4kHz.cmd
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/4kHz-8kHz.cmd
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/98ME/hidusbf.sys
.sys windows:4 windows x86 arch:x86

a4854a4d8aeca1a6f1a6ecad1dafa6de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
ZwClose
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoCreateDevice
_except_handler3
IoDeleteDevice
IoDetachDevice
ZwQueryValueKey
PoCallDriver
PoStartNextPowerIrp
IofCompleteRequest
KeInitializeEvent
KeSetEvent
InterlockedDecrement
InterlockedIncrement
KeWaitForSingleObject
IofCallDriver
ExFreePool

usbd.sys

_USBD_ParseDescriptors@16

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 672B - Virtual size: 642B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/AMD64/1khz/hidusbf.sys
.sys windows:5 windows x64 arch:x64

2381c1ee5c1461ef217df28364930cee

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24-12-2015 00:00

Not After

07-01-2025 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:d5:57:74:02:76:a2:28:c3:ba:37:bb:de:b1:2d:7e:64:c7:eb:3d:39:a7:bd:3a:06:7b:56:2a:61:7d:51:d6
Signer

Actual PE Digest

78:d5:57:74:02:76:a2:28:c3:ba:37:bb:de:b1:2d:7e:64:c7:eb:3d:39:a7:bd:3a:06:7b:56:2a:61:7d:51:d6

Digest Algorithm

sha256

PE Digest Matches

true

d7:17:48:ed:5d:88:d5:41:5c:37:22:a4:77:8c:82:43:0d:6c:84:67
Signer

Actual PE Digest

d7:17:48:ed:5d:88:d5:41:5c:37:22:a4:77:8c:82:43:0d:6c:84:67

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
__C_specific_handler
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
ZwQueryValueKey
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 256B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/AMD64/2khz-4khz/hidusbf.sys
.sys windows:5 windows x64 arch:x64

84541687f18e3ffb4f8fe04db5f18fde

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24-12-2015 00:00

Not After

07-01-2025 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:da:71:3b:27:da:28:a7:37:18:c6:b0:9d:c2:61:7e:8e:23:54:50:ef:11:ca:64:0d:d7:f4:89:1b:10:22:2a
Signer

Actual PE Digest

07:da:71:3b:27:da:28:a7:37:18:c6:b0:9d:c2:61:7e:8e:23:54:50:ef:11:ca:64:0d:d7:f4:89:1b:10:22:2a

Digest Algorithm

sha256

PE Digest Matches

true

be:5e:bd:40:f8:54:5d:71:98:6e:fd:32:80:63:7a:a8:51:0a:4d:3a
Signer

Actual PE Digest

be:5e:bd:40:f8:54:5d:71:98:6e:fd:32:80:63:7a:a8:51:0a:4d:3a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
__C_specific_handler
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
ExAllocatePoolWithTag
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwQueryValueKey
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 256B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/AMD64/4khz-8khz/hidusbf.sys
.sys windows:5 windows x64 arch:x64

84541687f18e3ffb4f8fe04db5f18fde

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24-12-2015 00:00

Not After

07-01-2025 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3e:58:48:66:65:a4:56:dc:bb:06:68:49:39:fe:bb:c9:5a:9b:f5:47:0a:55:84:d1:23:5b:ef:7b:06:6f:06:cc
Signer

Actual PE Digest

3e:58:48:66:65:a4:56:dc:bb:06:68:49:39:fe:bb:c9:5a:9b:f5:47:0a:55:84:d1:23:5b:ef:7b:06:6f:06:cc

Digest Algorithm

sha256

PE Digest Matches

true

df:02:03:ec:56:95:cd:8b:04:52:4b:0e:df:ca:49:54:03:52:e4:a4
Signer

Actual PE Digest

df:02:03:ec:56:95:cd:8b:04:52:4b:0e:df:ca:49:54:03:52:e4:a4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
__C_specific_handler
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
ExAllocatePoolWithTag
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwQueryValueKey
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 256B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/AMD64/hidusbf.sys
.sys windows:5 windows x64 arch:x64

2381c1ee5c1461ef217df28364930cee

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24-12-2015 00:00

Not After

07-01-2025 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:d5:57:74:02:76:a2:28:c3:ba:37:bb:de:b1:2d:7e:64:c7:eb:3d:39:a7:bd:3a:06:7b:56:2a:61:7d:51:d6
Signer

Actual PE Digest

78:d5:57:74:02:76:a2:28:c3:ba:37:bb:de:b1:2d:7e:64:c7:eb:3d:39:a7:bd:3a:06:7b:56:2a:61:7d:51:d6

Digest Algorithm

sha256

PE Digest Matches

true

d7:17:48:ed:5d:88:d5:41:5c:37:22:a4:77:8c:82:43:0d:6c:84:67
Signer

Actual PE Digest

d7:17:48:ed:5d:88:d5:41:5c:37:22:a4:77:8c:82:43:0d:6c:84:67

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
__C_specific_handler
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
ZwQueryValueKey
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 256B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/AMD64/nopatch/hidusbf.sys
.sys windows:5 windows x64 arch:x64

cfedb7338b9798a1a4e6640e5a6e1937

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24-12-2015 00:00

Not After

07-01-2025 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

23:91:56:f9:e4:3e:76:de:06:f3:d1:b9:7e:d3:42:09:fc:e6:9e:11:70:68:61:bb:8a:0e:00:46:d1:d8:d4:3d
Signer

Actual PE Digest

23:91:56:f9:e4:3e:76:de:06:f3:d1:b9:7e:d3:42:09:fc:e6:9e:11:70:68:61:bb:8a:0e:00:46:d1:d8:d4:3d

Digest Algorithm

sha256

PE Digest Matches

true

89:57:b6:c1:c1:df:36:b3:45:a2:75:ea:41:43:2a:5b:d5:3c:3a:20
Signer

Actual PE Digest

89:57:b6:c1:c1:df:36:b3:45:a2:75:ea:41:43:2a:5b:d5:3c:3a:20

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
IoDeleteDevice
IoDetachDevice
IofCompleteRequest
__C_specific_handler
ZwClose
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
ZwQueryValueKey
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
IoInitializeRemoveLockEx
ExFreePool

usbd.sys

USBD_ParseDescriptors

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 128B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 896B - Virtual size: 816B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/HIDUSBF.INF
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/HIDUSBFU.INF
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/List.txt
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/NTX86/1khz/hidusbf.sys
.sys windows:5 windows x86 arch:x86

b61c22861a2bc08dffd66e3957b1bb4d

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24-12-2015 00:00

Not After

07-01-2025 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:49:06:31:53:85:82:af:5b:53:33:e9:0d:dc:8c:0f:02:92:a0:28:51:b1:45:9f:f6:29:87:22:7e:ba:be:be
Signer

Actual PE Digest

77:49:06:31:53:85:82:af:5b:53:33:e9:0d:dc:8c:0f:02:92:a0:28:51:b1:45:9f:f6:29:87:22:7e:ba:be:be

Digest Algorithm

sha256

PE Digest Matches

true

61:19:64:6e:39:62:3f:a4:57:d8:59:5f:85:9d:9a:a6:75:7b:3c:2c
Signer

Actual PE Digest

61:19:64:6e:39:62:3f:a4:57:d8:59:5f:85:9d:9a:a6:75:7b:3c:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
_except_handler3
ZwQueryValueKey
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/NTX86/2khz-4khz/hidusbf.sys
.sys windows:5 windows x86 arch:x86

34af1360f83df6c59c2f28d9cb2cba57

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24-12-2015 00:00

Not After

07-01-2025 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

31:91:95:b2:39:09:aa:bd:d6:85:41:3e:bb:1d:16:b5:05:1a:87:82:f2:7e:c2:e5:d7:ee:d3:8c:e8:48:0e:91
Signer

Actual PE Digest

31:91:95:b2:39:09:aa:bd:d6:85:41:3e:bb:1d:16:b5:05:1a:87:82:f2:7e:c2:e5:d7:ee:d3:8c:e8:48:0e:91

Digest Algorithm

sha256

PE Digest Matches

true

58:a6:c0:67:dd:db:c1:79:5c:c6:1d:e5:5e:49:95:2e:3e:4c:6b:54
Signer

Actual PE Digest

58:a6:c0:67:dd:db:c1:79:5c:c6:1d:e5:5e:49:95:2e:3e:4c:6b:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
_except_handler3
ExAllocatePoolWithTag
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwQueryValueKey
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/NTX86/4khz-8khz/hidusbf.sys
.sys windows:5 windows x86 arch:x86

34af1360f83df6c59c2f28d9cb2cba57

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24-12-2015 00:00

Not After

07-01-2025 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

19:69:94:92:98:b0:ce:ce:d5:00:b9:b1:67:06:8f:77:cd:09:60:70:11:fa:a9:ba:d9:2b:d4:e1:b9:24:c7:60
Signer

Actual PE Digest

19:69:94:92:98:b0:ce:ce:d5:00:b9:b1:67:06:8f:77:cd:09:60:70:11:fa:a9:ba:d9:2b:d4:e1:b9:24:c7:60

Digest Algorithm

sha256

PE Digest Matches

true

15:7e:fc:5b:fd:5e:e9:d7:bb:86:a9:e8:49:f4:a3:5b:10:ba:1e:8c
Signer

Actual PE Digest

15:7e:fc:5b:fd:5e:e9:d7:bb:86:a9:e8:49:f4:a3:5b:10:ba:1e:8c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
_except_handler3
ExAllocatePoolWithTag
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwQueryValueKey
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/NTX86/hidusbf.sys
.sys windows:5 windows x86 arch:x86

b61c22861a2bc08dffd66e3957b1bb4d

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24-12-2015 00:00

Not After

07-01-2025 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:49:06:31:53:85:82:af:5b:53:33:e9:0d:dc:8c:0f:02:92:a0:28:51:b1:45:9f:f6:29:87:22:7e:ba:be:be
Signer

Actual PE Digest

77:49:06:31:53:85:82:af:5b:53:33:e9:0d:dc:8c:0f:02:92:a0:28:51:b1:45:9f:f6:29:87:22:7e:ba:be:be

Digest Algorithm

sha256

PE Digest Matches

true

61:19:64:6e:39:62:3f:a4:57:d8:59:5f:85:9d:9a:a6:75:7b:3c:2c
Signer

Actual PE Digest

61:19:64:6e:39:62:3f:a4:57:d8:59:5f:85:9d:9a:a6:75:7b:3c:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
IoDeleteDevice
IoDetachDevice
IofCompleteRequest
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
_except_handler3
ZwQueryValueKey
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwClose
ExFreePoolWithTag

usbd.sys

USBD_ParseDescriptors

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/NTX86/nopatch/hidusbf.sys
.sys windows:5 windows x86 arch:x86

ff806606d50632c55cde2947b6f8af7e

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13-04-2016 00:00

Not After

18-04-2017 12:00

Subject

CN=Jeshua Starr Scully,O=Jeshua Starr Scully,L=Madison,ST=Wisconsin,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24-12-2015 00:00

Not After

07-01-2025 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

35:93:f6:ee:76:37:09:92:ea:44:03:2a:9a:af:16:00:6d:2d:af:f0:90:02:8a:e7:98:a2:76:a9:ab:77:ea:69
Signer

Actual PE Digest

35:93:f6:ee:76:37:09:92:ea:44:03:2a:9a:af:16:00:6d:2d:af:f0:90:02:8a:e7:98:a2:76:a9:ab:77:ea:69

Digest Algorithm

sha256

PE Digest Matches

true

f3:a0:e3:0c:83:05:05:a7:54:b5:6c:67:00:4c:de:5a:51:2a:10:4c
Signer

Actual PE Digest

f3:a0:e3:0c:83:05:05:a7:54:b5:6c:67:00:4c:de:5a:51:2a:10:4c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
ZwClose
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
_except_handler3
IoDeleteDevice
ZwQueryValueKey
IoReleaseRemoveLockEx
IofCallDriver
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
IofCompleteRequest
IoDetachDevice
ExFreePool

usbd.sys

_USBD_ParseDescriptors@16

Sections

.text
Size: 992B - Virtual size: 978B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 640B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/README.2kHz-8kHz.ENG.TXT
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/README.ENG.TXT
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/README.RUS.TXT
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/Setup.exe
.exe windows:1 windows x86 arch:x86

Code Sign

3e:ea:bd:93:c8:a2:b0:9b:4d:e3:c9:0e:3d:28:d8:2e
Certificate

Issuer

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Not Before

05-06-1973 21:00

Not After

30-12-2999 21:00

Subject

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Extended Key Usages

ExtKeyUsageCodeSigning

9c:08:8f:eb:76:25:dd:84:7a:3e:7b:66:b5:50:d0:66:4a:6a:41:3c
Signer

Actual PE Digest

9c:08:8f:eb:76:25:dd:84:7a:3e:7b:66:b5:50:d0:66:4a:6a:41:3c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/SweetLow.CER
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/nopatch.cmd
OPTIMISATIONS_PACK/10 .Overclock Controller_KBM/sx64.exe
.exe windows:5 windows x64 arch:x64

d4fa6722ea3a7bcd5e00f6b8c635b3ca

Code Sign

3e:ea:bd:93:c8:a2:b0:9b:4d:e3:c9:0e:3d:28:d8:2e
Certificate

Issuer

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Not Before

05-06-1973 21:00

Not After

30-12-2999 21:00

Subject

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Extended Key Usages

ExtKeyUsageCodeSigning

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

99:87:86:e5:9f:14:71:c6:b6:ab:b7:87:0c:0f:d7:29:30:e7:0a:e4
Signer

Actual PE Digest

99:87:86:e5:9f:14:71:c6:b6:ab:b7:87:0c:0f:d7:29:30:e7:0a:e4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

OutputDebugStringA
GetLastError
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
RtlUnwindEx
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
HeapCreate
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
Sleep
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
ReadFile
FlushFileBuffers
CloseHandle

setupapi

SetupDiCallClassInstaller
SetupDiSetClassInstallParamsA
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDeviceInfoA
SetupDiCreateDeviceInfoList

shell32

ShellExecuteA

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/11. Ram Tweaks/1. Memory Management Optimizations (Credit EverythingTech).reg
OPTIMISATIONS_PACK/11. Ram Tweaks/12GB Ram.reg
OPTIMISATIONS_PACK/11. Ram Tweaks/16GB Ram.reg
OPTIMISATIONS_PACK/11. Ram Tweaks/2. Disable LargeSystemCache.reg
OPTIMISATIONS_PACK/11. Ram Tweaks/32GB Ram.reg
OPTIMISATIONS_PACK/11. Ram Tweaks/4GB Ram.reg
OPTIMISATIONS_PACK/11. Ram Tweaks/6GB Ram.reg
OPTIMISATIONS_PACK/11. Ram Tweaks/8GB Ram.reg
OPTIMISATIONS_PACK/12 .Keyboard_Mouse/10decimal/KBDQS 10.reg
OPTIMISATIONS_PACK/12 .Keyboard_Mouse/10decimal/MDQS 10 .reg
OPTIMISATIONS_PACK/12 .Keyboard_Mouse/16decimal/KBDQS 16.reg
OPTIMISATIONS_PACK/12 .Keyboard_Mouse/16decimal/MDQS 16.reg
OPTIMISATIONS_PACK/2. Cleanup/1 Delete Temporary Files.cmd
OPTIMISATIONS_PACK/2. Cleanup/2 Delete Log Files.cmd
OPTIMISATIONS_PACK/2. Cleanup/3 Delete Windows Update Cache.cmd
OPTIMISATIONS_PACK/2. Cleanup/4 Disk Clean-Up.lnk
.lnk
OPTIMISATIONS_PACK/2. Cleanup/desktop.ini
OPTIMISATIONS_PACK/2. Cleanup/dfrgui.lnk
.lnk
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Clear Last Used Files and Folders.ps1
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Debloat Windows
.ps1
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Disable Cortana
.ps1
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Disable Last Used Files and Folders View.ps1
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Enable Cortana
.ps1
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Enable Edge PDF
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Fix Whitelisted Apps
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Protect Privacy
.ps1
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Remove Bloatware RegKeys
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Revert Changes
.ps1
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Set Explorers LaunchTo Computer.ps1
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Stop Edge PDF
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Uninstall OneDrive
.ps1
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Individual Scripts/Unpin Start
.ps1
OPTIMISATIONS_PACK/3. Windows10Debloater-master/LICENSE
OPTIMISATIONS_PACK/3. Windows10Debloater-master/README.md
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Windows10Debloater.ps1
.ps1
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Windows10DebloaterGUI.ps1
.ps1
OPTIMISATIONS_PACK/3. Windows10Debloater-master/Windows10SysPrepDebloater.ps1
.ps1
OPTIMISATIONS_PACK/4. CMD Tweaks/3. Remove Power Saving Features On USB Devices.bat
OPTIMISATIONS_PACK/4. CMD Tweaks/4 Disable Memory Compression.cmd
OPTIMISATIONS_PACK/4. CMD Tweaks/6 Turn Off Auto Windows Updates.cmd
OPTIMISATIONS_PACK/4. CMD Tweaks/Disable HIPM _ DIPM, HDD Parking.bat
OPTIMISATIONS_PACK/4. CMD Tweaks/Disable IoLatencyCap.bat
OPTIMISATIONS_PACK/4. CMD Tweaks/Disable StorPort Idle.bat
OPTIMISATIONS_PACK/4. CMD Tweaks/Disable USB Idle.bat
OPTIMISATIONS_PACK/4. CMD Tweaks/FSE and Game Bar off.bat
OPTIMISATIONS_PACK/4. CMD Tweaks/Latency Tweaks.cmd
OPTIMISATIONS_PACK/5. Registry Tweaks/1. Registry Tweaks.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/2. Extra Registry Tweaks.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/3 Disable Spectre _ Meltdown Windows Patches.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/5 Disable UAC.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/8. Disable File History Service.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/9. Large system cache.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/CSRSS/Default CSRSS Priority.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/CSRSS/Tweaked CSRSS Priority.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/Decrease Delay.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/DisablePageCombining.REG
OPTIMISATIONS_PACK/5. Registry Tweaks/DmaRemapping.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/Exclusive_Fullscreen.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/High Priority Fortnite.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/LowLatencyScaling.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/Might be good/Default lsass Priority.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/Might be good/Default winlogon Priority.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/Might be good/Tweaked lsass Priority.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/Might be good/Tweaked winlogon Priority.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/Optimize ALL Windows Settings.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/Paging Drivers To SSD (Disable).REG
OPTIMISATIONS_PACK/5. Registry Tweaks/Prioritys.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/Transactional Synchronization Extensions.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/USB Suspend Disable.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/Win32/26HEXWindows32PrioritySeperation.reg
OPTIMISATIONS_PACK/5. Registry Tweaks/Win32/36HEXWindows32priorityseperation.reg
OPTIMISATIONS_PACK/6. Unwanted Services/# If the files aren_t working READ THIS.txt
OPTIMISATIONS_PACK/6. Unwanted Services/# Revert Folder/Enable Bluetooth Services.reg
OPTIMISATIONS_PACK/6. Unwanted Services/# Revert Folder/Enable Diagnostics _ Telemtry Services.reg
OPTIMISATIONS_PACK/6. Unwanted Services/# Revert Folder/Enable Download Maps Manager.reg
OPTIMISATIONS_PACK/6. Unwanted Services/# Revert Folder/Enable Extra Unnecessary Services.reg
OPTIMISATIONS_PACK/6. Unwanted Services/# Revert Folder/Enable Printer Services.reg
OPTIMISATIONS_PACK/6. Unwanted Services/# Revert Folder/Enable Windows Defender.reg
OPTIMISATIONS_PACK/6. Unwanted Services/# Revert Folder/Enable Xbox Services.reg
OPTIMISATIONS_PACK/6. Unwanted Services/Disable Diagnostics _ Telemetry Services.reg
OPTIMISATIONS_PACK/6. Unwanted Services/Disable Extra Unnecessary Services.reg
OPTIMISATIONS_PACK/6. Unwanted Services/OPTIONAL Disable Anti Malware Service Executable/# If the files aren_t working READ THIS.txt
OPTIMISATIONS_PACK/6. Unwanted Services/OPTIONAL Disable Anti Malware Service Executable/Disable Anti Malware Service Executable.reg
OPTIMISATIONS_PACK/6. Unwanted Services/OPTIONAL Disable Anti Malware Service Executable/Download Malware Bytes.url
.url
OPTIMISATIONS_PACK/6. Unwanted Services/OPTIONAL Disable Bluetooth Services.reg
OPTIMISATIONS_PACK/6. Unwanted Services/OPTIONAL Disable Download Maps Manager.reg
OPTIMISATIONS_PACK/6. Unwanted Services/OPTIONAL Disable Printer Services.reg
OPTIMISATIONS_PACK/6. Unwanted Services/OPTIONAL Disable Xbox Services.reg
OPTIMISATIONS_PACK/6. Unwanted Services/PowerRun.ini
OPTIMISATIONS_PACK/7. CPU/! DIRECTIONS.txt
OPTIMISATIONS_PACK/7. CPU/1. DisableEnergyEstimation.reg
OPTIMISATIONS_PACK/7. CPU/2. DisableEnergyLogging.reg
OPTIMISATIONS_PACK/7. CPU/3. DisableCpuPwrThrottling.reg
OPTIMISATIONS_PACK/7. CPU/4. FixCpuStockSpeed.bat
OPTIMISATIONS_PACK/7. CPU/5. UnparkCpu.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:71:0d:c4:23:c7:d0:00:e3:0b:ae:9f:11:ae:11:51
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-10-2019 00:00

Not After

04-01-2023 12:00

Subject

SERIALNUMBER=201927010957,CN=CoderBag\, LLC,O=CoderBag\, LLC,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

50:d5:a1:b8:89:e3:b6:6b:bb:6a:5f:03:a2:47:88:4d:55:dc:06:c7:8f:61:0a:3c:32:e4:c7:33:3a:09:7c:84
Signer

Actual PE Digest

50:d5:a1:b8:89:e3:b6:6b:bb:6a:5f:03:a2:47:88:4d:55:dc:06:c7:8f:61:0a:3c:32:e4:c7:33:3a:09:7c:84

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 627KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/7. CPU/Minimal Power Management.reg
OPTIMISATIONS_PACK/7. CPU/ParkControl.exe
.exe windows:6 windows x64 arch:x64

199320258aed12e4463a57b6047eb1aa

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:61:74:bc:28:05:22:34:da:b3:72:85:2b:3d:3f:bb
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

20-01-2022 00:00

Not After

04-03-2023 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a5:27:57:7c:8d:1b:1d:3d:d0:c5:eb:00:d1:b5:aa:b9:3a:9d:d9:46:5e:c4:1b:75:26:08:13:b0:08:8f:aa:21
Signer

Actual PE Digest

a5:27:57:7c:8d:1b:1d:3d:d0:c5:eb:00:d1:b5:aa:b9:3a:9d:d9:46:5e:c4:1b:75:26:08:13:b0:08:8f:aa:21

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\dev\projs\ProcessSupervisor\output\ParkControl.pdb

Imports

kernel32

GetCommandLineW
IsBadReadPtr
Sleep
DeleteFileW
CreateDirectoryW
GetSystemDirectoryW
InitializeCriticalSection
DeleteCriticalSection
GetTickCount
WaitForMultipleObjects
CreateEventW
CreateThread
SetEvent
GetLastError
MultiByteToWideChar
GetSystemTimeAsFileTime
GetFileTime
CreateFileW
GetSystemInfo
ReleaseMutex
CloseHandle
GetExitCodeProcess
GetFileAttributesW
WaitForSingleObject
ExitProcess
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
LoadLibraryW
GetModuleHandleW
GetProcessHeap
HeapAlloc
GetCurrentDirectoryW
CreateProcessW
WriteFile
GetTempPathW
TerminateThread
LeaveCriticalSection
TryEnterCriticalSection
GetSystemTime
GetNumaHighestNodeNumber
InitializeCriticalSectionEx
CreateMutexW
WriteConsoleW
GetConsoleOutputCP
GetStringTypeW
SetStdHandle
GetCurrentProcessId
IsBadWritePtr
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
FindNextFileW
FindFirstFileExW
FindClose
GetConsoleMode
SetFilePointerEx
LCMapStringW
GetFileType
GetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ResetEvent
LoadLibraryExW
GetProcAddress
LocalFree
VerifyVersionInfoW
VerSetConditionMask
GetCurrentProcess
OpenProcess
CreateToolhelp32Snapshot
Thread32First
OpenThread
Thread32Next
GetActiveProcessorGroupCount
TerminateProcess
GetModuleFileNameW
GetFileSize
GetStartupInfoW
SetLastError
WinExec
GetSystemWow64DirectoryW
WideCharToMultiByte
GetUserDefaultUILanguage
FreeLibrary
ReadFile
GetLogicalProcessorInformationEx
GetActiveProcessorCount
EnterCriticalSection
LocalAlloc
FlushFileBuffers
GetCurrentThreadId
SuspendThread
ResumeThread
GetExitCodeThread
GetVersionExW
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
LocalLock
LocalUnlock
InitializeCriticalSectionAndSpinCount
GetProcessTimes
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
QueryPerformanceCounter
IsDebuggerPresent
OutputDebugStringW
RaiseException

user32

CreateWindowExW
SetWindowPos
RedrawWindow
SendMessageW
ShowWindow
FillRect
PostMessageW
GetClientRect
LoadStringW
GetDlgItem
GetLastInputInfo
LoadCursorW
RegisterClassExW
DialogBoxParamW
IsWindowVisible
CheckDlgButton
SetDlgItemInt
MessageBoxW
DestroyWindow
GetWindowRect
WinHelpW
SetDlgItemTextW
DefWindowProcW
RegisterWindowMessageW
DestroyMenu
TrackPopupMenu
BeginPaint
FrameRect
EndPaint
DrawTextW
GetSystemMetrics
GetWindow
EnableWindow
SetWindowLongPtrW
GetClassLongPtrW
GetWindowLongPtrW
SetClassLongPtrW
SetRect
GetActiveWindow
GetLastActivePopup
MessageBeep
DrawIcon
GetDialogBaseUnits
PostQuitMessage
IsWindow
GetClassNameW
EnableMenuItem
GetSystemMenu
SetFocus
MoveWindow
GetParent
DestroyIcon
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetAsyncKeyState
CreateDialogIndirectParamW
PeekMessageW
IsDialogMessageW
WaitMessage
GetCursorPos
LoadMenuW
KillTimer
CheckMenuItem
AppendMenuW
DeleteMenu
GetSubMenu
DispatchMessageW
TranslateMessage
GetMessageW
LoadIconW
FindWindowW
GetDlgItemTextW
IsDlgButtonChecked
SetForegroundWindow
SetWindowTextW
SystemParametersInfoW
SetTimer
GetSysColor
ScreenToClient
LoadImageW
EndDialog
GetWindowTextW
GetDlgItemInt

gdi32

CreateFontIndirectW
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
SetBkMode
SetTextColor
GetTextExtentPoint32W
CreateSolidBrush
GetStockObject
CreateDCW
SetBkColor

shell32

SHGetSpecialFolderPathW
SHChangeNotify
Shell_NotifyIconW
ShellExecuteW

ole32

CoInitializeEx
CoCreateInstance
StringFromGUID2
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

comctl32

ord410
InitCommonControlsEx
ord413

pdh

PdhCloseQuery
PdhRemoveCounter
PdhAddEnglishCounterW
PdhOpenQueryW
PdhGetFormattedCounterValue
PdhCollectQueryData

wininet

InternetCloseHandle
InternetCanonicalizeUrlW
InternetOpenW
InternetOpenUrlW
InternetReadFile

shlwapi

SHDeleteKeyW

dbghelp

MiniDumpWriteDump

uxtheme

SetWindowTheme

wevtapi

EvtClose
EvtNext
EvtQuery
EvtRender

powrprof

PowerRestoreIndividualDefaultPowerScheme

rpcrt4

UuidFromStringW

advapi32

ChangeServiceConfigW
ControlService
QueryServiceStatus
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
GetUserNameW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
StartServiceW
NotifyBootConfigStatus
QueryServiceConfigW

Sections

.text
Size: 384KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/7. CPU/QuickCPU.lnk
.lnk
OPTIMISATIONS_PACK/8. Powerplan/2 Power Plans.lnk
.lnk
OPTIMISATIONS_PACK/8. Powerplan/3 Disable Power Throttling.reg
OPTIMISATIONS_PACK/8. Powerplan/Amit v3 Idle Enabled.pow
OPTIMISATIONS_PACK/8. Powerplan/Amit v3.pow
OPTIMISATIONS_PACK/9. GPU/Cat 391.35.nip
OPTIMISATIONS_PACK/9. GPU/Cat 425.31.nip
OPTIMISATIONS_PACK/9. GPU/Dato.nip
OPTIMISATIONS_PACK/9. GPU/DisableWriteCombining.reg
OPTIMISATIONS_PACK/9. GPU/Disable_Preemption.reg
OPTIMISATIONS_PACK/9. GPU/GpuEnergyDriver.reg
OPTIMISATIONS_PACK/9. GPU/MSI Mode Tool.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Z:\Software\mediafire\MSI_util\MSI_util\obj\Release\MSI_util_v2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/9. GPU/New Cat Tweaked (457.30 and below).nip
OPTIMISATIONS_PACK/9. GPU/New Cat Tweaked (457.51 and above).nip
OPTIMISATIONS_PACK/9. GPU/Old Cat Tweaked (441.41).nip
OPTIMISATIONS_PACK/9. GPU/Old Cat Tweaked (457.30 and below).nip
OPTIMISATIONS_PACK/9. GPU/Old Cat Tweaked (457.51 and above).nip
OPTIMISATIONS_PACK/9. GPU/Unhide Silksmoothness.reg
OPTIMISATIONS_PACK/9. GPU/nvidiaProfileInspector.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 560KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/DDU v18.0.5.5/DDU Logs/2022-10-21__17-25-09_DDULog.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/Display Driver Uninstaller.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

a2:43:2c:58:81:d6:5f:6a:71:46:96:3b:2c:43:f5:a4
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

25-03-2023 23:59

Subject

CN=Wagnardsoft,O=Wagnardsoft,POSTALCODE=J7N 0W5,STREET=16915 Rue de la Perle,L=Mirabel,ST=Quebec,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

30-08-2022 00:00

Not After

29-08-2023 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c3:83:68:84:a0:c0:80:61:e8:0e:7f:18:ca:b7:1a:6b:75:62:f3:05:1e:5b:f6:34:a2:11:5f:a7:b6:0a:32:7a
Signer

Actual PE Digest

c3:83:68:84:a0:c0:80:61:e8:0e:7f:18:ca:b7:1a:6b:75:62:f3:05:1e:5b:f6:34:a2:11:5f:a7:b6:0a:32:7a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ghisl\OneDrive\Documents\Programmation\wpf\display-drivers-uninstaller\display-driver-uninstaller\Display Driver Uninstaller\obj\Release\Display Driver Uninstaller.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OPTIMISATIONS_PACK/DDU v18.0.5.5/Display Driver Uninstaller.pdb
OPTIMISATIONS_PACK/DDU v18.0.5.5/Issues and solutions.txt
OPTIMISATIONS_PACK/DDU v18.0.5.5/Licence.txt
OPTIMISATIONS_PACK/DDU v18.0.5.5/Readme.txt
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/AMD/classroot.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/AMD/clsidleftover.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/AMD/driverfiles.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/AMD/driverfilesKMAFD.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/AMD/driverfilesKMPFD.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/AMD/driverfilesKMPFD.cfg.bak
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/AMD/interface.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/AMD/packages.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/AMD/services.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/INTEL/classroot.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/INTEL/clsidleftover.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/INTEL/driverfiles.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/INTEL/interface.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/INTEL/packages.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/INTEL/services.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Arabic.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Bulgarian.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Chinese (Simplified).xml
.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Chinese (Traditional).xml
.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Czech.xml
.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Danish.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Dutch.xml
.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/English.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Finnish.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/French.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/German.xml
.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Greek.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Hebrew.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Hungarian.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Italian.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Japanese.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Korean.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Macedonian (Latin).xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Persian.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Polish.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Portuguese.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/PortugueseBrazil.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Russian.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Serbian (Cyrilic).xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Serbian (Latin).xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Slovak.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Slovenian.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Spanish (Spain).xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Spanish.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Swedish.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Thai.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Turkish.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/Ukrainian.xml
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Languages/_For translators - ReadMe.txt
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/NVIDIA/classroot.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/NVIDIA/clsidleftover.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/NVIDIA/clsidleftoverGFE.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/NVIDIA/driverfiles.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/NVIDIA/gfedriverfiles.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/NVIDIA/gfedriverfiles.cfg.bak
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/NVIDIA/gfeservice.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/NVIDIA/interface.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/NVIDIA/interfaceGFE.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/NVIDIA/nvbservice.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/NVIDIA/packages.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/NVIDIA/services.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/REALTEK/classroot.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/REALTEK/clsidleftover.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/REALTEK/driverfiles.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/REALTEK/packages.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/REALTEK/services.cfg
OPTIMISATIONS_PACK/DDU v18.0.5.5/settings/Settings.xml
OPTIMISATIONS_PACK/Internet/tcp/FirstBackup.spg
OPTIMISATIONS_PACK/Process Lasso.exe
.exe windows:4 windows x86 arch:x86

1f23f452093b5c1ff091a2f9fb4fa3e9

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:a4:34:2e:72:00:b6:ea:11:2e:58:bc:35:e6:54:93:59:bc:ea:29:33:4b:19:04:68:83:8b:88:33:ba:48:98
Signer

Actual PE Digest

a0:a4:34:2e:72:00:b6:ea:11:2e:58:bc:35:e6:54:93:59:bc:ea:29:33:4b:19:04:68:83:8b:88:33:ba:48:98

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
SetCurrentDirectoryW
GetFileAttributesW
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
CopyFileW
GetShortPathNameW
GlobalLock
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
MoveFileW
GetFullPathNameW
SetFileTime
SearchPathW
CompareFileTime
lstrcmpW
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalUnlock
GetDiskFreeSpaceW
GlobalAlloc
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
lstrlenA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW

user32

GetSystemMenu
SetClassLongW
EnableMenuItem
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetWindowRect
GetDlgItem
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
GetDC
SetTimer
SetWindowTextW
LoadImageW
SetForegroundWindow
ShowWindow
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
EndPaint
CreateDialogParamW
SendMessageTimeoutW
wsprintfW
PostQuitMessage

gdi32

SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor

shell32

SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW

advapi32

AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/INetC.dll
.dll windows:4 windows x86 arch:x86

735e27ae3d7df8c0487e4353d04f6f28

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LocalFree
WideCharToMultiByte
TerminateThread
lstrcpyW
LoadLibraryA
CreateThread
WaitForSingleObject
LocalAlloc
lstrcpynW
SleepEx
MulDiv
GetModuleHandleW
ReadFile
GetLastError
CreateFileW
lstrcmpiW
CreateFileA
lstrcatW
GetFileSize
SetFilePointer
lstrcmpW
MultiByteToWideChar
lstrlenA
WriteFile
lstrlenW
CloseHandle
GlobalAlloc
GlobalFree
GetTickCount
DeleteFileW

user32

GetDlgItem
DestroyWindow
GetClientRect
MessageBoxW
wsprintfA
SystemParametersInfoW
GetWindowTextW
GetWindowLongW
FindWindowExW
IsWindow
CreateDialogParamW
GetParent
ShowWindow
KillTimer
DispatchMessageW
LoadIconW
PostMessageW
IsDialogMessageW
GetMessageW
SetWindowPos
SendDlgItemMessageW
SetWindowTextW
TranslateMessage
GetWindowRect
RedrawWindow
SetTimer
EnableWindow
UpdateWindow
SetWindowLongW
wsprintfW
SendMessageW
SetDlgItemTextW
IsWindowVisible

comctl32

ord17

wininet

InternetConnectW
HttpOpenRequestW
InternetQueryOptionW
InternetErrorDlg
HttpSendRequestExW
InternetWriteFile
HttpSendRequestW
InternetSetFilePointer
HttpAddRequestHeadersA
FtpCreateDirectoryW
InternetCrackUrlW
FtpOpenFileW
InternetSetOptionW
InternetOpenW
InternetGetLastResponseInfoW
HttpEndRequestW
InternetReadFile
HttpAddRequestHeadersW
InternetCloseHandle
HttpQueryInfoW

Exports

Exports

get
head
post
put

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LangDLL.dll
.dll windows:4 windows x86 arch:x86

3e8d18bb71c7ebbda2ddc2a4bb03547b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
GlobalFree
lstrcpynW
lstrcmpW
GlobalAlloc
MulDiv
GetModuleHandleW
lstrcpyW

user32

DialogBoxParamW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
SetWindowTextW
LoadIconW
ShowWindow
SendMessageW
GetDC

gdi32

GetDeviceCaps
CreateFontIndirectW
DeleteObject

Exports

Exports

LangDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 681B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CPUEater.exe
.exe windows:6 windows x64 arch:x64

7759a0385876cc5799337682d2b4aea0

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

de:0d:51:20:3e:07:5c:fb:83:b5:5b:9a:f1:92:7d:70:26:58:26:1c:f0:f0:e2:16:53:5b:b3:8e:5c:62:b5:a5
Signer

Actual PE Digest

de:0d:51:20:3e:07:5c:fb:83:b5:5b:9a:f1:92:7d:70:26:58:26:1c:f0:f0:e2:16:53:5b:b3:8e:5c:62:b5:a5

Digest Algorithm

sha256

PE Digest Matches

true

de:0d:51:20:3e:07:5c:fb:83:b5:5b:9a:f1:92:7d:70:26:58:26:1c:f0:f0:e2:16:53:5b:b3:8e:5c:62:b5:a5
Signer

Actual PE Digest

de:0d:51:20:3e:07:5c:fb:83:b5:5b:9a:f1:92:7d:70:26:58:26:1c:f0:f0:e2:16:53:5b:b3:8e:5c:62:b5:a5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\pl\output\CPUEater.pdb

Imports

comctl32

ord17
InitCommonControlsEx

kernel32

GetSystemInfo
GetNumaHighestNodeNumber
GetNumaNodeProcessorMask
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LockResource
LoadResource
FindResourceExW
FindResourceW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateEventW
CreateThread
GetStartupInfoW
GetFileAttributesW
CreateProcessW
TerminateProcess
WaitForSingleObject
SetEvent
OpenEventW
DecodePointer
SetThreadPriorityBoost
GetCurrentThread
SetThreadPriority
OpenMutexW
GetPriorityClass
GetModuleHandleW
SetPriorityClass
GetCurrentProcess
LoadLibraryW
RaiseException
GetLastError
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
CloseHandle
GetThreadPriority
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
LocalFree
VerSetConditionMask
VerifyVersionInfoW
MultiByteToWideChar
GetModuleFileNameW
CreateFileW
GetFileSize
GetCurrentProcessId
SetLastError
GetProcAddress
GetVolumeNameForVolumeMountPointW
DeleteFileW
WideCharToMultiByte
GetLogicalProcessorInformationEx
GetActiveProcessorCount
GetActiveProcessorGroupCount
GetUserDefaultUILanguage
FreeLibrary
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
LocalAlloc
ResetEvent
GetTickCount
GetFileTime
ReadFile
WriteFile
FlushFileBuffers
SetEndOfFile
FindNextFileW
TryEnterCriticalSection
GetVersionExW
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
LocalLock
LocalUnlock
IsDebuggerPresent
OutputDebugStringW
GetStringTypeW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetCurrentThreadId
EncodePointer
GetCPInfo
QueryPerformanceCounter
ExitProcess
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetStdHandle
GetFileType
LCMapStringW
SetFilePointerEx
FindClose
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle

user32

GetSysColor
GetDialogBaseUnits
GetSystemMetrics
DrawTextW
DestroyIcon
GetClientRect
FillRect
IsWindow
GetClassNameW
EnableMenuItem
GetSystemMenu
SetFocus
SetWindowPos
GetWindowRect
MoveWindow
GetParent
SetWindowTextW
WinHelpW
RedrawWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetAsyncKeyState
CreateDialogIndirectParamW
PeekMessageW
IsDialogMessageW
WaitMessage
DestroyWindow
DialogBoxParamW
GetDlgItem
EnableWindow
SendMessageW
DrawIcon
SetDlgItemTextW
EndPaint
BeginPaint
RegisterClassExW
DefWindowProcW
PostQuitMessage
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
LoadStringW
SetForegroundWindow
GetDlgItemInt
IsWindowVisible
SetTimer
SystemParametersInfoW
CreateWindowExW
AllowSetForegroundWindow
SetDlgItemInt
LoadIconW
GetWindowLongPtrW
EndDialog
PostMessageW
MessageBoxW
SetWindowLongPtrW
IsDlgButtonChecked
CheckDlgButton
GetDlgItemTextW
MessageBeep
GetLastActivePopup
GetActiveWindow
SetRect
GetWindow
IsWindowEnabled
ShowWindow
GetWindowTextW

gdi32

CreateSolidBrush
CreateDCW
DeleteDC
DeleteObject
SetBkColor
SetTextColor
CreateFontIndirectW
GetTextExtentPoint32W
SelectObject

advapi32

SetSecurityDescriptorDacl
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
InitializeSecurityDescriptor

oleaut32

SysFreeString
VariantClear

rpcrt4

UuidFromStringW

shell32

SHGetSpecialFolderPathW
SHCreateDirectoryExW

ole32

CoInitializeEx
StringFromGUID2

Sections

.text
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Insights.exe
.exe windows:6 windows x64 arch:x64

5367c4fb625f7ae967fc2cd308ccb5c0

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e3:a7:b4:f6:92:02:20:fc:67:17:6f:b8:31:18:87:e8:4e:cb:96:14:c8:3b:1b:11:9d:63:68:79:db:b0:5c:11
Signer

Actual PE Digest

e3:a7:b4:f6:92:02:20:fc:67:17:6f:b8:31:18:87:e8:4e:cb:96:14:c8:3b:1b:11:9d:63:68:79:db:b0:5c:11

Digest Algorithm

sha256

PE Digest Matches

true

e3:a7:b4:f6:92:02:20:fc:67:17:6f:b8:31:18:87:e8:4e:cb:96:14:c8:3b:1b:11:9d:63:68:79:db:b0:5c:11
Signer

Actual PE Digest

e3:a7:b4:f6:92:02:20:fc:67:17:6f:b8:31:18:87:e8:4e:cb:96:14:c8:3b:1b:11:9d:63:68:79:db:b0:5c:11

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\dev\projs\ProcessSupervisor\output\Insights.pdb

Imports

rpcrt4

UuidFromStringW
UuidCreate

kernel32

WaitForSingleObject
ReleaseMutex
CreateMutexW
CreateEventW
CloseHandle
GetLocalTime
GetSystemTimeAsFileTime
FindResourceW
FindResourceExW
GetFileAttributesW
LockResource
SizeofResource
GetProcessHeap
DeleteCriticalSection
CreateThread
SetEvent
TerminateThread
FileTimeToLocalFileTime
FileTimeToSystemTime
SetPriorityClass
GetCurrentProcess
InitializeCriticalSectionEx
GetLastError
RaiseException
DecodePointer
OpenMutexW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
LoadResource
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
SetStdHandle
GetModuleHandleW
ExitProcess
LoadLibraryW
InitializeSRWLock
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
FindClose
SetFilePointerEx
LCMapStringW
GetFileType
CompareStringOrdinal
LoadLibraryExW
VirtualProtect
GetProcAddress
LocalFree
CreateFileW
VerifyVersionInfoW
VerSetConditionMask
GetUserDefaultUILanguage
FreeLibrary
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetModuleFileNameW
GetFileSize
GetStartupInfoW
OpenEventW
GetCurrentProcessId
SetLastError
WinExec
GetVolumeNameForVolumeMountPointW
DeleteFileW
WideCharToMultiByte
ResetEvent
IsBadWritePtr
GetSystemInfo
GetFileTime
GetDateFormatW
GetTimeFormatW
InitializeCriticalSection
Sleep
GetTickCount
ReadFile
WriteFile
FlushFileBuffers
SetEndOfFile
FindNextFileW
GetVersionExW
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
LocalAlloc
LocalLock
LocalUnlock
SystemTimeToFileTime
SetThreadPriority
GetCurrentThread
SetThreadPriorityBoost
GetPriorityClass
GetThreadPriority
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
GetLogicalProcessorInformationEx
GetActiveProcessorCount
GetActiveProcessorGroupCount
GetNumaHighestNodeNumber
GetNumaNodeProcessorMask
IsDebuggerPresent
OutputDebugStringW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetCurrentThreadId
GetStringTypeW
QueryPerformanceCounter
EncodePointer
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
GetStdHandle

user32

RedrawWindow
GetSysColor
LoadStringW
MessageBoxW
SetPropW
GetMenuBarInfo
GetWindowRect
OffsetRect
GetMenuItemInfoW
DrawTextW
FindWindowW
GetWindowTextW
EnableWindow
SendMessageW
SetWindowLongPtrW
GetWindowLongPtrW
IsDlgButtonChecked
CheckDlgButton
SetDlgItemInt
GetDlgItemInt
SetRect
GetActiveWindow
GetLastActivePopup
MessageBeep
DrawIcon
GetDialogBaseUnits
GetSystemMetrics
DestroyIcon
IsWindow
GetClassNameW
EnableMenuItem
GetSystemMenu
SetFocus
SetWindowPos
MoveWindow
GetParent
KillTimer
WinHelpW
OpenClipboard
EmptyClipboard
CloseClipboard
GetAsyncKeyState
GetWindow
CreateDialogIndirectParamW
PeekMessageW
SetClipboardData
TranslateMessage
DispatchMessageW
WaitMessage
GetMessageW
LoadImageW
IsWindowEnabled
IsDialogMessageW
GetDlgItem
GetDlgItemTextW
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcW
DestroyWindow
ShowWindow
CreateWindowExW
RegisterClassExW
TrackPopupMenu
GetCursorPos
GetSubMenu
DialogBoxParamW
SetForegroundWindow
EndDialog
FillRect
GetClientRect
PostMessageW
SetTimer
SystemParametersInfoW
SetMenu
LoadMenuW
SetWindowTextW
LoadIconW
CheckMenuItem
GetMenu
SetDlgItemTextW

gdi32

CreateDCW
SetBkColor
CreateFontIndirectW
SetTextColor
CreateSolidBrush
DeleteObject
SelectObject
DeleteDC
GetTextExtentPoint32W

advapi32

RegQueryInfoKeyW
RegEnumKeyExW
RegEnumValueW
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW

shell32

SHCreateDirectoryExW
ShellExecuteW
SHGetSpecialFolderPathW

oleaut32

VariantClear

comctl32

ord410
ord17
InitCommonControlsEx
ord413

uxtheme

CloseThemeData
DrawThemeText
GetThemeColor
OpenThemeData
DrawThemeBackground
SetWindowTheme
IsThemeActive

shlwapi

SHDeleteKeyW

wininet

InternetOpenUrlW
InternetCloseHandle
InternetReadFile
InternetOpenW
InternetCanonicalizeUrlW

ole32

StringFromGUID2
CoInitializeEx

Sections

.text
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
InstallHelper.exe
.exe windows:6 windows x64 arch:x64

253fd9261db38eee3ea4b2486cd6f0c1

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8a:57:b5:a1:97:b5:c7:d6:26:ea:4a:af:98:98:1f:43:c2:5a:8c:92:f4:5d:f8:62:0b:b5:c6:d6:e7:7d:96:14
Signer

Actual PE Digest

8a:57:b5:a1:97:b5:c7:d6:26:ea:4a:af:98:98:1f:43:c2:5a:8c:92:f4:5d:f8:62:0b:b5:c6:d6:e7:7d:96:14

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\pl\output\InstallHelper.pdb

Imports

comctl32

InitCommonControlsEx
ord17

kernel32

MultiByteToWideChar
CreateEventW
RemoveDirectoryW
InitializeCriticalSectionAndSpinCount
VerSetConditionMask
VerifyVersionInfoW
GetSystemDirectoryW
Sleep
GetStartupInfoW
CreateProcessW
FormatMessageW
CreateDirectoryW
InitializeCriticalSection
GetVersionExW
CopyFileW
GetCurrentProcessId
GetModuleHandleW
LoadLibraryW
TerminateThread
CreateThread
MoveFileW
DeleteFileW
ReleaseMutex
CloseHandle
SetEndOfFile
WriteFile
ReadFile
GetFileSize
ExitProcess
GetSystemTimeAsFileTime
GetFileTime
CreateFileW
GetFileAttributesW
GetExitCodeProcess
GetSystemInfo
WaitForSingleObject
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
FindResourceW
LoadResource
FindResourceExW
RaiseException
HeapReAlloc
LockResource
GetLastError
HeapSize
InitializeCriticalSectionEx
GetEnvironmentVariableW
HeapFree
SizeofResource
SetEvent
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
FindClose
LocalFree
GetProcAddress
GetCurrentProcess
OpenProcess
CreateToolhelp32Snapshot
GetActiveProcessorGroupCount
TerminateProcess
Process32FirstW
Process32NextW
GetModuleFileNameW
SetLastError
GetVolumeNameForVolumeMountPointW
WideCharToMultiByte
GetUserDefaultUILanguage
FreeLibrary
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
LocalAlloc
GetProcessTimes
ResetEvent
GetTickCount
MoveFileExW
FlushFileBuffers
FindNextFileW
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
LocalLock
LocalUnlock
GetLogicalProcessorInformationEx
GetActiveProcessorCount
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetCurrentThreadId
GetStringTypeW
QueryPerformanceCounter
EncodePointer
GetCPInfo
IsDebuggerPresent
OutputDebugStringW
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetStdHandle
GetFileType
LCMapStringW
GetFileSizeEx
SetFilePointerEx

user32

SetRect
GetActiveWindow
GetLastActivePopup
MessageBeep
BeginPaint
DrawIcon
EndPaint
GetSysColor
GetDialogBaseUnits
SystemParametersInfoW
DrawTextW
LoadIconW
DestroyIcon
FillRect
IsWindow
GetClassNameW
GetSystemMenu
SetFocus
SetWindowPos
SetForegroundWindow
MoveWindow
GetParent
WinHelpW
RedrawWindow
OpenClipboard
EmptyClipboard
CloseClipboard
GetAsyncKeyState
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
WaitMessage
PostQuitMessage
CreateDialogIndirectParamW
GetWindowTextW
EnableMenuItem
EnumWindows
IsWindowVisible
GetWindow
GetWindowThreadProcessId
ShowWindow
GetClientRect
CreateWindowExW
GetSystemMetrics
FindWindowW
IsDlgButtonChecked
CheckDlgButton
GetWindowRect
LoadStringW
KillTimer
PostMessageW
GetWindowLongPtrW
SetTimer
EnableWindow
SetWindowLongPtrW
SetWindowTextW
EndDialog
GetDlgItemTextW
GetDlgItem
SendMessageW
SetDlgItemTextW
MessageBoxW
DialogBoxParamW
SetClipboardData
DestroyWindow

advapi32

RegCreateKeyExW
ChangeServiceConfigW
QueryServiceConfigW
RegEnumKeyExW
RegQueryInfoKeyW
StartServiceW
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
GetSidSubAuthority
GetSidSubAuthorityCount
RegEnumKeyW
AdjustTokenPrivileges
RegDeleteKeyExW
GetUserNameW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
NotifyBootConfigStatus
LookupPrivilegeValueW
OpenProcessToken
GetTokenInformation
LookupAccountSidW
RegOpenKeyExW

shell32

ShellExecuteExW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHBrowseForFolderW
SHGetPathFromIDListW

ole32

CoInitializeEx
CoUninitialize
StringFromGUID2
CoCreateInstance
CoInitializeSecurity

oleaut32

VariantClear
VariantInit
SysAllocString
SysFreeString

shlwapi

SHDeleteKeyW

rpcrt4

UuidFromStringW

gdi32

SetBkColor
CreateDCW
CreateSolidBrush
GetTextExtentPoint32W
DeleteDC
CreateFontIndirectW
DeleteObject
SetTextColor
SelectObject

Sections

.text
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LICENSES
LogViewer.exe
.exe windows:6 windows x64 arch:x64

1008018174e8c14a2e434062b589577b

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:15:2b:54:b6:dc:40:12:40:3c:2c:1d:c3:96:3d:e7:74:a7:ec:a8:db:9e:33:75:f1:fd:a6:ee:66:65:53:1b
Signer

Actual PE Digest

98:15:2b:54:b6:dc:40:12:40:3c:2c:1d:c3:96:3d:e7:74:a7:ec:a8:db:9e:33:75:f1:fd:a6:ee:66:65:53:1b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\dev\projs\ProcessSupervisor\x64\Release\LogViewer.pdb

Imports

kernel32

TerminateThread
SetEvent
CreateThread
DeleteFileW
GetFileAttributesW
OpenMutexW
WaitForSingleObject
ReleaseMutex
CreateEventW
SetEndOfFile
CreateFileW
WriteFile
ReadFile
SetFilePointer
GetFileSize
CompareFileTime
CloseHandle
FindResourceW
FindResourceExW
LoadResource
LockResource
OpenEventW
FindNextChangeNotification
FindFirstChangeNotificationW
WaitForMultipleObjects
Sleep
DeleteCriticalSection
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
GlobalUnlock
GlobalLock
GetFileTime
GlobalAlloc
FindCloseChangeNotification
MultiByteToWideChar
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
GetOEMCP
GetACP
IsValidCodePage
GetModuleHandleW
ExitProcess
LoadLibraryW
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
SetFilePointerEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
CompareStringOrdinal
LoadLibraryExW
VirtualProtect
GetProcAddress
LocalFree
GetCurrentProcess
GetUserDefaultUILanguage
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetStartupInfoW
GetCurrentProcessId
SetLastError
WinExec
WideCharToMultiByte
SystemTimeToFileTime
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
GetDateFormatW
GetTimeFormatW
IsDebuggerPresent
OutputDebugStringW
GetStringTypeW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetCurrentThreadId
EncodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
CompareStringEx
GetCPInfo
GetLocaleInfoEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
GetStdHandle
GetFileType

user32

SetDlgItemTextW
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcW
PostMessageW
DialogBoxParamW
GetWindowTextW
SetPropW
GetMenuBarInfo
OffsetRect
GetMenuItemInfoW
InvalidateRect
GetWindowTextLengthW
SetTimer
SystemParametersInfoW
SetWindowLongPtrW
EndDialog
GetWindowInfo
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetKeyState
SetWindowPos
GetWindowDC
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
CallWindowProcW
FillRect
GetClientRect
SetWindowTextW
RedrawWindow
SendMessageW
GetSysColor
LoadStringW
MessageBoxW
GetWindowRect

gdi32

CreateFontIndirectW
GetTextExtentPoint32W
SetBkColor
SetTextColor
CreateSolidBrush
DeleteObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW

shell32

ShellExecuteW
SHGetSpecialFolderPathW
SHCreateDirectoryExW

comctl32

ord413
ord410

uxtheme

IsThemeActive
DrawThemeText
DrawThemeBackground
CloseThemeData
GetThemeColor
OpenThemeData
SetWindowTheme

ole32

CoInitializeEx

oleaut32

VariantClear

Sections

.text
Size: 436KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ProcessGovernor.exe
.exe windows:6 windows x64 arch:x64

0544fc33ad8b2dabe1b00461796ff843

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b5:07:3d:a3:d7:e6:f9:bc:66:43:39:6e:59:7e:10:ce:0c:7a:3c:a5:27:7e:65:eb:ed:9c:7f:48:45:59:75:4e
Signer

Actual PE Digest

b5:07:3d:a3:d7:e6:f9:bc:66:43:39:6e:59:7e:10:ce:0c:7a:3c:a5:27:7e:65:eb:ed:9c:7f:48:45:59:75:4e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\pl\output\ProcessGovernor.pdb

Imports

kernel32

SetThreadPriority
SetFilePointer
SetEndOfFile
CreateMutexW
GetDateFormatEx
OpenEventW
GetVersionExW
ReleaseMutex
OpenProcess
CreateEventW
Sleep
GetTickCount64
SetEvent
FileTimeToSystemTime
GetCurrentThread
TerminateThread
GetThreadPriority
GetProcessAffinityMask
CreateThread
ResetEvent
FileTimeToLocalFileTime
GetCurrentDirectoryW
SetThreadPriorityBoost
GetPriorityClass
GetProcAddress
GetFileSize
GetComputerNameW
GetCurrentProcessId
CreateProcessW
SetThreadExecutionState
FreeLibrary
GetSystemTime
GetTickCount
GetProcessTimes
OpenThread
SetUnhandledExceptionFilter
WaitForMultipleObjects
GlobalMemoryStatusEx
FindFirstChangeNotificationW
FindCloseChangeNotification
FindNextChangeNotification
GetTimeFormatEx
SetProcessAffinityMask
GetCurrentProcess
GetCommandLineW
SetPriorityClass
CreateDirectoryW
SetProcessPriorityBoost
ExitProcess
LeaveCriticalSection
EnterCriticalSection
DeleteFileW
InitializeCriticalSectionEx
WriteFile
ReadFile
GetFileTime
GetSystemTimeAsFileTime
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
FindResourceW
LoadResource
FindResourceExW
GetSystemInfo
RaiseException
CloseHandle
HeapReAlloc
LockResource
GetLastError
HeapSize
SetProcessShutdownParameters
GetFileAttributesW
CreateFileW
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
HeapFree
SizeofResource
LoadLibraryW
OutputDebugStringW
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
FindClose
GetActiveProcessorGroupCount
GetActiveProcessorCount
CreateToolhelp32Snapshot
Thread32First
Thread32Next
SetThreadGroupAffinity
FormatMessageW
GetProcessGroupAffinity
GetModuleHandleW
SetProcessWorkingSetSize
TerminateProcess
LocalFree
VerifyVersionInfoW
VerSetConditionMask
GetUserDefaultUILanguage
MultiByteToWideChar
GetModuleFileNameW
GetStartupInfoW
ProcessIdToSessionId
SetLastError
GetVolumeNameForVolumeMountPointW
MoveFileW
WideCharToMultiByte
GetHandleInformation
TryEnterCriticalSection
GetTempPathW
GetSystemDirectoryW
GetProcessPriorityBoost
IsBadReadPtr
ResumeThread
GetLogicalProcessorInformationEx
GetLocalTime
OpenMutexW
GetDateFormatW
GetTimeFormatW
FlushFileBuffers
GetCurrentThreadId
SuspendThread
GetExitCodeThread
InitializeCriticalSection
MoveFileExW
FindNextFileW
LocalAlloc
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
LocalLock
LocalUnlock
IsDebuggerPresent
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
GetStringTypeW
EncodePointer
QueryPerformanceCounter
CompareStringEx
GetCPInfo
LCMapStringEx
GetLocaleInfoEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
GetCommandLineA
GetFileType
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
SetFilePointerEx
GetTimeZoneInformation

user32

LoadStringW
CheckDlgButton
SetRect
GetActiveWindow
GetLastActivePopup
MessageBeep
BeginPaint
DrawIcon
EndPaint
GetSysColor
GetDialogBaseUnits
SystemParametersInfoW
GetSystemMetrics
DrawTextW
DestroyIcon
GetClientRect
FillRect
IsWindow
EnableMenuItem
GetSystemMenu
SetFocus
SetWindowPos
SetForegroundWindow
GetWindowRect
MoveWindow
GetParent
WinHelpW
RedrawWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetAsyncKeyState
CreateDialogIndirectParamW
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
WaitMessage
DestroyWindow
GetClassNameW
MessageBoxW
EnableWindow
EnumWindows
GetWindowTextW
IsWindowVisible
GetWindow
wvsprintfW
LoadIconW
KillTimer
GetWindowThreadProcessId
GetLastInputInfo
GetForegroundWindow
FindWindowW
PostQuitMessage
PostMessageW
SetWindowLongPtrW
SendMessageW
SetWindowTextW
GetWindowLongPtrW
SetTimer
GetDlgItem

advapi32

RegCloseKey
EnumServicesStatusExW
StartServiceW
ControlService
QueryServiceStatus
QueryServiceConfigW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegEnumKeyExW
RegQueryInfoKeyW
GetSidSubAuthority
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyExW
RegDeleteValueW
GetSidSubAuthorityCount
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameW
RegQueryValueExW
RegSetValueExW
GetTokenInformation
LookupAccountSidW
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
GetLengthSid
CreateProcessAsUserW
RegOpenKeyExW
RegDeleteKeyW

shell32

ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderPathW
SHCreateDirectoryExW

oleaut32

SysFreeString
VariantClear

wtsapi32

WTSQuerySessionInformationW
WTSFreeMemory

shlwapi

SHDeleteKeyW

dbghelp

MiniDumpWriteDump

pdh

PdhOpenQueryW
PdhCloseQuery
PdhGetFormattedCounterValue
PdhRemoveCounter
PdhCollectQueryData
PdhAddEnglishCounterW

rpcrt4

UuidCreate
UuidFromStringW

gdi32

SetTextColor
SetBkColor
DeleteObject
DeleteDC
CreateFontIndirectW
CreateDCW
CreateSolidBrush
SelectObject
GetTextExtentPoint32W

ole32

CoInitializeEx
StringFromGUID2

Sections

.text
Size: 748KB - Virtual size: 748KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ProcessLasso.exe
.exe windows:6 windows x64 arch:x64

33be127346b0709300acc12b2b74c346

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:ec:82:14:58:2b:04:4d:74:83:54:e9:13:39:7d:af:95:f0:90:74:cf:b3:c1:bf:2a:0c:8f:d3:f2:b8:e9:87
Signer

Actual PE Digest

61:ec:82:14:58:2b:04:4d:74:83:54:e9:13:39:7d:af:95:f0:90:74:cf:b3:c1:bf:2a:0c:8f:d3:f2:b8:e9:87

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\dev\projs\ProcessSupervisor\output\ProcessLasso.pdb

Imports

comctl32

ord412
ImageList_Remove
ord17
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
ord410
ord413
InitCommonControlsEx

gdiplus

GdipCreatePen1
GdiplusStartup
GdiplusShutdown
GdipDrawRectangleI
GdipAlloc
GdipSetPenDashStyle
GdipFree
GdipCreateFromHDC
GdipDeleteGraphics
GdipDeletePen
GdipDrawLineI

kernel32

GetFileSize
DeleteCriticalSection
ExitProcess
VerSetConditionMask
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GlobalMemoryStatusEx
CreateProcessW
SetThreadExecutionState
GetModuleHandleW
CopyFileW
VerifyVersionInfoW
GetSystemTimeAsFileTime
IsBadReadPtr
QueryPerformanceCounter
OpenMutexW
GetProcessTimes
GetFileTime
GetExitCodeProcess
CreateMutexW
WideCharToMultiByte
TerminateProcess
SetThreadPriority
ExitThread
GetCurrentThread
SetThreadPriorityBoost
GetCommandLineW
CreateDirectoryW
SetProcessShutdownParameters
GetVersionExW
GetTickCount64
LoadLibraryW
GetSystemTime
GetTickCount
SetUnhandledExceptionFilter
GlobalAlloc
GlobalLock
GlobalUnlock
MultiByteToWideChar
CreateEventW
HeapSize
OpenProcess
FindFirstChangeNotificationW
GetSystemDirectoryW
ReleaseMutex
OpenEventW
GetFileAttributesW
CreateFileW
WaitForSingleObject
InitializeCriticalSectionEx
SetFilePointer
InitializeCriticalSection
MoveFileExW
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
FindClose
LeaveCriticalSection
SetFilePointerEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetFileType
GetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
OutputDebugStringW
IsDebuggerPresent
GetLocaleInfoEx
GetCPInfo
CompareStringEx
LCMapStringEx
DecodePointer
FindNextChangeNotification
GetCurrentDirectoryW
FileTimeToLocalFileTime
HeapAlloc
FindResourceW
LoadResource
ResetEvent
FindResourceExW
CreateThread
GetSystemInfo
RaiseException
CloseHandle
HeapReAlloc
DeleteFileW
QueryPerformanceFrequency
LockResource
FindCloseChangeNotification
TerminateThread
GetActiveProcessorGroupCount
FileTimeToSystemTime
SetEvent
GetLastError
GetCommandLineA
InitializeCriticalSectionAndSpinCount
WaitForMultipleObjects
GetCurrentProcess
EnterCriticalSection
SetPriorityClass
HeapFree
CompareFileTime
SizeofResource
ReadFile
GetStartupInfoW
GetNumaHighestNodeNumber
Sleep
EncodePointer
WaitForSingleObjectEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetStringTypeW
GetExitCodeThread
SuspendThread
GetCurrentThreadId
GetNumaNodeProcessorMask
IsBadWritePtr
LocalUnlock
LocalLock
LocalAlloc
MulDiv
GetTimeFormatW
GetDateFormatW
SetFileAttributesW
FindNextFileW
FindFirstFileW
SetEndOfFile
FlushFileBuffers
WriteFile
GetLocalTime
FreeLibrary
GetUserDefaultUILanguage
GetActiveProcessorCount
GetLogicalProcessorInformationEx
ResumeThread
GetProcessPriorityBoost
GetThreadPriority
GetPriorityClass
TryEnterCriticalSection
RemoveDirectoryW
MoveFileW
GetTimeZoneInformation
GetVolumeNameForVolumeMountPointW
WinExec
SetLastError
ProcessIdToSessionId
GetProcAddress
SetProcessAffinityMask
CreateToolhelp32Snapshot
Thread32First
OpenThread
SetThreadGroupAffinity
Thread32Next
GetProcessAffinityMask
GetProcessGroupAffinity
SetProcessPriorityBoost
SetProcessWorkingSetSize
CompareStringOrdinal
LoadLibraryExW
VirtualProtect
LocalFree
GetModuleFileNameW

user32

MoveWindow
GetSystemMenu
GetClassNameW
WinHelpW
GetAsyncKeyState
CreateDialogIndirectParamW
PeekMessageW
IsDialogMessageW
GetParent
DrawTextW
KillTimer
PostQuitMessage
EnableMenuItem
SystemParametersInfoW
EndPaint
BeginPaint
GetCursorPos
ReleaseDC
WaitMessage
RegisterWindowMessageW
DialogBoxParamW
UpdateWindow
SetForegroundWindow
CreatePopupMenu
IsWindow
GetKeyState
GetClassLongPtrW
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
GetMessageW
LoadAcceleratorsW
DispatchMessageW
TranslateAcceleratorW
TranslateMessage
IsIconic
GetWindowTextLengthW
IsWindowEnabled
IsDlgButtonChecked
GetDlgItemInt
SetDlgItemInt
LoadImageW
GetWindowTextW
EndDialog
SetDlgItemTextW
GetDlgItemTextW
SetDlgItemTextA
GetDlgItem
CheckDlgButton
EnableWindow
GetMenuItemInfoW
DefWindowProcW
LoadMenuW
PostMessageW
GetWindowRect
GetMenu
DestroyWindow
GetDC
IsWindowVisible
SetWindowPos
MessageBoxW
SetWindowLongPtrW
FillRect
CreateWindowExW
DeleteMenu
ScreenToClient
SendMessageW
SetWindowTextW
GetSystemMetrics
SetClassLongPtrW
GetWindowLongPtrW
RegisterClassExW
TrackPopupMenu
GetSubMenu
ShowWindow
GetClassInfoW
SetTimer
RedrawWindow
DestroyIcon
GetWindowInfo
ClientToScreen
SetMenuItemInfoW
TrackMouseEvent
GetSysColor
LoadBitmapW
DestroyMenu
SetFocus
LoadIconW
FindWindowW
LoadCursorW
DrawMenuBar
CheckMenuItem
GetClientRect
AppendMenuW
GetWindowThreadProcessId
GetWindow
EnumWindows
SetPropW
FrameRect
GetMenuBarInfo
OffsetRect
IntersectRect
LoadStringW
SetRect
GetActiveWindow
GetLastActivePopup
MessageBeep
DrawIcon
GetDialogBaseUnits
InvalidateRect

gdi32

BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
GetStockObject
CreateRoundRectRgn
DeleteDC
TextOutW
GetTextExtentPoint32W
SetTextColor
SetBkMode
LineTo
CreatePen
MoveToEx
SetBkColor
DeleteObject
CreateSolidBrush
CreateFontIndirectW
FillRgn
CreateDCW

comdlg32

GetSaveFileNameW
ChooseColorW
GetOpenFileNameW

advapi32

AdjustTokenPrivileges
StartServiceW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
EnumServicesStatusExW
ControlService
QueryServiceStatus
QueryServiceConfigW
RegDeleteKeyW
GetSidSubAuthority
GetSidSubAuthorityCount
RegOpenKeyExW
LookupPrivilegeValueW
OpenProcessToken
SetSecurityDescriptorDacl
RegCloseKey
RegCreateKeyExW
RegSetValueExW
InitializeSecurityDescriptor
GetUserNameW
RegQueryValueExW
GetTokenInformation
LookupAccountSidW

shell32

ShellExecuteExW
SHCreateDirectoryExW
ExtractAssociatedIconW
ShellExecuteW
SHGetSpecialFolderPathW
Shell_NotifyIconW

ole32

CoInitializeSecurity
CoUninitialize
StringFromGUID2
CoCreateGuid
CoCreateInstance
CoInitializeEx

oleaut32

VariantClear
SysFreeString
VariantInit
SysAllocString

pdh

PdhCloseQuery
PdhGetFormattedCounterValue
PdhRemoveCounter
PdhCollectQueryData
PdhAddEnglishCounterW
PdhOpenQueryW

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

shlwapi

SHDeleteKeyW

dbghelp

MiniDumpWriteDump

uxtheme

DrawThemeText
OpenThemeData
GetThemeColor
CloseThemeData
SetWindowTheme
IsThemeActive
DrawThemeBackground

rpcrt4

UuidFromStringW

wininet

InternetCanonicalizeUrlW
InternetOpenW
InternetCloseHandle
InternetOpenUrlW
InternetReadFile

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ProcessLassoLauncher.exe
.exe windows:6 windows x64 arch:x64

431c5da184881fc193148bae0bb171d2

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

91:4e:ec:d2:89:7d:14:d8:b5:f5:ba:46:fb:8b:7c:d9:c4:69:40:8d:68:28:e5:e0:ef:8d:4e:6a:a2:e2:fb:cf
Signer

Actual PE Digest

91:4e:ec:d2:89:7d:14:d8:b5:f5:ba:46:fb:8b:7c:d9:c4:69:40:8d:68:28:e5:e0:ef:8d:4e:6a:a2:e2:fb:cf

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\pl\output\ProcessLassoLauncher.pdb

Imports

kernel32

FreeLibrary
InitializeCriticalSectionAndSpinCount
VerSetConditionMask
VerifyVersionInfoW
MultiByteToWideChar
GetModuleFileNameW
CreateFileW
CloseHandle
GetCurrentProcess
GetStartupInfoW
CreateProcessW
GetCurrentProcessId
OpenProcess
SetLastError
GetProcAddress
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
OutputDebugStringW
SetEvent
ResetEvent
GetLastError
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RaiseException
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CompareStringW
LCMapStringW
SetStdHandle
GetStringTypeW
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW
InitializeCriticalSectionEx
FindResourceW
FindResourceExW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
GetModuleHandleW
ExitProcess
DeleteCriticalSection
RtlPcToFileHeader
WaitForSingleObjectEx
LoadLibraryW

user32

MessageBoxW
PostMessageW
FindWindowW

advapi32

OpenProcessToken
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority

shell32

ShellExecuteExW

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
QuickUpgrade.exe
.exe windows:6 windows x64 arch:x64

2913d844364da188b1c9851786391052

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b7:94:14:cf:5d:14:5a:32:8f:61:d1:07:83:f9:4a:5a:9d:f7:29:b3:c2:2f:df:d0:d3:b1:27:36:b1:f8:60:80
Signer

Actual PE Digest

b7:94:14:cf:5d:14:5a:32:8f:61:d1:07:83:f9:4a:5a:9d:f7:29:b3:c2:2f:df:d0:d3:b1:27:36:b1:f8:60:80

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\dev\projs\ProcessSupervisor\output\QuickUpgrade.pdb

Imports

kernel32

GetStartupInfoW
FreeLibrary
CopyFileW
MultiByteToWideChar
CreateThread
InitializeCriticalSectionEx
Sleep
OpenEventW
CreateEventW
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
SetCurrentDirectoryW
GetSystemInfo
LoadLibraryW
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleHandleW
FindResourceExW
ExitProcess
GetSystemTimeAsFileTime
GetExitCodeProcess
GetFileAttributesW
WaitForSingleObject
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
CloseHandle
GetTempPathW
WriteFile
RemoveDirectoryW
DeleteFileW
CreateFileW
CreateProcessW
RaiseException
CreateDirectoryW
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
GetStringTypeW
SetStdHandle
LocalFree
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
GetCurrentProcess
GetModuleFileNameW
GetCurrentProcessId
OpenProcess
SetLastError
WinExec
WideCharToMultiByte
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TerminateProcess
GetProcessTimes
FlushFileBuffers
GetCurrentThreadId
TerminateThread
GetLogicalProcessorInformationEx
GetActiveProcessorCount
GetActiveProcessorGroupCount
IsDebuggerPresent
OutputDebugStringW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
QueryPerformanceCounter
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetStdHandle
GetFileType
LCMapStringW
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW

user32

GetWindow
PostMessageW
IsWindowVisible
ShowWindow
GetWindowThreadProcessId
SendMessageW
MessageBoxW
SetDlgItemTextW
GetDlgItem
EnumWindows
EndDialog
CreateWindowExW
LoadStringW
EnableWindow
DialogBoxParamW

advapi32

OpenProcessToken
GetTokenInformation
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetSidSubAuthorityCount
GetSidSubAuthority
OpenSCManagerW
OpenServiceW
CloseServiceHandle
QueryServiceStatus

shell32

ShellExecuteW
SHGetSpecialFolderPathW
ShellExecuteExW

ole32

CoInitialize

oleaut32

VariantClear
SysFreeString
SysAllocString

wininet

InternetReadFile
InternetOpenW
InternetOpenUrlW
InternetCloseHandle

wintrust

WinVerifyTrust

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ThreadRacer.exe
.exe windows:6 windows x64 arch:x64

f1e47c01dfb529afc3e1078f019124ab

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

df:1a:b0:5c:6a:56:9f:cb:18:a7:12:0c:0f:c4:87:a8:df:52:4e:49:1d:ec:ae:ab:54:9e:d1:b1:7a:3e:72:e9
Signer

Actual PE Digest

df:1a:b0:5c:6a:56:9f:cb:18:a7:12:0c:0f:c4:87:a8:df:52:4e:49:1d:ec:ae:ab:54:9e:d1:b1:7a:3e:72:e9

Digest Algorithm

sha256

PE Digest Matches

true

df:1a:b0:5c:6a:56:9f:cb:18:a7:12:0c:0f:c4:87:a8:df:52:4e:49:1d:ec:ae:ab:54:9e:d1:b1:7a:3e:72:e9
Signer

Actual PE Digest

df:1a:b0:5c:6a:56:9f:cb:18:a7:12:0c:0f:c4:87:a8:df:52:4e:49:1d:ec:ae:ab:54:9e:d1:b1:7a:3e:72:e9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\pl\output\ThreadRacer.exe.pdb

Imports

kernel32

SetThreadPriority
GetCurrentThread
CreateThread
Sleep
CreateEventW
WaitForSingleObject
SetEvent
CloseHandle
OutputDebugStringA
DeleteCriticalSection
GetUserDefaultUILanguage
GetFileAttributesW
FreeLibrary
LocalFree
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetModuleFileNameW
CreateFileW
GetCurrentProcess
GetStartupInfoW
GetCurrentProcessId
SetLastError
GetProcAddress
WideCharToMultiByte
GetLogicalProcessorInformationEx
GetActiveProcessorCount
GetActiveProcessorGroupCount
GetNumaHighestNodeNumber
GetSystemInfo
GetNumaNodeProcessorMask
EnterCriticalSection
LeaveCriticalSection
GetVersionExW
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
LocalAlloc
LocalLock
LocalUnlock
IsDebuggerPresent
OutputDebugStringW
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetStdHandle
WriteFile
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetStringTypeW
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW
GetLastError
RaiseException
LoadLibraryW
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleHandleW
SetThreadAffinityMask
FindResourceExW
ExitProcess
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy

user32

GetClassNameW
EnableMenuItem
GetSystemMenu
SetFocus
SetWindowPos
SetForegroundWindow
GetWindowRect
MoveWindow
GetParent
SetTimer
KillTimer
SetWindowTextW
WinHelpW
RedrawWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetAsyncKeyState
GetWindow
CreateDialogIndirectParamW
PeekMessageW
IsDialogMessageW
FillRect
DispatchMessageW
WaitMessage
PostQuitMessage
DestroyWindow
MessageBeep
DestroyIcon
GetActiveWindow
SetRect
GetWindowLongPtrW
SetWindowLongPtrW
CheckDlgButton
IsWindowEnabled
GetWindowTextW
PostMessageW
IsWindow
TranslateMessage
LoadIconW
DrawTextW
GetSystemMetrics
GetClientRect
SystemParametersInfoW
GetDialogBaseUnits
EnableWindow
IsDlgButtonChecked
GetDlgItemTextW
SetDlgItemTextW
SetDlgItemInt
GetDlgItem
EndDialog
DialogBoxParamW
SendMessageW
MessageBoxW
LoadStringW
GetSysColor
EndPaint
DrawIcon
GetLastActivePopup
BeginPaint

ole32

CoInitialize

comctl32

InitCommonControlsEx

gdi32

GetTextExtentPoint32W
SetTextColor
SetBkColor
DeleteObject
DeleteDC
CreateFontIndirectW
CreateDCW
CreateSolidBrush
SelectObject

advapi32

RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

Sections

.text
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TweakScheduler.exe
.exe windows:6 windows x64 arch:x64

e1006e79572c05199c92e2fb9fb6c2a0

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d5:fd:5f:6e:6f:9f:c4:61:13:fa:c9:e6:d1:66:09:c4:67:44:aa:50:5c:b5:7e:80:99:bc:04:56:a8:41:c2:51
Signer

Actual PE Digest

d5:fd:5f:6e:6f:9f:c4:61:13:fa:c9:e6:d1:66:09:c4:67:44:aa:50:5c:b5:7e:80:99:bc:04:56:a8:41:c2:51

Digest Algorithm

sha256

PE Digest Matches

true

d5:fd:5f:6e:6f:9f:c4:61:13:fa:c9:e6:d1:66:09:c4:67:44:aa:50:5c:b5:7e:80:99:bc:04:56:a8:41:c2:51
Signer

Actual PE Digest

d5:fd:5f:6e:6f:9f:c4:61:13:fa:c9:e6:d1:66:09:c4:67:44:aa:50:5c:b5:7e:80:99:bc:04:56:a8:41:c2:51

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\pl\output\TweakScheduler.exe.bsc

Imports

comctl32

InitCommonControlsEx

kernel32

GetCurrentProcess
GetExitCodeProcess
GetFileTime
GetSystemTimeAsFileTime
CloseHandle
GetFileAttributesW
CreateFileW
WaitForSingleObject
GetModuleHandleW
ExitProcess
LoadLibraryW
InitializeCriticalSectionEx
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
FindResourceW
LoadResource
FindResourceExW
GetSystemInfo
RaiseException
HeapReAlloc
LockResource
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
IsBadWritePtr
GetVersionExW
SizeofResource
OutputDebugStringW
WriteConsoleW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetStringTypeW
SetStdHandle
SetConsoleCtrlHandler
EnumSystemLocalesW
GetUserDefaultLCID
WideCharToMultiByte
MultiByteToWideChar
GetUserDefaultUILanguage
FreeLibrary
LocalFree
FormatMessageW
VerSetConditionMask
VerifyVersionInfoW
GetShortPathNameW
GetLongPathNameW
GetModuleFileNameW
GetFileSize
GetStartupInfoW
CreateProcessW
ProcessIdToSessionId
OpenEventW
GetCurrentProcessId
OpenProcess
SetLastError
GetProcAddress
WinExec
GetVolumeNameForVolumeMountPointW
MoveFileW
RemoveDirectoryW
CopyFileW
DeleteFileW
CreateDirectoryW
ReadFile
GetHandleInformation
WaitForMultipleObjects
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
Sleep
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetStdHandle
WriteFile
GetCurrentThread
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
RtlUnwind

user32

GetMenuItemInfoW
FindWindowW
GetWindowThreadProcessId
GetWindowTextW
GetWindowLongW
SetWindowLongW
GetDC
ReleaseDC
InvalidateRect
UnregisterClassW
LoadStringW
MessageBoxW
GetDlgItem
GetClientRect
PostMessageW
EndDialog
SetWindowTextW
ShowWindow
wvsprintfW
ExitWindowsEx
SetDlgItemTextW
IsDlgButtonChecked
CheckDlgButton
DialogBoxParamW
EnableWindow
CreateWindowExW
SendMessageW

advapi32

GetTokenInformation
StartServiceW
ControlService
RegCreateKeyExW
RegDeleteValueW
QueryServiceStatus
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
RegSetValueExW
OpenProcessToken
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW
RegEnumValueW
RegEnumKeyW
EnumServicesStatusExW
GetSidSubAuthorityCount
GetSidSubAuthority
DuplicateTokenEx
SetTokenInformation
GetLengthSid
CreateProcessAsUserW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
QueryServiceConfigW
ChangeServiceConfigW
NotifyBootConfigStatus

shell32

SHChangeNotify
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteW

ole32

CLSIDFromString

oleaut32

SysAllocString
SysFreeString

wininet

InternetOpenW
InternetOpenUrlW
InternetCanonicalizeUrlW
InternetReadFile
InternetCloseHandle

wtsapi32

WTSQuerySessionInformationW
WTSFreeMemory

shlwapi

SHDeleteKeyW

gdi32

GetTextExtentPoint32W
SelectObject

Sections

.text
Size: 357KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bitsumms.exe
.exe windows:6 windows x64 arch:x64

a8e566df0555829b1eccca93bc14ee9a

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:76:50:78:7a:05:18:4f:c1:44:40:b0:9e:bd:2f:16:b3:11:84:67:5a:e6:09:a9:f6:68:b3:4c:2e:1c:63:e2
Signer

Actual PE Digest

72:76:50:78:7a:05:18:4f:c1:44:40:b0:9e:bd:2f:16:b3:11:84:67:5a:e6:09:a9:f6:68:b3:4c:2e:1c:63:e2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\pl\output\MakeService.pdb

Imports

kernel32

GetModuleHandleW
GetCurrentProcess
GetModuleFileNameW
CreateFileW
GetStartupInfoW
GetCurrentProcessId
SetLastError
GetProcAddress
RaiseException
DecodePointer
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetCurrentDirectoryW
GetFileAttributesW
FindResourceW
FindResourceExW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
RtlUnwind
HeapSize
HeapDestroy
Sleep
GetLastError
CloseHandle
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
WriteConsoleW
InitializeCriticalSectionEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetFileType
GetCommandLineW
EncodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
IsDebuggerPresent
OutputDebugStringW
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RtlUnwindEx
RtlPcToFileHeader
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetCommandLineA

advapi32

CreateServiceW
DeleteService
StartServiceW
ControlService
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW

Sections

.text
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bitsumsessionagent.exe
.exe windows:6 windows x64 arch:x64

beef7944f62d1517e7710f7426e8a536

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

12:ce:95:57:ad:a1:d4:ec:ab:cd:3e:dc:4f:86:e0:d3:b1:f0:b8:59:7c:1d:df:24:46:e4:3b:05:53:ea:2b:5e
Signer

Actual PE Digest

12:ce:95:57:ad:a1:d4:ec:ab:cd:3e:dc:4f:86:e0:d3:b1:f0:b8:59:7c:1d:df:24:46:e4:3b:05:53:ea:2b:5e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\dev\projs\ProcessSupervisor\x64\Release\bitsumsessionagent.pdb

Imports

kernel32

RaiseException
HeapAlloc
HeapDestroy
DeleteCriticalSection
GetProcessHeap
SetPriorityClass
GetCurrentProcess
CreateMutexW
WaitForSingleObject
OutputDebugStringW
ReleaseMutex
CreateEventW
ProcessIdToSessionId
SetEvent
CloseHandle
LoadLibraryW
GetProcAddress
GetCurrentProcessId
SetThreadExecutionState
FreeLibrary
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
OpenEventW
HeapFree
WriteConsoleW
CreateFileW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
LocalFree
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryEnterCriticalSection
GetExitCodeThread
RtlUnwindEx
RtlPcToFileHeader
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
WriteFile
GetFileType
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP

user32

GetMessageW
DefWindowProcW
GetLastInputInfo
DestroyWindow
MessageBoxW
GetWindowThreadProcessId
SendMessageW
RegisterClassExW
DispatchMessageW
SetTimer
GetForegroundWindow
TranslateMessage
LoadCursorW
PostQuitMessage
CreateWindowExW

advapi32

RegCreateKeyExW
RegCloseKey
RegQueryValueExW

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pl-update.cmd
pl.cmd
plActivate.exe
.exe windows:6 windows x64 arch:x64

68666e13df8892ecd5589ed8ea03e8ed

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

34:62:50:b5:d9:7f:56:03:fc:65:20:ef:f1:e2:d9:e8:7e:86:20:09:35:7c:8b:8f:96:30:80:00:9c:ea:95:d0
Signer

Actual PE Digest

34:62:50:b5:d9:7f:56:03:fc:65:20:ef:f1:e2:d9:e8:7e:86:20:09:35:7c:8b:8f:96:30:80:00:9c:ea:95:d0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\dev\projs\ProcessSupervisor\output\plActivate.pdb

Imports

kernel32

DeleteCriticalSection
RaiseException
GetLastError
FreeLibrary
MultiByteToWideChar
GetModuleFileNameW
CreateFileW
CloseHandle
GetCurrentProcess
GetStartupInfoW
GetCurrentProcessId
SetLastError
GetProcAddress
WideCharToMultiByte
GetSystemInfo
IsBadWritePtr
GetSystemTimeAsFileTime
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
OutputDebugStringW
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CompareStringW
LCMapStringW
SetStdHandle
GetStringTypeW
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW
FindResourceW
FindResourceExW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
GetModuleHandleW
ExitProcess
LeaveCriticalSection
LoadLibraryW

wininet

InternetOpenW
InternetCanonicalizeUrlW
InternetOpenUrlW
InternetCloseHandle
InternetReadFile

advapi32

RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pl_rsrc_bulgarian.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:31:a8:d4:5c:89:0e:3b:28:00:8c:64:00:25:04:0b:97:0b:19:e5:b6:67:49:93:9e:d9:96:70:75:6c:13:84
Signer

Actual PE Digest

38:31:a8:d4:5c:89:0e:3b:28:00:8c:64:00:25:04:0b:97:0b:19:e5:b6:67:49:93:9e:d9:96:70:75:6c:13:84

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dev\projs\ProcessSupervisor\output\pl_rsrc_bulgarian.pdb

Sections

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl_rsrc_chinese.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d9:df:75:ba:54:4f:a5:1c:91:ac:05:62:53:ee:8e:99:09:c0:c8:40:e5:ea:cd:2d:86:26:e2:58:9f:66:2a:4b
Signer

Actual PE Digest

d9:df:75:ba:54:4f:a5:1c:91:ac:05:62:53:ee:8e:99:09:c0:c8:40:e5:ea:cd:2d:86:26:e2:58:9f:66:2a:4b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dev\projs\ProcessSupervisor\output\pl_rsrc_chinese.pdb

Sections

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl_rsrc_chinese_traditional.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

21:a2:0e:1c:7e:58:25:06:c1:b1:e4:79:2b:ef:75:4a:16:a2:38:20:a9:88:d2:b6:9d:a3:98:7e:92:01:51:9c
Signer

Actual PE Digest

21:a2:0e:1c:7e:58:25:06:c1:b1:e4:79:2b:ef:75:4a:16:a2:38:20:a9:88:d2:b6:9d:a3:98:7e:92:01:51:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dev\projs\ProcessSupervisor\output\pl_rsrc_chinese_traditional.pdb

Sections

.rdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl_rsrc_english.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6c:34:38:2b:1e:47:fb:fe:2e:5e:18:78:ce:85:80:cc:84:c0:98:c5:38:24:be:e2:11:a7:12:f4:15:0b:97:06
Signer

Actual PE Digest

6c:34:38:2b:1e:47:fb:fe:2e:5e:18:78:ce:85:80:cc:84:c0:98:c5:38:24:be:e2:11:a7:12:f4:15:0b:97:06

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl_rsrc_finnish.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:3e:03:9c:f5:ef:6e:af:f8:93:8b:0d:86:9a:47:4d:e3:e9:b2:81:8f:fb:68:b8:3e:7d:36:53:4d:50:7d:2f
Signer

Actual PE Digest

43:3e:03:9c:f5:ef:6e:af:f8:93:8b:0d:86:9a:47:4d:e3:e9:b2:81:8f:fb:68:b8:3e:7d:36:53:4d:50:7d:2f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\pl\output\pl_rsrc_finnish.pdb

Sections

.rdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl_rsrc_french.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cb:49:3a:6e:18:07:3b:36:74:76:97:4f:69:3d:b5:5f:33:f8:36:8a:62:25:6a:ca:2e:8e:a7:29:3e:eb:42:4b
Signer

Actual PE Digest

cb:49:3a:6e:18:07:3b:36:74:76:97:4f:69:3d:b5:5f:33:f8:36:8a:62:25:6a:ca:2e:8e:a7:29:3e:eb:42:4b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dev\projs\ProcessSupervisor\output\pl_rsrc_french.pdb

Sections

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl_rsrc_german.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:33:2a:b5:14:84:40:56:8a:dc:ef:63:8e:24:44:ed:90:ca:20:25:a7:c3:81:7b:ee:2d:b9:09:97:cf:34:a7
Signer

Actual PE Digest

97:33:2a:b5:14:84:40:56:8a:dc:ef:63:8e:24:44:ed:90:ca:20:25:a7:c3:81:7b:ee:2d:b9:09:97:cf:34:a7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dev\projs\ProcessSupervisor\output\pl_rsrc_german.pdb

Sections

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl_rsrc_italian.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b5:2e:93:60:6b:2d:96:0b:74:39:e3:24:62:1b:b2:0d:b7:b1:4f:cd:9c:37:11:b7:51:a5:fe:75:1d:34:7e:3f
Signer

Actual PE Digest

b5:2e:93:60:6b:2d:96:0b:74:39:e3:24:62:1b:b2:0d:b7:b1:4f:cd:9c:37:11:b7:51:a5:fe:75:1d:34:7e:3f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\pl\output\pl_rsrc_italian.pdb

Sections

.rdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl_rsrc_japanese.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

63:43:fd:ca:a1:b1:7e:6c:0e:d8:a3:4c:66:44:e5:40:44:3b:8e:df:0a:d9:25:9c:6b:72:51:13:2f:32:bb:f4
Signer

Actual PE Digest

63:43:fd:ca:a1:b1:7e:6c:0e:d8:a3:4c:66:44:e5:40:44:3b:8e:df:0a:d9:25:9c:6b:72:51:13:2f:32:bb:f4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dev\projs\ProcessSupervisor\output\pl_rsrc_japanese.pdb

Sections

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl_rsrc_polish.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:21:3f:95:1d:01:15:3e:79:c5:84:bb:5b:a1:fe:7d:20:8a:b2:f9:bb:c0:c1:4c:57:d2:1a:6c:41:d6:20:91
Signer

Actual PE Digest

5f:21:3f:95:1d:01:15:3e:79:c5:84:bb:5b:a1:fe:7d:20:8a:b2:f9:bb:c0:c1:4c:57:d2:1a:6c:41:d6:20:91

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\pl\output\pl_rsrc_polish.pdb

Sections

.rdata
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl_rsrc_ptbr.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:61:f6:3f:12:26:98:c1:f1:67:d5:7f:61:73:0b:03:5e:e6:26:20:bb:a9:2a:5b:9e:c1:57:1b:47:29:51:eb
Signer

Actual PE Digest

0a:61:f6:3f:12:26:98:c1:f1:67:d5:7f:61:73:0b:03:5e:e6:26:20:bb:a9:2a:5b:9e:c1:57:1b:47:29:51:eb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\pl\output\pl_rsrc_ptbr.pdb

Sections

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl_rsrc_russian.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:52:d3:37:a1:e1:48:36:47:18:50:05:6c:af:45:69:0e:e6:52:f8:1b:f7:34:1f:4b:1a:4d:a4:53:58:1b:9c
Signer

Actual PE Digest

d4:52:d3:37:a1:e1:48:36:47:18:50:05:6c:af:45:69:0e:e6:52:f8:1b:f7:34:1f:4b:1a:4d:a4:53:58:1b:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\pl\output\pl_rsrc_russian.pdb

Sections

.rdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl_rsrc_slovenian.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:3c:6e:c5:f8:e1:5c:1a:d9:05:46:26:2d:47:90:d5:5d:ab:6c:0d:8f:92:73:f0:60:1e:d4:cf:d3:88:95:c9
Signer

Actual PE Digest

78:3c:6e:c5:f8:e1:5c:1a:d9:05:46:26:2d:47:90:d5:5d:ab:6c:0d:8f:92:73:f0:60:1e:d4:cf:d3:88:95:c9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dev\projs\ProcessSupervisor\output\pl_rsrc_slovenian.pdb

Sections

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pl_rsrc_spanish.dll
.dll windows:6 windows x64 arch:x64

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:b9:ba:47:32:12:4a:d9:13:01:29:23:18:96:07:87:a5:b8:ff:3a:c8:93:e6:8d:ec:11:64:01:32:ef:46:bf
Signer

Actual PE Digest

72:b9:ba:47:32:12:4a:d9:13:01:29:23:18:96:07:87:a5:b8:ff:3a:c8:93:e6:8d:ec:11:64:01:32:ef:46:bf

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dev\projs\ProcessSupervisor\output\pl_rsrc_spanish.pdb

Sections

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
srvstub.exe
.exe windows:6 windows x64 arch:x64

55802cafc63c2fa0d24f5beb0a58b305

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:ed:73:8c:23:59:73:57:8e:9f:dd:82:28:af:e5:64:3c:46:ea:db:26:b9:b9:fb:1b:95:ce:d5:73:53:7c:e5
Signer

Actual PE Digest

49:ed:73:8c:23:59:73:57:8e:9f:dd:82:28:af:e5:64:3c:46:ea:db:26:b9:b9:fb:1b:95:ce:d5:73:53:7c:e5

Digest Algorithm

sha256

PE Digest Matches

true

49:ed:73:8c:23:59:73:57:8e:9f:dd:82:28:af:e5:64:3c:46:ea:db:26:b9:b9:fb:1b:95:ce:d5:73:53:7c:e5
Signer

Actual PE Digest

49:ed:73:8c:23:59:73:57:8e:9f:dd:82:28:af:e5:64:3c:46:ea:db:26:b9:b9:fb:1b:95:ce:d5:73:53:7c:e5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\pl\output\srvstub.pdb

Imports

kernel32

SetEvent
WaitForSingleObject
CreateEventW
OpenEventW
Sleep
WaitForMultipleObjects
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
CreateThread
ExitThread
CreateProcessW
GetStartupInfoW
GetProcessHeap
LoadResource
LockResource
SizeofResource
FindResourceW
MultiByteToWideChar
RaiseException
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
WriteConsoleW
CreateFileW
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
FindResourceExW
CloseHandle
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CompareStringW
LCMapStringW
GetFileType
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx

advapi32

SetServiceStatus
RegisterServiceCtrlHandlerW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
StartServiceCtrlDispatcherW

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
start-governor.bat
stop-governor.bat
testlasso.exe
.exe windows:6 windows x64 arch:x64

a118beacf531cdec3b0b2f451aac7b40

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

92:d0:c6:d6:2e:ad:09:f1:8c:67:47:a9:94:ae:fd:7b:f2:77:ab:b2:70:f0:e8:34:01:38:e1:77:c4:81:31:42
Signer

Actual PE Digest

92:d0:c6:d6:2e:ad:09:f1:8c:67:47:a9:94:ae:fd:7b:f2:77:ab:b2:70:f0:e8:34:01:38:e1:77:c4:81:31:42

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\pl\output\testlasso.pdb

Imports

kernel32

FindResourceW
FindResourceExW
LoadResource
LockResource
SizeofResource
WaitForMultipleObjects
GetNumaHighestNodeNumber
SystemTimeToFileTime
GetSystemTime
SetProcessAffinityMask
GetCurrentThread
SetThreadPriorityBoost
GetCurrentProcess
GetPriorityClass
Sleep
TerminateThread
InitializeCriticalSectionEx
LocalFree
GetModuleHandleW
GetProcAddress
CreateFileW
GetStartupInfoW
MultiByteToWideChar
GetModuleFileNameW
GetCurrentProcessId
SetLastError
LoadLibraryW
WideCharToMultiByte
GetLogicalProcessorInformationEx
GetActiveProcessorCount
GetActiveProcessorGroupCount
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
FreeLibrary
ExitProcess
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetCurrentThreadId
QueryPerformanceCounter
SetEvent
GetSystemTimeAsFileTime
IsDebuggerPresent
OutputDebugStringW
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
CompareStringW
LCMapStringW
GetFileType
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
ReadConsoleW
WriteConsoleW
CreateThread
RemoveDirectoryW
DeleteFileW
GetFileAttributesW
WaitForSingleObject
ReleaseMutex
CreateEventW
CreateMutexW
CloseHandle
GetProcessHeap
DeleteCriticalSection
HeapDestroy
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
RtlUnwind

user32

MessageBoxW
LoadStringW

advapi32

RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl

shell32

SHCreateDirectoryExW
SHGetSpecialFolderPathW

oleaut32

VariantClear

ole32

CoInitializeEx

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
uninstall.exe.nsis
vistammsc.exe
.exe windows:6 windows x64 arch:x64

a98c3b9001042cb3da1e62e8c7669948

Code Sign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:c9:bf:34:fa:5c:83:94:3b:dc:01:23:d1:bd:cb:77
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-12-2020 00:00

Not After

02-03-2022 23:59

Subject

SERIALNUMBER=000681038,CN=Bitsum Technologies (Bitsum LLC),O=Bitsum Technologies (Bitsum LLC),L=Morristown,ST=Tennessee,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130954656e6e6573736565,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

eb:f2:07:a1:33:6d:4b:65:72:2d:8c:47:00:e9:08:7f:73:21:21:5d:9f:22:d0:21:1c:b8:8b:9e:73:d0:34:19
Signer

Actual PE Digest

eb:f2:07:a1:33:6d:4b:65:72:2d:8c:47:00:e9:08:7f:73:21:21:5d:9f:22:d0:21:1c:b8:8b:9e:73:d0:34:19

Digest Algorithm

sha256

PE Digest Matches

true

eb:f2:07:a1:33:6d:4b:65:72:2d:8c:47:00:e9:08:7f:73:21:21:5d:9f:22:d0:21:1c:b8:8b:9e:73:d0:34:19
Signer

Actual PE Digest

eb:f2:07:a1:33:6d:4b:65:72:2d:8c:47:00:e9:08:7f:73:21:21:5d:9f:22:d0:21:1c:b8:8b:9e:73:d0:34:19

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\pl\output\vistammsc.exe.pdb

Imports

comctl32

InitCommonControlsEx

kernel32

CreateFileW
CloseHandle
GetExitCodeProcess
WaitForSingleObject
GetModuleHandleW
ExitProcess
LoadLibraryW
FindResourceW
FindResourceExW
GetSystemTimeAsFileTime
LockResource
InitializeCriticalSectionEx
GetLastError
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
GetSystemInfo
RaiseException
DeleteCriticalSection
CreateProcessW
GetStartupInfoW
GetWindowsDirectoryW
GetVersionExW
OutputDebugStringW
LoadResource
MultiByteToWideChar
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
WideCharToMultiByte
GetUserDefaultUILanguage
FreeLibrary
LocalFree
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetCurrentProcess
GetCurrentProcessId
SetLastError
GetProcAddress
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
LocalAlloc
LocalLock
LocalUnlock
GetNumaHighestNodeNumber
GetNumaNodeProcessorMask
EnterCriticalSection
LeaveCriticalSection
GetLogicalProcessorInformationEx
GetActiveProcessorCount
GetActiveProcessorGroupCount
IsDebuggerPresent
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetStdHandle
WriteFile
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetStringTypeW
SetFilePointerEx

user32

SetRect
GetActiveWindow
GetLastActivePopup
MessageBeep
BeginPaint
DrawIcon
GetWindowLongPtrW
EndPaint
GetSysColor
GetDialogBaseUnits
SystemParametersInfoW
GetSystemMetrics
DrawTextW
LoadIconW
DestroyIcon
FillRect
SetWindowLongPtrW
IsWindow
GetClassNameW
EnableMenuItem
GetSystemMenu
CheckDlgButton
SetFocus
SetForegroundWindow
GetWindowRect
MoveWindow
GetParent
SetTimer
KillTimer
SetWindowTextW
WinHelpW
RedrawWindow
OpenClipboard
EmptyClipboard
SetClipboardData
GetWindowTextW
GetAsyncKeyState
GetWindow
CreateDialogIndirectParamW
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
WaitMessage
PostQuitMessage
DestroyWindow
IsWindowEnabled
IsDlgButtonChecked
SetWindowPos
MessageBoxW
LoadStringW
GetDlgItem
SendMessageW
CreateWindowExW
GetClientRect
EndDialog
EnableWindow
ShowWindow
PostMessageW
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
SetDlgItemTextW
DialogBoxParamW
CloseClipboard

comdlg32

GetSaveFileNameW

advapi32

RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW

gdi32

DeleteDC
CreateDCW
SetBkColor
SetTextColor
CreateSolidBrush
DeleteObject
CreateFontIndirectW
SelectObject
GetTextExtentPoint32W

Sections

.text
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4854a4d8aeca1a6f1a6ecad1dafa6de

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

usbd.sys

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 128B - Virtual size: 100B

INIT Size: 672B - Virtual size: 642B

.rsrc Size: 960B - Virtual size: 952B

.reloc Size: 128B - Virtual size: 118B

2381c1ee5c1461ef217df28364930cee

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57Certificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5fCertificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73Certificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9Certificate

Extended Key Usages

Key Usages

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4fCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

78:d5:57:74:02:76:a2:28:c3:ba:37:bb:de:b1:2d:7e:64:c7:eb:3d:39:a7:bd:3a:06:7b:56:2a:61:7d:51:d6Signer

d7:17:48:ed:5d:88:d5:41:5c:37:22:a4:77:8c:82:43:0d:6c:84:67Signer

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

usbd.sys

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 768B - Virtual size: 676B

.pdata Size: 256B - Virtual size: 240B

INIT Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 952B

84541687f18e3ffb4f8fe04db5f18fde

Code Sign

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57Certificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5fCertificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73Certificate

Extended Key Usages

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 128B - Virtual size: 100B

INIT
Size: 672B - Virtual size: 642B

.rsrc
Size: 960B - Virtual size: 952B

.reloc
Size: 128B - Virtual size: 118B

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

78:d5:57:74:02:76:a2:28:c3:ba:37:bb:de:b1:2d:7e:64:c7:eb:3d:39:a7:bd:3a:06:7b:56:2a:61:7d:51:d6
Signer

d7:17:48:ed:5d:88:d5:41:5c:37:22:a4:77:8c:82:43:0d:6c:84:67
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 768B - Virtual size: 676B

.pdata
Size: 256B - Virtual size: 240B

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 952B

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

07:da:71:3b:27:da:28:a7:37:18:c6:b0:9d:c2:61:7e:8e:23:54:50:ef:11:ca:64:0d:d7:f4:89:1b:10:22:2a
Signer

be:5e:bd:40:f8:54:5d:71:98:6e:fd:32:80:63:7a:a8:51:0a:4d:3a
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 768B - Virtual size: 688B

.pdata
Size: 256B - Virtual size: 240B

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 952B

05:4a:ba:e2:d0:d4:b4:12:4a:8e:9f:32:01:3f:ce:57
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

0b:a2:25:57:5a:31:16:d1:e7:27:b0:b8:79:d1:d0:73
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

02:ce:42:94:59:02:a4:f3:c0:40:b0:ff:77:93:d1:4f
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

3e:58:48:66:65:a4:56:dc:bb:06:68:49:39:fe:bb:c9:5a:9b:f5:47:0a:55:84:d1:23:5b:ef:7b:06:6f:06:cc
Signer

df:02:03:ec:56:95:cd:8b:04:52:4b:0e:df:ca:49:54:03:52:e4:a4
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 768B - Virtual size: 688B

.pdata
Size: 256B - Virtual size: 240B

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 952B