Adobe[.]Photoshop[.]CS6[.]u3[.](RU-EN)[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Adobe.Photoshop.CS6.u3.(RU-EN).rar
Size

646.3MB
MD5

87d73b6b8e6d462df71042437c91a93a
SHA1

664ae792ed30c5c1bd5a4d3a6f50db819f54a029
SHA256

6f5e56af657724775d123fbef61bbc12c236786036774684a4d96faefa28c259
SHA512

bbc2598fba8be281ed558bd2ac98c52bab7d210cf2c56cd5b444182e6530f735390a66e42d13cce46ec9339fc169c7cde7b5c307f6d56c362dedb70d71cab70b
SSDEEP

12582912:71wb8wo7y2RQBc8kP5aq9z2g2bwoN7LImMKNpKXBJNvFrMC1xJu+uR:71cyy2ec8YxWbf7iGKHJFN43R

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Adobe.Photoshop.CS6.u3.(RU-EN)/Crack/3_Activation_Keygen.exe	upx
static1/unpack001/Adobe.Photoshop.CS6.u3.(RU-EN)/Crack/Alternative/Patch.exe	upx

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
unpack002/tools/7za.exe
unpack004/DE6/Setup.dll
unpack004/DE6/resources/libraries/AdobePIM.dll
unpack008/updatercore.dll
unpack009/Microsoft.VC90.CRT/msvcm90.dll
unpack001/Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2010 Redist (x86)/vcredist_x86.exe
unpack001/Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/AdobePIM.dll
unpack001/Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/updaterinventory.dll
unpack001/Adobe.Photoshop.CS6.u3.(RU-EN)/Crack/2_Serial_Keygen.exe
unpack001/Adobe.Photoshop.CS6.u3.(RU-EN)/Crack/3_Activation_Keygen.exe
unpack001/Adobe.Photoshop.CS6.u3.(RU-EN)/Crack/Alternative/Patch.exe
unpack001/Adobe.Photoshop.CS6.u3.(RU-EN)/Switch_Lang/AddLng_for_Photoshop_CS6.exe

Files

Adobe.Photoshop.CS6.u3.(RU-EN).rar
.rar
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/Deployment/en_US_Deployment.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/Deployment/en_US_Deployment_x64.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/Deployment/en_US_Hybrid_Deployment.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/Deployment/ru_RU_Deployment.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/Deployment/ru_RU_Deployment_x64.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/Deployment/ru_RU_Hybrid_Deployment.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/Set-up.exe
.exe windows:5 windows x86 arch:x86

59177801543f310d6d745297c6d1219d

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

02:0e:6d:11:17:db:f1:5b:3d:9a:2c:d0:4a:ed:ab:45:5f:4b:24:c5
Signer

Actual PE Digest

02:0e:6d:11:17:db:f1:5b:3d:9a:2c:d0:4a:ed:ab:45:5f:4b:24:c5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

none

Imports

comctl32

ImageList_GetIconSize
_TrackMouseEvent
InitCommonControlsEx
ord17

kernel32

QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
LCMapStringW
GetLocaleInfoA
EnumSystemLocalesA
FreeEnvironmentStringsW
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
OpenMutexW
InterlockedCompareExchange
CreateMutexW
WaitForSingleObject
CreateFileA
IsDBCSLeadByteEx
HeapCreate
SetHandleCount
GetStringTypeW
GetEnvironmentStringsW
GetModuleFileNameW
Sleep
ReleaseSemaphore
GetLastError
SetUnhandledExceptionFilter
VirtualQuery
CreateSemaphoreW
LocalAlloc
OpenSemaphoreW
GetSystemInfo
VirtualAlloc
HeapSize
HeapQueryInformation
ExitThread
ExitProcess
RaiseException
RtlUnwind
HeapReAlloc
GetStdHandle
GetSystemTimeAsFileTime
HeapFree
GetFileType
SetStdHandle
HeapAlloc
EncodePointer
DecodePointer
GetStartupInfoW
HeapSetInformation
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
InitializeCriticalSectionAndSpinCount
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesW
GetFileAttributesExW
SetErrorMode
GetNumberFormatW
GetWindowsDirectoryW
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
MoveFileW
lstrcmpiW
lstrcpyW
GetCurrentDirectoryW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetThreadLocale
lstrlenA
GlobalGetAtomNameW
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseActCtx
CreateActCtxW
GetTickCount
ResumeThread
SetThreadPriority
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GlobalSize
GlobalAlloc
FormatMessageW
lstrlenW
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
ActivateActCtx
DeactivateActCtx
FindNextFileW
FindClose
SetLastError
FlushFileBuffers
ReadFile
GetVersionExW
GetCurrentProcess
FindFirstFileW
GetFileSize
GetLocalTime
CreateFileW
GetTimeFormatW
WriteFile
CreateDirectoryW
GetDateFormatW
GetUserDefaultUILanguage
GetTempPathW
GetExitCodeProcess
CopyFileW
GetUserDefaultLangID
CreateProcessW
GetDriveTypeW
LockResource
SizeofResource
LoadResource
FindResourceW
CreateThread
SetFileAttributesW
DeleteFileW
RemoveDirectoryW
SetCurrentDirectoryW
CreateEventW
ResetEvent
GetProcAddress
IsValidLocale
ReleaseMutex
CloseHandle
GetCurrentProcessId
LocalFree
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
FreeLibrary
SetEvent
GetModuleHandleW
LoadLibraryW
FreeConsole

user32

wsprintfW
EnableWindow
SendMessageW
GetWindow
GetSystemMetrics
SetWindowLongW
EnableMenuItem
GetWindowLongW
LoadIconW
GetClientRect
DrawIcon
KillTimer
PostMessageW
LoadImageW
IsIconic
GetWindowRect
SetTimer
GetSystemMenu
GetDesktopWindow
ReleaseDC
GetDC
IsRectEmpty
DestroyIcon
IsWindowVisible
IsWindow
InvalidateRect
InflateRect
GetIconInfo
SetRectEmpty
LoadCursorW
GetParent
GetFocus
DrawIconEx
FillRect
SetCursor
CheckMenuItem
GetMenuState
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
MessageBoxW
IsWindowEnabled
GetLastActivePopup
GetWindowThreadProcessId
EndDialog
GetNextDlgTabItem
GetDlgItem
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
GetActiveWindow
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
ScreenToClient
ClientToScreen
GetWindowDC
TranslateAcceleratorW
EndPaint
GetSysColor
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
AppendMenuW
GetMenuStringW
SetWindowPos
GetMenu
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
GetWindowPlacement
SetWindowPlacement
PtInRect
ReuseDDElParam
UnpackDDElParam
GetKeyNameTextW
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
IsCharLowerW
MapVirtualKeyExW
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
DrawEdge
DrawStateW
SetClassLongW
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
CopyImage
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
GetAsyncKeyState
MapVirtualKeyW
CreatePopupMenu
GetMenuDefaultItem
RedrawWindow
UnregisterClassW
PostThreadMessageW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
CopyAcceleratorTableW
OffsetRect
CharNextW
CharUpperW
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
SetLayeredWindowAttributes
EnumDisplayMonitors
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
GetWindowRgn
DestroyCursor
SubtractRect
GetDoubleClickTime
CharUpperBuffW
CopyIcon
GetUpdateRect
FrameRect
BeginPaint
DeleteMenu
IntersectRect
GetSysColorBrush
RealChildWindowFromPoint
LoadMenuW
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
RegisterClipboardFormatW
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
InsertMenuItemW

advapi32

InitializeSecurityDescriptor
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

ole32

OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
IsAccelerator
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleLockRunning
DoDragDrop
CoCreateInstance
OleRun
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoInitialize
CoTaskMemFree
CoCreateGuid
StringFromGUID2
CoInitializeEx
OleInitialize
CLSIDFromProgID
CoUninitialize

shell32

ord680
CommandLineToArgvW
SHCreateDirectoryExW
SHGetFileInfoW
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetSpecialFolderLocation
DragFinish
DragQueryFileW
SHBrowseForFolderW
SHAppBarMessage
ShellExecuteW

oleaut32

VariantChangeType
SysAllocStringLen
SysFreeString
VariantInit
VariantClear
SysStringLen
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
GetErrorInfo

shlwapi

PathRemoveFileSpecW
StrRChrW
PathFileExistsW
PathRemoveBackslashW
PathIsNetworkPathW
PathGetDriveNumberW
PathIsRootW
PathIsDirectoryW
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathIsFileSpecW
PathAddExtensionW
PathAppendW
PathRenameExtensionW

gdi32

GetDeviceCaps
CreateSolidBrush
CreateRoundRectRgn
Rectangle
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
DeleteObject
CreateBitmap
CreateFontIndirectW
DeleteDC
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectW
GetObjectType
CreatePen
CreateHatchBrush
CopyMetaFileW
CreateDCW
GetTextExtentPoint32W
GetTextMetricsW
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetBkColor
GetTextColor
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateDIBSection
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
StretchBlt
SetPixel
OffsetRgn
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceW
GetStockObject

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCreateBitmapFromScan0
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipCloneImage
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/CCM/CCM.pima
.zip
CCMFlex.swf
CCMNative.dll
.dll windows:5 windows x86 arch:x86

df98a66831cae0ae4638a5db5fc98a1f

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:25:ea:a0:97:ff:09:fc:99:f8:43:a4:e0:54:62:0d:aa:17:f3:7b
Signer

Actual PE Digest

45:25:ea:a0:97:ff:09:fc:99:f8:43:a4:e0:54:62:0d:aa:17:f3:7b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\CCMNative.pdb

Imports

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHBrowseForFolderW
ord680
ShellExecuteExW
SHGetSpecialFolderPathW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW

shlwapi

PathIsFileSpecW
PathAddExtensionW
PathRenameExtensionW
PathFileExistsW
PathAppendW
PathRemoveBackslashW
PathStripPathW
PathIsDirectoryW
PathRemoveFileSpecW
PathIsNetworkPathW
PathRemoveExtensionW

winhttp

WinHttpOpen
WinHttpSetOption
WinHttpSetTimeouts
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpSendRequest
WinHttpConnect
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpSetCredentials

advapi32

CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptAcquireContextW
CryptGetHashParam
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExA
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
SetNamedSecurityInfoW
GetUserNameW

user32

GetSystemMetrics
SendMessageW
GetActiveWindow
wsprintfW

ole32

CoTaskMemFree
StringFromGUID2
CoCreateGuid
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleRun
CoUninitialize
CoInitialize
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx

oleaut32

GetErrorInfo
SysFreeString
VariantChangeType
VariantInit
VariantCopy
VariantClear
SysAllocString

kernel32

GetConsoleMode
GetConsoleCP
HeapSize
GetLocaleInfoW
GetEnvironmentStringsW
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetFileType
SetHandleCount
GetStdHandle
GetDiskFreeSpaceA
GetModuleFileNameA
EnumSystemLocalesA
GetTempPathA
IsValidLocale
AreFileApisANSI
DeleteFileA
SetStdHandle
WriteConsoleW
InterlockedCompareExchange
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
InterlockedExchange
GetStringTypeW
EncodePointer
GetUserDefaultLCID
FreeEnvironmentStringsW
TlsFree
GetModuleFileNameW
HeapDestroy
HeapCreate
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
LCMapStringW
HeapReAlloc
RaiseException
RtlUnwind
GetTimeZoneInformation
MoveFileW
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
LoadLibraryA
GetDiskFreeSpaceW
LockFileEx
GetFileAttributesA
GetSystemTimeAsFileTime
GetTickCount
LockFile
UnlockFile
QueryPerformanceCounter
CreateFileA
GetFullPathNameA
GetFullPathNameW
FormatMessageA
GetCurrentProcess
CopyFileW
GetFileAttributesW
lstrlenW
GetLastError
CloseHandle
LocalFree
lstrcpyW
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetDateFormatW
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
GetTempPathW
GetLocalTime
GetLocaleInfoA
EnumSystemLocalesW
GetModuleHandleW
GetProcAddress
GetUserDefaultUILanguage
FindFirstFileW
FreeLibrary
CreateProcessW
WaitForSingleObject
LoadLibraryW
GetExitCodeProcess
CreateNamedPipeW
FindClose
RemoveDirectoryW
FindNextFileW
DeleteFileW
SetFileAttributesW
lstrlenA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateThread
GetDriveTypeW
SetEvent
FormatMessageW
GetVersionExW
IsProcessorFeaturePresent
GlobalMemoryStatusEx
GetSystemInfo
OpenEventW
GetCurrentProcessId
GetSystemTime
Sleep
TerminateProcess
GetStartupInfoW
GetLongPathNameW
GetDiskFreeSpaceExW
TerminateThread
ResumeThread
GetFileSize
CreateMutexW
ReadFile
FlushFileBuffers
SetLastError
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreW
SetFilePointer
GetFileSizeEx
GetCurrentThreadId
OpenMutexW
SetEndOfFile
SetFilePointerEx
GlobalFree
ConnectNamedPipe
DecodePointer

Exports

Exports

finalizeApplet
freeMemory
initializeApplet
processMessage

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Utilities/AAMHelper.exe
.exe windows:5 windows x86 arch:x86

81472f9b8833a77d6790d8348edaf98f

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d7:34:9d:1f:29:64:bb:29:82:20:11:61:5d:cb:c2:04:43:4c:2d:25
Signer

Actual PE Digest

d7:34:9d:1f:29:64:bb:29:82:20:11:61:5d:cb:c2:04:43:4c:2d:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\AAMHelper.pdb

Imports

psapi

GetModuleFileNameExW

kernel32

GetTempPathW
GetLastError
GetProcAddress
CloseHandle
lstrlenA
InterlockedIncrement
InterlockedDecrement
GetSystemTimeAsFileTime
FileTimeToSystemTime
Sleep
WriteFile
InitializeCriticalSection
LeaveCriticalSection
ReadFile
CreateFileW
EnterCriticalSection
DeleteCriticalSection
CreateThread
SetFilePointer
GetFileSizeEx
GetCurrentThreadId
GetDateFormatW
GetTimeFormatW
GetLocalTime
CreateMutexW
OpenMutexW
ReleaseMutex
LocalAlloc
LocalFree
QueryPerformanceCounter
MultiByteToWideChar
GetModuleFileNameW
GetExitCodeProcess
LoadLibraryW
WideCharToMultiByte
OpenProcess
WaitForSingleObject
GetCurrentProcess
CreateProcessW
GetTickCount
SetEnvironmentVariableA
CompareStringW
GetCurrentProcessId
SetEndOfFile
CreateFileA
WriteConsoleW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapReAlloc
HeapCreate
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetLocaleInfoW
GetProcessHeap
HeapSize
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
HeapFree
HeapAlloc
GetModuleHandleW
ExitProcess
MoveFileW
GetTimeZoneInformation
RaiseException
GetCPInfo
RtlUnwind
LCMapStringW
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW

user32

wsprintfW

advapi32

CryptCreateHash
CryptHashData
CryptDestroyHash
OpenProcessToken
CryptReleaseContext
CryptAcquireContextW
CryptGetHashParam
AdjustTokenPrivileges
LookupPrivilegeValueW

shell32

SHCreateDirectoryExW
ord680

ole32

CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleRun
CoUninitialize
CoInitialize

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantClear
SysAllocString
GetErrorInfo

shlwapi

PathRenameExtensionW
PathAppendW
PathAddExtensionW
PathIsFileSpecW
PathRemoveExtensionW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW

crypt32

CertGetNameStringW

wintrust

WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WinVerifyTrust

Sections

.text
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Utilities/AdobeApplicationManager(URIHandler).exe
.exe windows:5 windows x86 arch:x86

7f7661479ffc548f81af994f698c9913

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

83:10:c8:28:48:0a:f5:04:e6:15:4e:f2:c2:80:1b:75:72:48:98:55
Signer

Actual PE Digest

83:10:c8:28:48:0a:f5:04:e6:15:4e:f2:c2:80:1b:75:72:48:98:55

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\AdobeApplicationManager(URIHandler).pdb

Imports

advapi32

OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW

shlwapi

PathAppendW
PathFileExistsW
PathIsFileSpecW
PathRemoveExtensionW
PathIsDirectoryW
PathAddExtensionW
PathRenameExtensionW
PathRemoveFileSpecW

shell32

SHGetSpecialFolderPathW
SHCreateDirectoryExW

wininet

InternetCanonicalizeUrlW

kernel32

SetEnvironmentVariableA
CompareStringW
GetProcessHeap
FreeLibrary
CreateProcessW
GetCurrentProcess
WaitForSingleObject
OpenProcess
WideCharToMultiByte
LoadLibraryW
GetExitCodeProcess
GetModuleFileNameW
MultiByteToWideChar
GetTempPathW
GetLastError
GetProcAddress
CloseHandle
DeleteFileW
SetFileAttributesW
lstrlenA
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetEnvironmentVariableW
GetCurrentProcessId
lstrlenW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetFilePointer
WriteFile
CreateFileW
GetFileSizeEx
GetCurrentThreadId
GetDateFormatW
GetTimeFormatW
GetLocalTime
CreateMutexW
OpenMutexW
ReleaseMutex
LocalFree
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
Sleep
GetCommandLineW
HeapSetInformation
HeapFree
HeapAlloc
GetFileAttributesW
GetSystemTimeAsFileTime
MoveFileW
GetTimeZoneInformation
RaiseException
GetCPInfo
RtlUnwind
LCMapStringW
SetUnhandledExceptionFilter
ExitProcess
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
HeapCreate
GetTickCount
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapSize
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleW
CreateFileA
SetEndOfFile

ole32

StringFromGUID2
CoCreateGuid
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleRun
CoUninitialize
CoInitialize

oleaut32

GetErrorInfo
SysFreeString
VariantInit
VariantCopy
VariantClear
SysAllocString

Sections

.text
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Utilities/AdobeApplicationManager.exe
.exe windows:5 windows x86 arch:x86

87d12e7e0dfe16969ffabdb2c6f695e3

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4f:35:69:40:22:51:9e:62:02:3d:23:0d:e3:80:d8:49:49:00:64:91
Signer

Actual PE Digest

4f:35:69:40:22:51:9e:62:02:3d:23:0d:e3:80:d8:49:49:00:64:91

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\LBS\AdobeApplicationManager.pdb

Imports

shell32

SHCreateDirectoryExW
ShellExecuteExW
ord680
ShellExecuteW
CommandLineToArgvW
SHGetSpecialFolderPathW

shlwapi

PathStripPathW
PathIsNetworkPathW
PathIsFileSpecW
PathAddExtensionW
PathAppendW
PathRenameExtensionW
PathRemoveExtensionW
PathFileExistsW
PathRemoveFileSpecW
PathIsDirectoryW

winhttp

WinHttpCloseHandle
WinHttpOpen
WinHttpSetOption
WinHttpSetTimeouts
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpSetCredentials
WinHttpSendRequest
WinHttpConnect
WinHttpQueryHeaders
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryAuthSchemes

comctl32

ord17

kernel32

GetProcessHeap
CompareStringW
SetStdHandle
IsDBCSLeadByteEx
SetEnvironmentVariableA
WriteConsoleW
IsValidLocale
GetLocaleInfoA
EnumSystemLocalesW
GetModuleHandleW
GetACP
GetProcAddress
GetUserDefaultUILanguage
MultiByteToWideChar
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetLastError
CloseHandle
DosDateTimeToFileTime
CreateFileA
SetFileTime
GetFileAttributesA
FlushFileBuffers
GetFileTime
LocalFileTimeToFileTime
FindFirstFileW
FreeLibrary
CreateProcessW
GetCurrentProcess
WaitForSingleObject
WideCharToMultiByte
LoadLibraryW
GetExitCodeProcess
GetModuleFileNameW
GetTempPathW
FindClose
RemoveDirectoryW
FindNextFileW
DeleteFileW
SetFileAttributesW
lstrlenA
InterlockedIncrement
InterlockedDecrement
CreateMutexW
Sleep
ReleaseSemaphore
CreateSemaphoreW
LocalAlloc
OpenSemaphoreW
ReleaseMutex
GetCurrentProcessId
LocalFree
GetVersionExW
GetSystemTime
FindResourceW
LoadResource
SizeofResource
LockResource
TerminateThread
ResumeThread
CreateThread
SetEndOfFile
SetFilePointerEx
GetFileAttributesW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetFileSizeEx
GlobalFree
GetDateFormatW
GetTimeFormatW
GetLocalTime
OpenMutexW
GetFileSize
SetLastError
CreateDirectoryW
GetFullPathNameW
GetFullPathNameA
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
LockFileEx
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
GetCurrentThreadId
GetTempPathA
AreFileApisANSI
DeleteFileA
ConnectNamedPipe
CreateNamedPipeW
GetStringTypeW
EnumSystemLocalesA
InterlockedExchange
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
ExitProcess
HeapFree
HeapAlloc
RtlUnwind
RaiseException
MoveFileW
GetTimeZoneInformation
HeapReAlloc
LCMapStringW
GetCPInfo
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
HeapCreate
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetOEMCP
IsValidCodePage
GetLocaleInfoW
HeapSize
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
InterlockedCompareExchange

user32

LoadAcceleratorsW
DispatchMessageW
TranslateMessage
wsprintfW
GetMessageW
GetWindowTextLengthW
GetSystemMenu
LoadImageW
PostMessageW
DialogBoxParamW
EnableMenuItem
GetDlgItem
EndDialog
SendDlgItemMessageW
ShowWindow
TranslateAcceleratorW
MessageBoxW
GetDlgItemTextW
SendMessageW
EnableWindow
SetWindowTextW

advapi32

RegQueryValueExA
RegOpenKeyExW
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
CryptCreateHash
GetUserNameW
CryptHashData
CryptDestroyHash

ole32

StringFromGUID2
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize
CoInitialize
OleRun
CLSIDFromString
CLSIDFromProgID

oleaut32

SysAllocString
SysStringLen
VariantClear
VariantCopy
VariantInit
SysFreeString
GetErrorInfo

Sections

.text
Size: 925KB - Virtual size: 925KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 790KB - Virtual size: 789KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Utilities/npAdobeAAMDetect32.dll
.dll regsvr32 windows:5 windows x86 arch:x86

c30471c98f9d7fb90393d68e884a73a2

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a5:f6:56:77:26:4f:e6:60:56:8c:0c:9a:bd:c7:e1:a2:18:14:67:b1
Signer

Actual PE Digest

a5:f6:56:77:26:4f:e6:60:56:8c:0c:9a:bd:c7:e1:a2:18:14:67:b1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TlsFree
GetSystemTimeAsFileTime
ReleaseSemaphore
lstrlenW
MultiByteToWideChar
lstrlenA
FreeLibrary
GetProcAddress
GetModuleHandleW
lstrcmpiW
RaiseException
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
MulDiv
FlushInstructionCache
SetLastError
DuplicateHandle
CreateSemaphoreA
GetTickCount
GetProcessHeap
HeapFree
WaitForMultipleObjects
SetWaitableTimer
TlsGetValue
SystemTimeToFileTime
TlsSetValue
OpenEventA
HeapAlloc
ResetEvent
GetCurrentProcessId
Sleep
CreateWaitableTimerW
FormatMessageA
TlsAlloc
WideCharToMultiByte
InterlockedCompareExchange
GetStringTypeW
InitializeCriticalSection
EncodePointer
DecodePointer
GetCommandLineA
RtlUnwind
LCMapStringW
GetCPInfo
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetLocaleInfoW
SetHandleCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
InterlockedPushEntrySList
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
GetLastError
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
GlobalFree
GlobalAlloc
lstrcpyA
GetThreadLocale
SetThreadLocale
SetEvent
WaitForSingleObject
CloseHandle
CreateEventA
LocalFree
GetCurrentThreadId

ws2_32

WSAStartup
WSACleanup

user32

EndPaint
BeginPaint
ReleaseDC
UnionRect
IntersectRect
OffsetRect
RegisterClassExW
GetDC
GetClassInfoExW
PtInRect
GetClientRect
SetCursor
LoadCursorW
DefWindowProcW
InvalidateRect
GetWindowRect
CharNextW
CallWindowProcW
EqualRect
CreateWindowExW
IsWindow
ShowWindow
SetFocus
GetKeyState
GetWindowLongW
SetWindowLongW
GetFocus
IsChild
SetWindowRgn
SetWindowPos
DestroyWindow
PostMessageW
UnregisterClassA

gdi32

SetViewportOrgEx
LPtoDP
DeleteDC
GetDeviceCaps
CreateDCW
CreateRectRgnIndirect
SetMapMode
SaveDC
RestoreDC
SetWindowOrgEx
SetTextAlign
TextOutW

ole32

CoTaskMemFree
CoCreateInstance
OleRegGetMiscStatus
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
CoTaskMemAlloc
StringFromGUID2
CoTaskMemRealloc

oleaut32

LoadTypeLi
VarUI4FromStr
UnRegisterTypeLi
RegisterTypeLi
SysStringByteLen
SysAllocStringByteLen
SafeArrayCreate
SafeArrayRedim
SafeArrayDestroy
SafeArrayLock
VariantCopyInd
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCopy
SafeArrayGetVartype
SafeArrayUnlock
VariantCopy
VariantChangeType
OleCreatePropertyFrame
VariantInit
SysAllocStringLen
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString

advapi32

RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryInfoKeyW

wininet

InternetQueryOptionW

urlmon

IsValidURL
CreateAsyncBindCtx
CreateURLMonikerEx

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 816KB - Virtual size: 815KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Utilities/npAdobeAAMDetect64.dll
.dll regsvr32 windows:5 windows x64 arch:x64

dff1d4639dbc794c8ab111e79e052f0e

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:2f:73:09:55:51:de:e0:68:d3:52:a9:d3:8e:bd:a4:f0:ba:54:40
Signer

Actual PE Digest

27:2f:73:09:55:51:de:e0:68:d3:52:a9:d3:8e:bd:a4:f0:ba:54:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
lstrlenA
FreeLibrary
GetProcAddress
GetModuleHandleW
lstrcmpiW
RaiseException
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
MulDiv
FlushInstructionCache
SetLastError
DuplicateHandle
CreateSemaphoreA
GetTickCount
GetProcessHeap
HeapFree
WaitForMultipleObjects
SetWaitableTimer
TlsGetValue
SystemTimeToFileTime
TlsSetValue
OpenEventA
HeapAlloc
ResetEvent
GetCurrentProcessId
Sleep
CreateWaitableTimerW
FormatMessageA
LocalFree
WideCharToMultiByte
GetStringTypeW
InitializeCriticalSection
EncodePointer
DecodePointer
lstrlenW
GetCommandLineA
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
LCMapStringW
GetCPInfo
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetLocaleInfoW
FlsGetValue
FlsFree
FlsAlloc
SetHandleCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
InterlockedPushEntrySList
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
ReleaseSemaphore
GetSystemTimeAsFileTime
TlsFree
TlsAlloc
GetLastError
GlobalFree
GlobalAlloc
lstrcpyA
GetThreadLocale
SetThreadLocale
SetEvent
WaitForSingleObject
CloseHandle
CreateEventA
FlsSetValue
GetCurrentThreadId

ws2_32

WSAStartup
WSACleanup

user32

EndPaint
BeginPaint
ReleaseDC
UnionRect
IntersectRect
OffsetRect
RegisterClassExW
GetDC
GetClassInfoExW
PtInRect
GetClientRect
SetCursor
LoadCursorW
DefWindowProcW
InvalidateRect
GetWindowRect
CharNextW
CallWindowProcW
EqualRect
CreateWindowExW
IsWindow
ShowWindow
SetFocus
GetKeyState
GetWindowLongPtrW
SetWindowLongPtrW
GetFocus
IsChild
SetWindowRgn
SetWindowPos
DestroyWindow
PostMessageW
UnregisterClassA

gdi32

SetViewportOrgEx
LPtoDP
DeleteDC
GetDeviceCaps
CreateDCW
CreateRectRgnIndirect
SetMapMode
SaveDC
RestoreDC
SetWindowOrgEx
SetTextAlign
TextOutW

ole32

CoTaskMemFree
CoCreateInstance
OleRegGetMiscStatus
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
CoTaskMemAlloc
StringFromGUID2
CoTaskMemRealloc

oleaut32

LoadTypeLi
VarUI4FromStr
UnRegisterTypeLi
RegisterTypeLi
SysStringByteLen
SysAllocStringByteLen
SafeArrayCreate
SafeArrayRedim
SafeArrayDestroy
SafeArrayLock
VariantCopyInd
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCopy
SafeArrayGetVartype
SafeArrayUnlock
VariantCopy
VariantChangeType
OleCreatePropertyFrame
VariantInit
SysAllocStringLen
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
SysFreeString

advapi32

RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryInfoKeyW

wininet

InternetQueryOptionW

urlmon

IsValidURL
CreateAsyncBindCtx
CreateURLMonikerEx

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 938KB - Virtual size: 937KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZStringResources/FontCustomization.xml
.xml
ZStringResources/cs_CZ/stringtable.xml
.vbs .xml polyglot
ZStringResources/da_DK/stringtable.xml
.vbs .xml polyglot
ZStringResources/de_DE/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_AE/stringtable.xml
.vbs .xml
ZStringResources/en_GB/stringtable.xml
.vbs .xml
ZStringResources/en_IL/stringtable.xml
.vbs .xml
ZStringResources/en_US/stringtable.xml
.vbs .xml
ZStringResources/en_XM/stringtable.xml
.vbs .xml
ZStringResources/es_ES/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_LA/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_MX/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_NA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fi_FI/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_CA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_FR/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_MA/stringtable.xml
.vbs .xml
ZStringResources/fr_XM/stringtable.xml
.vbs .xml polyglot
ZStringResources/hu_HU/stringtable.xml
.vbs .xml
ZStringResources/it_IT/stringtable.xml
.vbs .xml polyglot
ZStringResources/ja_JP/stringtable.xml
.vbs .xml polyglot
ZStringResources/ko_KR/stringtable.xml
.vbs .xml polyglot
ZStringResources/nb_NO/stringtable.xml
.vbs .xml polyglot
ZStringResources/nl_NL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pl_PL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pt_BR/stringtable.xml
.vbs .xml polyglot
ZStringResources/ru_RU/stringtable.xml
.vbs .xml polyglot
ZStringResources/sv_SE/stringtable.xml
.vbs .xml polyglot
ZStringResources/tr_TR/stringtable.xml
.vbs .xml polyglot
ZStringResources/uk_UA/stringtable.xml
.vbs .xml
ZStringResources/zh_CN/stringtable.xml
.vbs .xml polyglot
ZStringResources/zh_TW/stringtable.xml
.vbs .xml polyglot
assets/EULA/EULAVersion.xml
assets/EULA/cs_CZ/license.html
assets/EULA/da_DK/license.html
assets/EULA/de_DE/license.html
assets/EULA/en_AE/license.html
assets/EULA/en_GB/license.html
assets/EULA/en_IL/license.html
assets/EULA/en_US/license.html
assets/EULA/es_ES/license.html
assets/EULA/es_MX/license.html
assets/EULA/fi_FI/license.html
assets/EULA/fr_CA/license.html
assets/EULA/fr_FR/license.html
assets/EULA/fr_MA/license.html
assets/EULA/hu_HU/license.html
assets/EULA/it_IT/license.html
assets/EULA/ja_JP/license.html
assets/EULA/ko_KR/license.html
assets/EULA/nb_NO/license.html
assets/EULA/nl_NL/license.html
assets/EULA/pl_PL/license.html
assets/EULA/pt_BR/license.html
assets/EULA/ru_RU/license.html
assets/EULA/sk_SK/license.html
assets/EULA/sl_SI/license.html
assets/EULA/sv_SE/license.html
assets/EULA/tr_TR/license.html
assets/EULA/uk_UA/license.html
assets/EULA/zh_CN/license.html
assets/EULA/zh_TW/license.html
assets/logo.png
.png
tools/7za.exe
.exe windows:4 windows x86 arch:x86

15847eb10d7d06dcd5980e8a9b786fd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocString
SysAllocStringByteLen
VariantClear
VariantCopy
SysFreeString

user32

CharLowerA
CharUpperA
CharLowerW
CharPrevExA
CharNextA
CharUpperW

kernel32

SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetConsoleCtrlHandler
FileTimeToLocalFileTime
GetCommandLineW
SetFileApisToOEM
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
SetConsoleMode
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
GetWindowsDirectoryW
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
SetFileAttributesW
RemoveDirectoryW
MoveFileW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
lstrlenA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathA
SearchPathW
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
CreateFileA
GetFileSize
SetFilePointer
DeviceIoControl
ReadFile
WriteFile
GetCurrentProcess
GetProcAddress
CompareFileTime
FileTimeToSystemTime
GetSystemInfo
GlobalMemoryStatus
GetModuleHandleA
DosDateTimeToFileTime
FileTimeToDosDateTime
SystemTimeToFileTime
GetSystemTime
WaitForMultipleObjects
OpenEventA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetTickCount
GetProcessTimes
LocalFileTimeToFileTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
RtlUnwind
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
ExitProcess
TlsAlloc
SetUnhandledExceptionFilter
TerminateProcess
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
SetHandleCount
GetFileType
GetStartupInfoA
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetCPInfo
GetACP
GetOEMCP

Sections

.text
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/CCM/CCM.pimx
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/CCM/CCM.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/D6/D6.pima
.zip
D6Flex.swf
D6Native.dll
.dll windows:5 windows x86 arch:x86

edade48c9afa5a25996a1b3ca0793976

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

63:52:6e:84:5f:3c:2f:d1:5e:a7:eb:87:67:83:2d:34:7b:0b:98:1d
Signer

Actual PE Digest

63:52:6e:84:5f:3c:2f:d1:5e:a7:eb:87:67:83:2d:34:7b:0b:98:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\3.2\c3p0\dev\target\win\Release\D6Native.pdb

Imports

shlwapi

PathFileExistsW
PathStripPathW
PathIsNetworkPathW
PathRemoveBackslashW
PathRemoveFileSpecW
PathIsDirectoryW
PathAppendW

kernel32

CloseHandle
GetCurrentProcessId
LocalFree
GetDateFormatW
SetFilePointer
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLocalTime
GetFileSize
FindFirstFileW
CreateProcessW
SetEvent
WideCharToMultiByte
GetExitCodeProcess
ReadFile
GetModuleFileNameW
FlushFileBuffers
SetLastError
FindClose
RemoveDirectoryW
FindNextFileW
DeleteFileW
lstrlenA
InterlockedIncrement
InterlockedDecrement
lstrcpyW
OpenFile
GetDriveTypeW
GetCurrentProcess
GetModuleHandleW
FormatMessageW
GetVersionExW
IsProcessorFeaturePresent
GetProcAddress
GlobalMemoryStatusEx
GetSystemInfo
GetDiskFreeSpaceExW
CreateThread
ExitProcess
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetEndOfFile
FreeLibrary
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LoadLibraryW
LeaveCriticalSection
GetFileAttributesA
GetFileAttributesW
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
ConnectNamedPipe
CreateNamedPipeW
GetOEMCP
CopyFileW
lstrlenW
GetACP
HeapSize
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
CompareStringW
CreateSemaphoreW
GetLastError
ReleaseSemaphore
Sleep
WaitForSingleObject
GetConsoleCP
GetConsoleMode
GetCPInfo
OpenEventW
SetFileAttributesW
GetModuleFileNameA
GetStartupInfoW
GetFileType
SetHandleCount
GetTimeZoneInformation
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
HeapDestroy
GetProcessHeap
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
IsValidCodePage
HeapCreate
GetStdHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
GetCommandLineA
HeapReAlloc
HeapFree
DecodePointer
EncodePointer
HeapAlloc

user32

SendMessageW
GetActiveWindow
GetSystemMetrics
wsprintfW

advapi32

RegOpenKeyExW
RegQueryValueExW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid

shell32

SHGetFolderLocation
SHGetFolderPathW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteExW
SHBrowseForFolderW
SHGetSpecialFolderPathW
ord680
SHCreateDirectoryExW

ole32

CLSIDFromProgID
StringFromGUID2
CLSIDFromString
OleRun
CoInitialize
CoTaskMemFree
CoCreateGuid
CoCreateInstance

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantClear
SysAllocString
GetErrorInfo

Exports

Exports

finalizeApplet
freeMemory
initializeApplet
processMessage

Sections

.text
Size: 554KB - Virtual size: 553KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Setup.exe
.exe windows:5 windows x86 arch:x86

9f4ff423a447ada46dd9fbac63bf339d

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:45:8e:23:d3:08:9c:7d:fa:e0:bf:39:b4:35:51:c1:4d:cf:0f:60
Signer

Actual PE Digest

2e:45:8e:23:d3:08:9c:7d:fa:e0:bf:39:b4:35:51:c1:4d:cf:0f:60

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Oberibsrel52\build\releases\build\Redirector\vc10\Release\Setup.pdb

Imports

shlwapi

PathRemoveFileSpecW

kernel32

TerminateProcess
FreeConsole
GetConsoleWindow
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetModuleFileNameW
GetStdHandle
AttachConsole
CreateFileW
WriteConsoleW
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLastError
GetFileType
GetCommandLineW
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
HeapAlloc
HeapFree
EncodePointer
DecodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
SetHandleCount
DeleteCriticalSection
ExitProcess
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer

user32

SendMessageW

shell32

CommandLineToArgvW

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TokenGenerator64.exe
.exe windows:5 windows x64 arch:x64

345802f1cbdddb2d106040d8a087dc9f

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3b:03:09:ab:3e:ae:ce:e1:be:a6:a0:6c:50:b7:53:63:21:fc:74:52
Signer

Actual PE Digest

3b:03:09:ab:3e:ae:ce:e1:be:a6:a0:6c:50:b7:53:63:21:fc:74:52

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\oobe\3.2\c3p0\dev\target\win\Release\TokenGenerator64.pdb

Imports

kernel32

CloseHandle
GetCurrentProcessId
LocalFree
GetDateFormatW
SetFilePointer
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLocalTime
GetCommandLineW
WideCharToMultiByte
GetModuleFileNameW
FlushFileBuffers
SetLastError
lstrlenA
GetConsoleMode
GetConsoleCP
CreateSemaphoreW
GetLastError
ReleaseSemaphore
Sleep
WaitForSingleObject
GetStringTypeW
LCMapStringW
WriteConsoleW
HeapReAlloc
SetStdHandle
HeapSize
LoadLibraryW
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetStartupInfoW
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStdHandle
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
HeapSetInformation
GetVersion
HeapCreate
GetProcAddress
GetModuleHandleW
ExitProcess
FlsGetValue
FlsSetValue
FlsFree
GetCurrentThreadId
FlsAlloc
FreeEnvironmentStringsW
GetCPInfo

user32

wsprintfW

shell32

SHGetSpecialFolderPathW
CommandLineToArgvW

ole32

CLSIDFromProgID
CLSIDFromString
OleRun
CoCreateInstance
CoInitialize

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantClear
SysAllocString
GetErrorInfo

shlwapi

PathFileExistsW

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZStringResources/FontCustomization.xml
.xml
ZStringResources/cs_CZ/stringtable.xml
.vbs .xml polyglot
ZStringResources/da_DK/stringtable.xml
.vbs .xml polyglot
ZStringResources/de_DE/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_AE/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_GB/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_IL/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_US/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_XM/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_ES/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_LA/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_MX/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_NA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fi_FI/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_CA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_FR/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_MA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_XM/stringtable.xml
.vbs .xml polyglot
ZStringResources/hu_HU/stringtable.xml
.vbs .xml polyglot
ZStringResources/it_IT/stringtable.xml
.vbs .xml polyglot
ZStringResources/ja_JP/stringtable.xml
.vbs .xml polyglot
ZStringResources/ko_KR/stringtable.xml
.vbs .xml polyglot
ZStringResources/nb_NO/stringtable.xml
.vbs .xml polyglot
ZStringResources/nl_NL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pl_PL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pt_BR/stringtable.xml
.vbs .xml polyglot
ZStringResources/ru_RU/stringtable.xml
.vbs .xml polyglot
ZStringResources/sv_SE/stringtable.xml
.vbs .xml polyglot
ZStringResources/tr_TR/stringtable.xml
.vbs .xml polyglot
ZStringResources/uk_UA/stringtable.xml
.vbs .xml polyglot
ZStringResources/zh_CN/stringtable.xml
.vbs .xml polyglot
ZStringResources/zh_TW/stringtable.xml
.vbs .xml polyglot
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/D6/D6.pimx
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/D6/D6.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/DECore/DECore.pima
.zip
ARKSelector.dll
.dll windows:5 windows x86 arch:x86

4b65923d9f9de339932c692720051a79

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

36:4f:fe:a1:42:ac:bf:48:cd:59:97:2b:12:88:c5:34:06:91:8d:a0
Signer

Actual PE Digest

36:4f:fe:a1:42:ac:bf:48:cd:59:97:2b:12:88:c5:34:06:91:8d:a0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Oberibsrel52\build\releases\build\ARKSelector\vc10\Release\ARKSelector.pdb

Imports

kernel32

GetLastError
GetCurrentDirectoryW
LocalAlloc
LocalFree
GetCurrentProcess
MultiByteToWideChar
GetModuleFileNameW
DecodePointer
InterlockedExchange
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
TerminateProcess
EncodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

advapi32

GetNamedSecurityInfoW
SetNamedSecurityInfoW
CreateWellKnownSid
SetEntriesInAclW

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

msvcr100

??2@YAPAXI@Z
wcscpy_s
free
??3@YAXPAX@Z
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
memmove
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
memcpy
_CxxThrowException
__CxxFrameHandler3
?what@exception@std@@UBEPBDXZ
memset

shlwapi

PathStripPathW
PathRemoveBackslashW
PathFileExistsW

Exports

Exports

ARKSelectorGetResourcePath

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/Setup.dll
.dll windows:5 windows x86 arch:x86

7c69b051d98b3abdf73715d9b1355ee7

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ae:e5:44:64:3d:32:69:bd:58:7e:d6:1f:24:8d:b9:de:1e:e3:a4:00
Signer

Actual PE Digest

ae:e5:44:64:3d:32:69:bd:58:7e:d6:1f:24:8d:b9:de:1e:e3:a4:00

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Oberibsreldev5\build\releases\build\Ahmbed\vc10\obj\Release\bin\Setup.pdb

Imports

mpr

WNetCancelConnection2W
WNetAddConnection2W

kernel32

GetTempPathW
GetCurrentDirectoryW
FindClose
LocalAlloc
SetCurrentDirectoryW
RemoveDirectoryW
FindNextFileW
GetDiskFreeSpaceExW
DeleteFileW
LocalFree
lstrcpyW
SetFileAttributesW
GetVolumeInformationW
FindResourceExW
LoadResource
LockResource
GetUserDefaultUILanguage
ReleaseMutex
CreateProcessW
GetCurrentProcess
GetUserDefaultLangID
OpenProcess
Thread32First
GetExitCodeProcess
Thread32Next
Process32FirstW
QueryDosDeviceW
Module32FirstW
Process32NextW
CreateToolhelp32Snapshot
Module32NextW
GetTempFileNameW
GetThreadLocale
IsProcessorFeaturePresent
GlobalMemoryStatusEx
GetCurrentThread
GetTickCount
Sleep
InterlockedDecrement
lstrcatW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcessHeap
HeapAlloc
HeapFree
ReleaseSemaphore
GetSystemTimeAsFileTime
DuplicateHandle
CreateSemaphoreA
CreateFileA
InterlockedCompareExchange
InterlockedExchange
GetUserDefaultLCID
GetStringTypeExA
LCMapStringA
lstrlenW
SetFilePointer
SetFilePointerEx
GetCurrentThreadId
SystemTimeToFileTime
GetVersionExA
AreFileApisANSI
SetEndOfFile
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
GetCurrentProcessId
LockFileEx
InterlockedIncrement
GetTempPathA
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
ConnectNamedPipe
CreateNamedPipeW
GetModuleHandleA
HeapReAlloc
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
DecodePointer
EncodePointer
CreateWaitableTimerA
SetWaitableTimer
WaitForMultipleObjects
ResumeThread
TlsSetValue
ResetEvent
OpenEventA
TlsGetValue
TlsFree
lstrcmpW
GetModuleFileNameW
ReadFile
GetFileAttributesW
FormatMessageW
SetErrorMode
GetDriveTypeW
FindFirstFileW
GetFileSize
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetVersionExW
GetSystemTime
GetLastError
WaitForSingleObject
CreateMutexW
FlushFileBuffers
CreateFileW
CopyFileW
WriteFile
CloseHandle
DeleteCriticalSection
GetProcAddress
SetLastError
GetStdHandle
RaiseException
SetEvent
CreateEventA
GetConsoleWindow
FreeConsole
LoadLibraryW
TlsAlloc
GetModuleHandleW
FreeLibrary
LoadLibraryA

user32

LoadStringA
SendMessageW
EnumThreadWindows
GetWindowTextW
GetWindowTextLengthW
GetSystemMetrics
PostMessageW

advapi32

OpenThreadToken
RegCreateKeyExW
DeregisterEventSource
ReportEventW
RegCloseKey
GetLengthSid
IsValidSecurityDescriptor
FreeSid
RevertToSelf
AddAccessAllowedAce
SetSecurityDescriptorOwner
AllocateAndInitializeSid
InitializeAcl
ImpersonateSelf
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
AccessCheck
SetSecurityDescriptorGroup
RegisterEventSourceW
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CreateWellKnownSid
RegOpenKeyExW
RegDeleteKeyW
RegSetValueExW

shell32

SHCreateDirectoryExW
SHGetPathFromIDListW
SHGetFolderLocation
ord165
ord75
SHGetFolderPathW

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromProgID
CoTaskMemFree
OleInitialize
OleUninitialize
CoInitializeEx

oleaut32

SysStringLen
SysFreeString
SysAllocString
VariantClear
VariantCopy
VariantInit

atl100

ord31
ord30

shlwapi

PathAppendW
PathIsFileSpecW
PathFileExistsW
PathRemoveFileSpecW
PathStripPathW
PathRemoveBackslashW
PathIsRootW
PathFindFileNameW
PathIsUNCW
PathMakePrettyW
PathStripToRootW
PathGetCharTypeW
PathIsRelativeW
PathAddBackslashW

msvcp100

??1_Container_base12@std@@QAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
??1facet@locale@std@@UAE@XZ
??0facet@locale@std@@IAE@I@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?exceptions@ios_base@std@@QAEXH@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

ws2_32

WSAStartup
WSACleanup

msvcr100

memset
memcmp
strcmp
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_vsnprintf_s
_onexit
_lock
strcpy
__CxxFrameHandler3
_CxxThrowException
memcpy
strlen
ftell
fwrite
__dllonexit
_unlock
?terminate@@YAXXZ
_beginthreadex
wcschr
wcsncat_s
_waccess_s
_wfullpath
_wgetcwd
sscanf_s
_snprintf_s
strncpy_s
strncmp
realloc
??3@YAXPAX@Z
wcsncpy_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
memmove
free
__iob_func
setvbuf
??_V@YAXPAX@Z
strcpy_s
_purecall
_open_osfhandle
??2@YAPAXI@Z
_fdopen
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
_vsnwprintf_s
swprintf_s
_wsplitpath_s
_wstat64i32
_snwprintf_s
rand
srand
_time64
calloc
_wcsicmp
malloc
wcscpy_s
_wcsnicmp
printf
memchr
atoi
strstr
sprintf_s
_wfopen_s
fwprintf
fclose
_stricmp
_localtime64_s
strftime
toupper
_gmtime64
tolower
ferror
asctime_s
_close
fputc
sprintf
_errno
fopen
fread
fprintf
wcslen

psapi

EnumProcessModules
GetModuleBaseNameW

Exports

Exports

DeploymentEngineMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/resources/libraries/ARKCmdCaps.dll
.dll windows:5 windows x86 arch:x86

b8f86a01e33df8feb04420073a0eac52

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d0:50:a5:ec:02:6a:2a:f0:04:c3:27:5e:e5:e0:f8:ca:6e:40:43:bc
Signer

Actual PE Digest

d0:50:a5:ec:02:6a:2a:f0:04:c3:27:5e:e5:e0:f8:ca:6e:40:43:bc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Oberibsreldev5\build\releases\build\ARKCmdCaps\vc10\Release\ARKCmdCaps.pdb

Imports

ole32

CoTaskMemFree

advapi32

GetNamedSecurityInfoW
FreeSid
SetNamedSecurityInfoW
SetEntriesInAclW
AllocateAndInitializeSid

shlwapi

PathAppendW
PathRemoveBackslashW
PathStripPathW
PathFileExistsW

shell32

SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW

kernel32

EncodePointer
DecodePointer
WideCharToMultiByte
MultiByteToWideChar
GetLastError
CloseHandle
LocalFree
GetCurrentProcess
GetFileAttributesW
FlushFileBuffers
CreateFileW
lstrlenW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
InterlockedExchange
Sleep
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
GetFileSize
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
DeleteFileW
LoadLibraryA
LoadLibraryW
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
DeleteCriticalSection
LockFileEx
InterlockedIncrement
InitializeCriticalSection
GetTempPathA
GetTempPathW
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
IsProcessorFeaturePresent
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
AreFileApisANSI

arkengine

?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
??0ARKCommand@@QAE@AAVLogAppender@@@Z
??1ARKCommand@@UAE@XZ
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

msvcr100

_except_handler4_common
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
??3@YAXPAX@Z
??2@YAPAXI@Z
_time64
strcmp
strlen
memcpy
_CxxThrowException
__CxxFrameHandler3
strcpy
atoi
strstr
free
malloc
wcslen
memset
?_type_info_dtor_internal_method@type_info@@QAEXXZ
wcscpy_s
_localtime64_s
realloc
memcmp
strncmp
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
__clean_type_info_names_internal

Exports

Exports

GetCommandObject

Sections

.text
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/resources/libraries/ARKCmdDefrag.dll
.dll windows:5 windows x86 arch:x86

44415ce685498c53bcf991d6867d8f54

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7f:29:25:7a:ac:3c:48:c8:fe:e1:69:3f:f2:aa:1f:2d:45:1c:6d:db
Signer

Actual PE Digest

7f:29:25:7a:ac:3c:48:c8:fe:e1:69:3f:f2:aa:1f:2d:45:1c:6d:db

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Oberibsreldev5\build\releases\build\ARKCmdDefrag\vc10\Release\ARKCmdDefrag.pdb

Imports

kernel32

GetTickCount
GetCurrentProcessId
GetCurrentThreadId
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetVersionExW
CloseHandle
CreateFileW
GetLastError
DeviceIoControl
MultiByteToWideChar
QueryPerformanceCounter
WideCharToMultiByte
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

ole32

CoUninitialize
CoInitialize

arkengine

?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
??0ARKCommand@@QAE@AAVLogAppender@@@Z
??1ARKCommand@@UAE@XZ
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z

msvcp100

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?ends@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_7ios_base@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
?_Decref@facet@locale@std@@QAEPAV123@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z

msvcr100

memcpy
_CxxThrowException
__CxxFrameHandler3
memset
??_V@YAXPAX@Z
_wstat64i32
_wsplitpath
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
?terminate@@YAXXZ
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
??2@YAPAXI@Z
??3@YAXPAX@Z
memmove
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_purecall

Exports

Exports

GetCommandObject

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/resources/libraries/ARKCmdFS.dll
.dll windows:5 windows x86 arch:x86

fa2d91fde78ee1ec37284e3a01c9f6a2

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:9d:b3:b0:d5:f7:0a:16:ab:5e:7a:7b:44:f4:b2:92:d9:c0:69:65
Signer

Actual PE Digest

2e:9d:b3:b0:d5:f7:0a:16:ab:5e:7a:7b:44:f4:b2:92:d9:c0:69:65

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Oberibsreldev5\build\releases\build\ARKCmdFS\vc10\Release\ARKCmdFS.pdb

Imports

ole32

CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance

advapi32

GetServiceKeyNameW
FreeSid
OpenProcessToken
CreateRestrictedToken
CreateProcessAsUserW
LookupPrivilegeValueW
AdjustTokenPrivileges
CreateWellKnownSid
SetNamedSecurityInfoW
GetNamedSecurityInfoW
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
InitializeSecurityDescriptor
RegDeleteKeyW
SetSecurityDescriptorDacl
RegGetKeySecurity
RegDeleteValueW
SetEntriesInAclW
RegEnumValueW
RegSetKeySecurity
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
GetSecurityDescriptorDacl
AllocateAndInitializeSid
CreateServiceW
CloseServiceHandle
DeleteService
OpenSCManagerW
QueryServiceConfigW
OpenServiceW
QueryServiceConfig2W
ChangeServiceConfig2W
StartServiceW
ChangeServiceConfigW
QueryServiceStatusEx
GetServiceDisplayNameW
ControlService

shlwapi

PathIsUNCW
PathRemoveFileSpecW
PathUnmakeSystemFolderW
PathMakeSystemFolderW
PathIsRelativeW
PathAppendW
PathMakePrettyW
PathCombineW
PathIsDirectoryW
PathStripPathW
PathRemoveBackslashW
PathRenameExtensionW
PathIsRootW
PathFileExistsW
PathAddBackslashW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW

shell32

SHSetLocalizedName
SHChangeNotify
ord75
SHCreateDirectoryExW
ord709
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation

mscms

InstallColorProfileW
UninstallColorProfileW

psapi

EnumProcessModules
EnumProcesses
GetModuleFileNameExW

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
QueryPerformanceCounter
EncodePointer
LCMapStringW
LoadLibraryA
GetStringTypeExW
GetUserDefaultLCID
FreeLibrary
InterlockedExchange
InterlockedCompareExchange
GetModuleHandleW
lstrcatW
MoveFileW
lstrcmpiW
lstrlenW
GetLastError
CreateProcessW
GetCurrentProcess
WaitForSingleObject
OpenProcess
GetExitCodeProcess
TerminateProcess
LocalAlloc
CloseHandle
LocalFree
Sleep
WideCharToMultiByte
CopyFileW
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryW
GetProcAddress
GetTickCount
SystemTimeToFileTime
SetFileTime
CreateFileW
GetSystemTime
GetFileSize
ReadFile
SetDllDirectoryW
GetModuleFileNameW
MultiByteToWideChar
FindFirstFileW
MoveFileExW
FormatMessageW
GetFileAttributesW
lstrcmpW
GetTempPathW
GetCurrentDirectoryW
SetLastError
FindClose
SetCurrentDirectoryW
RemoveDirectoryW
FindNextFileW
DeleteFileW
lstrcpyW
SetFileAttributesW
CreateDirectoryW

user32

LoadStringW

gdi32

AddFontResourceW
RemoveFontResourceW

oleaut32

VariantClear
SysAllocString
SysFreeString

arkengine

?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?Perform@ARKCommand@@QAE_NXZ
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
??1ARKCommand@@UAE@XZ
??0ARKCommand@@QAE@AAVLogAppender@@@Z
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z

msvcp100

??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

msvcr100

memcpy
_CxxThrowException
memset
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
??8type_info@@QBE_NABV0@@Z
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
__CxxFrameHandler3
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
_wtoi
??3@YAXPAX@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
free
malloc
strcat_s
wcstoul
toupper
wcscpy_s
sprintf_s
_purecall
_vsnwprintf_s
fputc
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
_unlock_file
ungetc
fgetpos
_fseeki64
fflush
fgetc
fsetpos
setvbuf
_lock_file
memcpy_s
fwrite
fclose
memchr
swprintf_s
_wstat64i32
_snwprintf_s
rand
srand
_time64
vswprintf_s
wprintf

Exports

Exports

GetCommandObject
SetARKController
SetLogger

Sections

.text
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/resources/libraries/ARKEngine.dll
.dll windows:5 windows x86 arch:x86

bfd136ebce2e4930176cae7c2ede6eac

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09:c5:50:a7:fe:b8:a6:73:a7:01:7a:44:e6:21:81:26:33:2b:ce:67
Signer

Actual PE Digest

09:c5:50:a7:fe:b8:a6:73:a7:01:7a:44:e6:21:81:26:33:2b:ce:67

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Oberibsreldev5\build\releases\build\ARKEngine\vc10\Release\ARKEngine.pdb

Imports

kernel32

MultiByteToWideChar
GetFileSize
FindFirstFileW
CopyFileW
FormatMessageW
GetFileAttributesW
ReadFile
GetModuleFileNameW
CreateFileW
lstrcmpW
lstrlenW
GetTempPathW
GetCurrentDirectoryW
FindClose
RemoveDirectoryW
FindNextFileW
DeleteFileW
lstrcpyW
SetFileAttributesW
CreateProcessW
WaitForSingleObject
GetModuleHandleW
GetExitCodeProcess
GetProcAddress
SetFilePointer
WriteFile
DosDateTimeToFileTime
CreateDirectoryW
SetFileTime
GetFileTime
LocalFileTimeToFileTime
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
AreFileApisANSI
Sleep
SetEndOfFile
FlushFileBuffers
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
LoadLibraryA
LoadLibraryW
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
DeleteCriticalSection
LockFileEx
InterlockedIncrement
InitializeCriticalSection
GetTempPathA
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
WideCharToMultiByte
lstrcmpiW
LocalFree
CloseHandle
LocalAlloc
GetCurrentProcess
SetLastError
lstrcatW
GetLastError
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer

advapi32

SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
CreateWellKnownSid

shell32

SHGetPathFromIDListW
SHGetFolderLocation
SHCreateDirectoryExW
SHGetFolderPathW

ole32

CoTaskMemFree

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xout_of_range@std@@YAXPBD@Z

msvcr100

??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
_wtoi
??3@YAXPAX@Z
??2@YAPAXI@Z
isalpha
??_V@YAXPAX@Z
isdigit
_purecall
_stricmp
memchr
atoi
_wtoi64
strstr
_vsnwprintf_s
swprintf_s
sprintf_s
_wsplitpath_s
_wstat64i32
_snwprintf_s
free
malloc
fopen
fread
ferror
fwrite
ftell
fseek
fclose
_wfopen_s
wcsrchr
wcscat_s
wcscpy_s
_wcsdup
_localtime64_s
realloc
memset
memcpy
memcmp
strcmp
strncmp
_wgetcwd
calloc
_wfullpath
_waccess_s
wcsncpy_s
wcsncat_s
strncpy_s
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_vsnprintf_s
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
__CxxFrameHandler3
?what@exception@std@@UBEPBDXZ
_CxxThrowException

shlwapi

PathFileExistsW
PathIsRootW
PathRemoveBackslashW
PathAddBackslashW
PathStripToRootW
PathIsUNCW
PathMakePrettyW
PathIsSameRootW
PathFindFileNameW
PathIsRelativeW
PathStripPathW

Exports

Exports

??0ARKCommand@@QAE@AAVLogAppender@@@Z
??0ARKCommand@@QAE@ABV0@@Z
??1ARKCommand@@UAE@XZ
??_7ARKCommand@@6B@
?Commit@ARKCommand@@QAE_NXZ
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?Perform@ARKCommand@@QAE_NXZ
?Rollback@ARKCommand@@QAE_NXZ
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z
ARKEngineDoPayloadOperation
ARKEngineDoPayloadOperation2

Sections

.text
Size: 393KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/resources/libraries/AdobePIM.dll
.dll windows:5 windows x86 arch:x86

d6d600f3ff306b01fa866de68d697719

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

cb:d4:7a:5c:a6:91:13:0b:40:4d:5a:ad:a9:eb:c4:87:17:42:10:c2
Signer

Actual PE Digest

cb:d4:7a:5c:a6:91:13:0b:40:4d:5a:ad:a9:eb:c4:87:17:42:10:c2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\3.0\c3p0\dev5\target\win\Release\resources\AdobePIM.pdb

Imports

msi

ord74
ord147
ord145

kernel32

ReleaseMutex
CloseHandle
GetCurrentProcessId
LocalFree
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetDateFormatW
SetFilePointer
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
GetTempPathW
GetLocalTime
FreeLibrary
LoadLibraryW
GetProcAddress
FindFirstFileW
CreateProcessW
MoveFileExW
SetEvent
Sleep
CopyFileW
GetVersionExW
GetModuleFileNameW
FindClose
ResetEvent
CreateEventW
RemoveDirectoryW
FindNextFileW
GetDiskFreeSpaceExW
DeleteFileW
SetFileAttributesW
GetFileSize
ReadFile
FlushFileBuffers
OpenSemaphoreW
lstrlenA
DosDateTimeToFileTime
CreateFileA
SetFileTime
GetFileAttributesA
GetFileTime
LocalFileTimeToFileTime
GetFullPathNameW
GetFullPathNameA
SetEndOfFile
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LeaveCriticalSection
GetFileAttributesW
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
GetACP
GetCurrentProcess
lstrlenW
lstrcpyW
CompareStringW
GetProcessHeap
LocalAlloc
CreateSemaphoreW
GetLastError
ReleaseSemaphore
IsValidCodePage
WaitForSingleObject
CreateMutexW
SetEnvironmentVariableA
TlsAlloc
TlsGetValue
WriteConsoleW
SetStdHandle
GetStringTypeW
LCMapStringW
HeapSize
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetTimeZoneInformation
GetStartupInfoW
GetOEMCP
GetCPInfo
HeapDestroy
HeapCreate
ExitProcess
GetModuleHandleW
GetStdHandle
IsProcessorFeaturePresent
IsDebuggerPresent
GetFileType
SetHandleCount
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
SetLastError
TlsFree
DecodePointer
EncodePointer
HeapAlloc
HeapFree
MoveFileW
MoveFileA
HeapReAlloc
GetCommandLineA
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsSetValue

user32

wsprintfW

advapi32

FreeSid
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetEntriesInAclW
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

shell32

SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW

ole32

StringFromGUID2
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoCreateInstance
OleRun

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantClear
SysStringLen
SysAllocString
GetErrorInfo

shlwapi

PathIsDirectoryW
PathRemoveFileSpecW
PathStripPathW
PathAppendW
PathRemoveBackslashW
PathFileExistsW

Exports

Exports

AAMIU_Uninstall
AAMIU_getDeploymentValidationStatus
AAMIU_preInstallPropertySet
pim_copyPkgsFromACFToCFPath
pim_createLibraryRef
pim_createLibraryRefWithType
pim_createOrUpdateAAMInventory
pim_freeLiraryRef
pim_getAppletRegistrationInfo
pim_getCurrentPIMCFPath
pim_getCurrentPackagesVersion
pim_getCurrentPathType
pim_getPathOfType
pim_getStandardACFPath
pim_getStandardUSFPath
pim_getStandardUSFTempPath
pim_getUpdateStatusAtPath
pim_haveEnoughDiskSpaceIfACFLatest
pim_haveEnoughDiskSpaceToInstallPackages
pim_installPackage
pim_postInstallPackages
pim_registerProgressTicksCallback
pim_syncFromPathToACF
pim_syncFromPathToPath
pim_syncUSFToACF
pim_uninstallAAMFromAAMCleanerTool
pim_uninstallAAMUsingAAMCleanerTool

Sections

.text
Size: 638KB - Virtual size: 637KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/resources/libraries/Adobe_Helperx32.exe
.exe windows:5 windows x86 arch:x86

8e97201d97b692c9c1da3acfb39f6fcc

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6c:4d:09:2d:25:4e:c8:45:51:ea:51:98:84:f2:38:20:ed:9c:cc:39
Signer

Actual PE Digest

6c:4d:09:2d:25:4e:c8:45:51:ea:51:98:84:f2:38:20:ed:9c:cc:39

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Oberibsreldev5\build\releases\build\Adobe_Helperx64\bin\windows\Release\Adobe_Helperx64.pdb

Imports

kernel32

GlobalFlags
lstrcmpiW
WriteFile
SetFilePointer
FlushFileBuffers
GetVersionExW
UnlockFile
SetEndOfFile
DuplicateHandle
GetFullPathNameW
InterlockedExchange
GetLocaleInfoW
GetUserDefaultUILanguage
GetSystemDirectoryW
GetFileAttributesExW
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetTempFileNameW
GetWindowsDirectoryW
GetNumberFormatW
GetTickCount
GetProfileIntW
Sleep
SearchPathW
VirtualProtect
FindResourceExW
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
RtlUnwind
RaiseException
HeapReAlloc
ExitThread
CreateThread
HeapSize
HeapQueryInformation
ExitProcess
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeResource
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetStartupInfoW
GetCPInfo
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
lstrlenA
lstrcmpA
GlobalGetAtomNameW
CompareStringW
InterlockedIncrement
GetCurrentThreadId
ResumeThread
SetThreadPriority
GlobalSize
MulDiv
GetCurrentProcessId
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedDecrement
ActivateActCtx
ReleaseActCtx
DeactivateActCtx
TlsFree
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalAlloc
GlobalHandle
GlobalUnlock
GlobalReAlloc
GlobalLock
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GlobalAddAtomW
GlobalFindAtomW
IsProcessorFeaturePresent
GlobalDeleteAtom
GetVolumeInformationW
lstrcpyW
SetCurrentDirectoryW
FindClose
GetCurrentDirectoryW
lstrlenW
lstrcmpW
GetModuleFileNameW
GetFileAttributesW
FormatMessageW
CopyFileW
FindFirstFileW
GetFileSize
SetLastError
GetLastError
CreateFileW
ReadFile
WaitForSingleObject
GetModuleHandleW
LocalFree
CloseHandle
LocalAlloc
GetCurrentProcess
GetTempPathW
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetProcAddress
LoadLibraryW
LockFile
FreeLibrary

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
CreateWellKnownSid

shell32

SHAppBarMessage
DragQueryFileW
DragFinish
ShellExecuteW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

DoDragDrop
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
RevokeDragDrop
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CoTaskMemFree

oleaut32

VariantClear
VariantChangeType
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
SysFreeString
VarBstrFromDate
VariantInit

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathStripPathW
PathRemoveBackslashW
PathFindFileNameW
PathIsRelativeW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFileExistsW
PathRemoveFileSpecW

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

user32

CreateAcceleratorTableW
SetRect
SetCursorPos
BringWindowToTop
LockWindowUpdate
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
GetNextDlgTabItem
GetIconInfo
LoadImageW
GetNextDlgGroupItem
EndDialog
CreateDialogIndirectParamW
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
MonitorFromPoint
UnionRect
UpdateLayeredWindow
IsMenu
CreateMenu
PostThreadMessageW
WaitMessage
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
RegisterClipboardFormatW
CopyIcon
CharUpperBuffW
GetDoubleClickTime
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
SubtractRect
MapDialogRect
DrawIcon
DestroyCursor
GetWindowRgn
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
CopyImage
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
CharUpperW
DestroyIcon
RealChildWindowFromPoint
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetAsyncKeyState
GetClassLongW
GetClassNameW
LoadAcceleratorsW
GetPropW
RemovePropW
IsWindow
SetFocus
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
UpdateWindow
GetClientRect
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
CopyRect
PtInRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetWindowThreadProcessId
SendMessageW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
UnhookWindowsHookEx
NotifyWinEvent
WindowFromPoint
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateW
MessageBeep
ReleaseCapture
SetCapture
GetSystemMenu
LoadMenuW
SetPropW
SetClassLongW
IsZoomed
OffsetRect
IsRectEmpty
KillTimer
SetTimer
DeleteMenu
ShowOwnedPopups
SetCursor
IntersectRect
InvalidateRect
GetCapture
IsIconic
GetDesktopWindow

gdi32

SetRectRgn
CombineRgn
PatBlt
DPtoLP
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateDIBitmap
CreateHatchBrush
CreateSolidBrush
CopyMetaFileW
CreateDCW
CreateBitmap
SetTextColor
SetBkColor
GetObjectW
DeleteObject
CreateFontIndirectW
CreateCompatibleDC
BitBlt
GetTextExtentPoint32W
SaveDC
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreatePatternBrush
DeleteDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
Escape
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
ExtTextOutW
GetDeviceCaps
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
SetPixelV
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceW
SelectObject

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

comdlg32

GetFileTitleW

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/resources/libraries/Adobe_Helperx64.exe
.exe windows:5 windows x64 arch:x64

efa469df8c8e7591255fc637179a4aff

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:7f:55:3f:75:bb:23:8c:a1:7d:bd:f0:64:3d:51:ea:a4:a0:e8:d9
Signer

Actual PE Digest

54:7f:55:3f:75:bb:23:8c:a1:7d:bd:f0:64:3d:51:ea:a4:a0:e8:d9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Oberibsreldev5\build\releases\build\Adobe_Helperx64\bin\windows_x64\Release\Adobe_Helperx64.pdb

Imports

kernel32

lstrcmpiW
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetFullPathNameW
GlobalFindAtomW
GetLocaleInfoW
GetUserDefaultUILanguage
GetSystemDirectoryW
GetFileAttributesExW
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetTempFileNameW
GetWindowsDirectoryW
GetNumberFormatW
GetTickCount
GetProfileIntW
Sleep
SearchPathW
VirtualProtect
FindResourceExW
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineW
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
HeapReAlloc
ExitThread
CreateThread
HeapSize
HeapQueryInformation
ExitProcess
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetStartupInfoW
GetCPInfo
GetOEMCP
IsValidCodePage
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetTimeZoneInformation
HeapSetInformation
GetVersion
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
GlobalDeleteAtom
GetVersionExW
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
lstrlenA
lstrcmpA
GlobalGetAtomNameW
CompareStringW
GetCurrentThreadId
ResumeThread
SetThreadPriority
GlobalSize
MulDiv
GetCurrentProcessId
FindResourceW
LoadResource
LockResource
SizeofResource
ActivateActCtx
ReleaseActCtx
DeactivateActCtx
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalAlloc
GlobalHandle
GlobalUnlock
GlobalReAlloc
GlobalLock
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GlobalFlags
FreeResource
GlobalAddAtomW
GetVolumeInformationW
lstrcpyW
SetCurrentDirectoryW
FindClose
GetCurrentDirectoryW
lstrlenW
lstrcmpW
GetModuleFileNameW
GetFileAttributesW
FormatMessageW
CopyFileW
FindFirstFileW
GetFileSize
SetLastError
GetLastError
CreateFileW
ReadFile
WaitForSingleObject
GetModuleHandleW
LocalFree
CloseHandle
LocalAlloc
GetCurrentProcess
GetTempPathW
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetProcAddress
LoadLibraryW
FreeLibrary

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
CreateWellKnownSid

shell32

SHAppBarMessage
DragQueryFileW
DragFinish
ShellExecuteW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

DoDragDrop
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
RevokeDragDrop
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CoTaskMemFree

oleaut32

VariantClear
VariantChangeType
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
SysFreeString
VarBstrFromDate
VariantInit

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathStripPathW
PathRemoveBackslashW
PathFindFileNameW
PathIsRelativeW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFileExistsW
PathRemoveFileSpecW

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

user32

GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
SetRect
SetCursorPos
BringWindowToTop
LockWindowUpdate
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
GetNextDlgTabItem
GetIconInfo
LoadImageW
GetNextDlgGroupItem
EndDialog
CreateDialogIndirectParamW
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
MonitorFromPoint
UnionRect
UpdateLayeredWindow
IsMenu
CreateMenu
PostThreadMessageW
WaitMessage
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
RegisterClipboardFormatW
CopyIcon
CharUpperBuffW
GetDoubleClickTime
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
SubtractRect
MapDialogRect
DrawIcon
DestroyCursor
GetWindowRgn
SetRectEmpty
CopyImage
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
CharUpperW
DestroyIcon
GetDesktopWindow
RealChildWindowFromPoint
ClientToScreen
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
WindowFromPoint
GetClassLongPtrW
SetPropW
GetKeyboardLayout
RemovePropW
IsWindow
SetFocus
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
UpdateWindow
GetClientRect
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
CopyRect
PtInRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetWindowThreadProcessId
SendMessageW
GetWindowLongW
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
UnhookWindowsHookEx
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
OffsetRect
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateW
MessageBeep
ReleaseCapture
SetCapture
GetSystemMenu
LoadMenuW
SetClassLongPtrW
GetAsyncKeyState
GetPropW
NotifyWinEvent
IsRectEmpty
KillTimer
SetTimer
DeleteMenu
ShowOwnedPopups
SetCursor
IntersectRect
InvalidateRect
IsIconic
SetLayeredWindowAttributes
GetClassNameW
EnumDisplayMonitors
ShowWindow

gdi32

SetRectRgn
CombineRgn
PatBlt
DPtoLP
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateDIBitmap
CreateHatchBrush
CreateSolidBrush
CopyMetaFileW
CreateDCW
CreateBitmap
SetTextColor
SetBkColor
GetObjectW
DeleteObject
CreateFontIndirectW
CreateCompatibleDC
BitBlt
GetTextExtentPoint32W
SaveDC
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreatePatternBrush
DeleteDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
Escape
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
ExtTextOutW
GetDeviceCaps
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
SetPixelV
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceW
SelectObject

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

comdlg32

GetFileTitleW

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 517KB - Virtual size: 517KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/resources/libraries/CustomHook_Helperx64.exe
.exe windows:5 windows x64 arch:x64

26c29a016f6486da6914fe357cf8cfa9

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:b9:b9:10:ac:12:fa:96:c5:fb:7d:7e:b0:b6:3d:7b:e0:ae:b9:af
Signer

Actual PE Digest

62:b9:b9:10:ac:12:fa:96:c5:fb:7d:7e:b0:b6:3d:7b:e0:ae:b9:af

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Oberibsreldev5\build\releases\build\CustomHook_Helperx64\vc10\x64\Release\CustomHook_Helperx64.pdb

Imports

shlwapi

PathStripToRootW
PathRemoveFileSpecW
PathIsFileSpecW
PathStripPathW
PathRemoveBackslashW
PathIsUNCW
PathFileExistsW
PathFindFileNameW
PathIsRelativeW

kernel32

HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
SetFilePointer
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetDriveTypeW
FormatMessageW
GetFileAttributesW
ReadFile
GetModuleFileNameW
CreateFileW
lstrcmpW
lstrlenW
GetTempPathW
GetLastError
GetCurrentDirectoryW
SetLastError
GetConsoleCP
RemoveDirectoryW
CloseHandle
DeleteFileW
LocalFree
GetCurrentProcess
FreeLibrary
CreateProcessW
GetModuleHandleW
LoadLibraryW
WaitForSingleObject
GetExitCodeProcess
GetProcAddress
SetFilePointerEx
OutputDebugStringW
WriteFile
CreateEventA
SetEvent
FlushFileBuffers
GetCurrentThreadId
GetCommandLineW
QueryPerformanceCounter
GetConsoleMode
SetStdHandle
SetEndOfFile
GetProcessHeap
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
LocalAlloc
HeapSize
ExitProcess
IsValidCodePage
GetOEMCP
SetHandleCount
GetCurrentProcessId
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetStartupInfoW
GetFullPathNameW
RaiseException
RtlPcToFileHeader
GetCPInfo
RtlLookupFunctionEntry
RtlUnwindEx
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetFileType
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetStdHandle
GetLocaleInfoW
HeapSetInformation
GetVersion
HeapCreate
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation

advapi32

SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
CreateWellKnownSid

shell32

CommandLineToArgvW
ord165
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW

ole32

CoTaskMemFree

Sections

.text
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/resources/libraries/EventMessages.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1d:c2:34:f0:7f:a8:c4:db:f6:f3:09:d5:be:16:f8:ba:fb:11:1b:13
Signer

Actual PE Digest

1d:c2:34:f0:7f:a8:c4:db:f6:f3:09:d5:be:16:f8:ba:fb:11:1b:13

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DE5/resources/libraries/TokenResolverx64.exe
.exe windows:5 windows x64 arch:x64

d7599ce64fbe14ef79f16fa0e0bef1c0

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:6d:35:99:07:06:d7:c6:67:87:27:20:c8:37:e6:9d:38:fd:16:66
Signer

Actual PE Digest

55:6d:35:99:07:06:d7:c6:67:87:27:20:c8:37:e6:9d:38:fd:16:66

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\York1820\oobe\3.0\installertech\5.0\dev5\build\TokenResolver\vc10\x64\Release\TokenResolver.pdb

Imports

kernel32

WriteFile
CreateFileW
GetLastError
CloseHandle
WideCharToMultiByte
GetACP
MultiByteToWideChar
FlushFileBuffers
HeapReAlloc
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapAlloc
HeapFree
EncodePointer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
RtlUnwindEx
GetStdHandle
GetModuleFileNameW
RaiseException
RtlPcToFileHeader
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
Sleep
HeapSize

shell32

SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation

ole32

CoTaskMemFree

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/resources/libraries/adobeFileVersioner.dll
.dll windows:5 windows x86 arch:x86

ca13f343742168eb7b59e79c6701d85a

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9f:70:ff:13:b4:19:24:08:65:f1:36:7b:d7:25:2d:19:6d:f9:83:4a
Signer

Actual PE Digest

9f:70:ff:13:b4:19:24:08:65:f1:36:7b:d7:25:2d:19:6d:f9:83:4a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileW
GetFileSize
ReadFile
WideCharToMultiByte
GetACP
MultiByteToWideChar
Sleep
InterlockedCompareExchange
InterlockedExchange
GetUserDefaultLCID
GetStringTypeExA
FreeLibrary
LCMapStringA
LCMapStringW
LoadLibraryA
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
GetCPInfo
HeapAlloc
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
ExitProcess
HeapCreate
HeapDestroy
GetOEMCP
IsValidCodePage
GetStringTypeW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers

user32

LoadStringA

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Exports

Exports

AFV_CompareFiles
AFV_CompareVersions
AFV_GetFileVersion

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/resources/libraries/patchw32.dll
.dll windows:1 windows x86 arch:x86

8f296cd7497fd33e575100bd64339788

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

06:17:08:2f:26:26:73:eb:00:df:1f:19:3d:e2:25:25
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

18/12/2007, 00:00

Not After

17/12/2010, 23:59

Subject

CN=Pocket Soft\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Pocket Soft\, Inc.,O=Pocket Soft\, Inc.,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfA
DdeInitializeA
DispatchMessageA
OemToCharA
PeekMessageA
DdeUninitialize
TranslateMessage
CharToOemA
DdeCreateDataHandle
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleA
DdeFreeStringHandle
DdeConnect
LoadStringA
wvsprintfA

advapi32

RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyA
RegEnumValueW
RegSetValueExW
RegEnumKeyW
RegDeleteValueA
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyA
RegDeleteKeyW
RegEnumKeyExA
SetFileSecurityW
GetFileSecurityW
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
FreeSid
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
InitializeSecurityDescriptor
AllocateAndInitializeSid
DuplicateToken
OpenProcessToken
OpenThreadToken

ole32

CoUninitialize
CoInitialize

version

GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

ReleaseMutex
GetPrivateProfileSectionA
GetProfileStringA
GetDiskFreeSpaceA
VirtualAlloc
GetSystemDirectoryA
FlushFileBuffers
CreateDirectoryA
VirtualFree
DeleteFileW
GetFileType
MoveFileW
GetDriveTypeW
GetCommandLineA
SetStdHandle
ExitProcess
GetCurrentProcessId
GetCPInfo
GetOEMCP
GetACP
GetTimeZoneInformation
GetStartupInfoA
GlobalFree
GlobalAlloc
MulDiv
GetVersion
FreeLibrary
GetDriveTypeA
GetProcAddress
LoadLibraryA
SetEndOfFile
SetFilePointer
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetWindowsDirectoryA
GetShortPathNameA
GetFullPathNameA
MoveFileExW
MoveFileExA
CopyFileA
GetFileAttributesA
GetModuleFileNameA
MoveFileA
SetEnvironmentVariableA
GetTempPathA
SetErrorMode
CreateMutexA
SetFileApisToANSI
CreateFileW
AreFileApisANSI
WaitForSingleObject
LocalFree
LocalAlloc
GetCurrentProcess
GetLastError
GetCurrentThread
WriteFile
lstrlenA
ReadFile
SetNamedPipeHandleState
WaitNamedPipeA
GetLocalTime
SetCurrentDirectoryW
GetEnvironmentStrings
WideCharToMultiByte
GetProfileSectionA
FindNextFileW
FindClose
GetPrivateProfileStringA
GetSystemTime
DeleteFileA
SetFileAttributesA
WriteProfileStringA
WriteProfileSectionA
WritePrivateProfileStringA
WritePrivateProfileSectionA
WriteProfileStringW
WritePrivateProfileStringW
CopyFileW
GetExitCodeProcess
CreateProcessA
lstrcmpiA
SystemTimeToFileTime
GetSystemInfo
LockResource
LoadResource
FindResourceA
SetFileApisToOEM
MultiByteToWideChar
GetVolumeInformationA
SetEnvironmentVariableW
GetCurrentDirectoryW
FindFirstFileW
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetModuleHandleA
SetFileAttributesW
SetFileTime
GetFileAttributesW
GetShortPathNameW
GetFullPathNameW
GetStdHandle
RaiseException
RemoveDirectoryW
RemoveDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
RtlUnwind
CreateDirectoryW
GetLogicalDrives

Exports

Exports

RTPBatSvr
RTPRegSvr
RTPRenSvr
RTPatchApply32@12
RTPatchApply32NoCall
RTPatchEnumPatches@12
RTPatchGetCost@24
RTPatchSetAttribGet@8
RTPatchSetAttribSet@8
RTPatchSetCreate@8
RTPatchSetDelete@8
RTPatchSetDirWalk@8
RTPatchSetOpen@8
RTPatchSetRename@8

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/resources/libraries/updaterinventory.dll
.dll windows:5 windows x86 arch:x86

1c126edb5a5bedf745bfca7fbbcddecc

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ae:39:a2:83:fe:5c:1f:35:1e:04:e5:57:e3:6e:3b:7e:c7:46:ea:58
Signer

Actual PE Digest

ae:39:a2:83:fe:5c:1f:35:1e:04:e5:57:e3:6e:3b:7e:c7:46:ea:58

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\updater3.0\build-rel\build\releases\build\updaterinventory\vc10\outdir-Release\updaterinventory.pdb

Imports

kernel32

DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
RaiseException
HeapCreate
HeapDestroy
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
WideCharToMultiByte
GetTimeZoneInformation
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapReAlloc
EncodePointer
EnterCriticalSection
FreeLibrary
InterlockedExchange
LoadLibraryW
RtlUnwind
LCMapStringW
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
CreateFileW
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA
GetLongPathNameW
GetTempPathW
DeleteFileW
CopyFileW
SetFileAttributesW
RemoveDirectoryW
GetVersionExW
CreateDirectoryW
CreateEventA
SetEvent
ReadFile
MultiByteToWideChar
LocalFree
LocalAlloc
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
CreateThread
GetExitCodeThread
WaitForSingleObject
TerminateThread
InterlockedDecrement
CloseHandle
FindNextFileW
FindClose
GetCurrentProcess
FindFirstFileW
SetEndOfFile
LeaveCriticalSection
MoveFileW
ResetEvent
OpenEventA
InitializeCriticalSection

advapi32

SetNamedSecurityInfoW
CreateWellKnownSid
GetSecurityDescriptorDacl
RegOpenKeyExW
RegSetKeySecurity
SetEntriesInAclW
RegDeleteValueW
RegGetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHGetMalloc

ole32

CoUninitialize
CoInitializeSecurity
CoInitialize
CoInitializeEx
CoTaskMemFree
CoCreateInstance

oleaut32

SysAllocString
VariantClear
SysFreeString
VariantInit

shlwapi

PathIsFileSpecW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW

Exports

Exports

UpdaterInventoryAddToMCL
UpdaterInventoryAddToMCLWithIcon
UpdaterInventoryGetLibVersion
UpdaterInventoryIsHigherUpdatePresent
UpdaterInventoryRelease
UpdaterInventoryRemoveFromMCL
UpdaterInventorySuppressUpdates

Sections

.text
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE5/resources/uninstall/Uninstall.db
DE6/Setup.dll
.dll windows:5 windows x86 arch:x86

fbdfd4e2f628e9a7e0bfd0dc9012ab37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Oberibsrel52\build\releases\build\Ahmbed\vc10\obj\Release\bin\Setup.pdb

Imports

mpr

WNetCancelConnection2W
WNetAddConnection2W

setupapi

SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

ReadFile
GetModuleFileNameW
lstrcmpW
lstrlenW
GetTempPathW
GetCurrentDirectoryW
FindClose
LocalAlloc
SetCurrentDirectoryW
RemoveDirectoryW
FindNextFileW
GetDiskFreeSpaceExW
DeleteFileW
LocalFree
lstrcpyW
SetFileAttributesW
GetVolumeInformationW
FindResourceExW
LoadResource
LockResource
GetUserDefaultUILanguage
ReleaseMutex
CreateProcessW
GetCurrentProcess
GetUserDefaultLangID
OpenProcess
Thread32First
GetExitCodeProcess
Thread32Next
Process32FirstW
QueryDosDeviceW
Module32FirstW
Process32NextW
lstrcmpiW
CreateToolhelp32Snapshot
Module32NextW
GetTempFileNameW
GetThreadLocale
IsProcessorFeaturePresent
GlobalMemoryStatusEx
GetCurrentThread
GetTickCount
Sleep
InterlockedDecrement
lstrcatW
CreateDirectoryW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcessHeap
HeapAlloc
HeapFree
ReleaseSemaphore
GetSystemTimeAsFileTime
DuplicateHandle
CreateSemaphoreA
CreateFileA
InterlockedCompareExchange
InterlockedExchange
GetStringTypeExA
LCMapStringA
LoadLibraryA
SetFilePointer
SetFilePointerEx
GetCurrentThreadId
SystemTimeToFileTime
CopyFileExW
GetVersionExA
AreFileApisANSI
SetEndOfFile
UnlockFile
LockFile
GetFileAttributesA
GetFileAttributesW
GetCurrentProcessId
LockFileEx
InterlockedIncrement
GetTempPathA
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
ConnectNamedPipe
CreateNamedPipeW
GetModuleHandleA
HeapReAlloc
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
UnlockFileEx
lstrlenA
SetWaitableTimer
WaitForMultipleObjects
ResumeThread
TlsSetValue
ResetEvent
OpenEventA
TlsGetValue
TlsFree
TlsAlloc
MoveFileExW
SetErrorMode
GetDriveTypeW
FindFirstFileW
GetFileSize
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetVersionExW
GetSystemTime
GetLastError
WaitForSingleObject
CreateMutexW
GetFileSizeEx
FlushFileBuffers
CreateFileW
CopyFileW
WriteFile
CloseHandle
DeleteCriticalSection
GetProcAddress
SetLastError
GetStdHandle
RaiseException
SetEvent
CreateEventA
GetConsoleWindow
FreeConsole
LoadLibraryW
GetModuleHandleW
FreeLibrary
DeleteFileA
CreateWaitableTimerA
EncodePointer
DecodePointer
TerminateProcess
UnhandledExceptionFilter
FormatMessageW
SetUnhandledExceptionFilter
IsDebuggerPresent
GetUserDefaultLCID

user32

FindWindowW
GetWindowTextLengthW
GetSystemMetrics
LoadStringA
PostMessageW
SendMessageW
EnumThreadWindows
GetWindowThreadProcessId
GetWindowTextW

advapi32

IsValidSecurityDescriptor
RevertToSelf
AddAccessAllowedAce
SetSecurityDescriptorOwner
InitializeAcl
ImpersonateSelf
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
AccessCheck
SetSecurityDescriptorGroup
OpenThreadToken
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
AdjustTokenPrivileges
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
DuplicateTokenEx
LookupPrivilegeValueW
OpenProcessToken
CreateWellKnownSid
RegOpenKeyExW
RegDeleteKeyW
RegSetValueExW
RegCloseKey
ReportEventW
DeregisterEventSource
RegCreateKeyExW
RegisterEventSourceW
GetLengthSid

shell32

SHGetFolderPathW
ord75
ord165
SHGetFolderLocation
SHCreateDirectoryExW
SHGetPathFromIDListW

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromProgID
CoTaskMemFree
OleInitialize
OleUninitialize
CoInitializeEx
CoSetProxyBlanket
CoInitializeSecurity

oleaut32

SysAllocStringByteLen
VariantInit
VariantCopy
VariantClear
SysAllocString
SysFreeString
SysStringLen

atl100

ord30
ord31

shlwapi

PathAddBackslashW
PathIsRootW
PathRenameExtensionW
PathRemoveBackslashW
PathStripPathW
PathRemoveFileSpecW
PathAppendW
PathIsRelativeW
PathIsFileSpecW
PathFileExistsW
PathFindFileNameW
PathIsUNCW
PathMakePrettyW
PathStripToRootW
PathGetCharTypeW
PathFindExtensionW

msvcp100

?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?id@?$codecvt@_WDH@std@@2V0locale@2@A
??1_Container_base12@std@@QAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?exceptions@ios_base@std@@QAEXH@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@UAE@XZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

ws2_32

WSAStartup
WSACleanup

msvcr100

fgetc
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
__clean_type_info_names_internal
_except_handler4_common
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_beginthreadex
_aligned_free
_aligned_malloc
??9type_info@@QBE_NABV0@@Z
wcsncmp
sscanf
isalnum
_vsnprintf_s
wcschr
strchr
wcsncat_s
strncat_s
_waccess_s
_wfullpath
_set_errno
_wunlink
_wfsopen
_wmkdir
_wgetcwd
sscanf_s
_snprintf_s
strncpy_s
strncmp
realloc
wcslen
memset
memcmp
__CxxFrameHandler3
_CxxThrowException
strcmp
memcpy
strlen
strcpy
ftell
ferror
??3@YAXPAX@Z
wcsncpy_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
memmove
free
__iob_func
setvbuf
??_V@YAXPAX@Z
strcpy_s
_purecall
_open_osfhandle
??2@YAPAXI@Z
_fdopen
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
_vsnwprintf_s
memchr
atoi
swprintf_s
_wsplitpath_s
_wstat64i32
_snwprintf_s
rand
srand
_time64
calloc
memcpy_s
_wcsicmp
wcscpy_s
_wcsnicmp
malloc
fgetws
printf
strstr
_wfopen_s
fclose
sprintf_s
fwprintf
_stricmp
tolower
_localtime64_s
strftime
toupper
_gmtime64
fputwc
_unlock_file
ungetwc
ungetc
fgetpos
_fseeki64
fflush
fsetpos
_lock_file
fgetwc
fwrite
isspace
isalpha
isxdigit
asctime_s
_close
fputc
sprintf
_errno
fopen
fread
fprintf

psapi

EnumProcessModules
GetModuleBaseNameW

Exports

Exports

DeploymentEngineMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 174KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE6/resources/libraries/ARKCmdCaps.dll
.dll windows:5 windows x86 arch:x86

55e815cf87c1e3e6fc93a5636fdfecd6

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d0:1d:00:6a:d5:ca:dd:65:1e:04:28:28:96:50:69:26:f3:17:58:0d
Signer

Actual PE Digest

d0:1d:00:6a:d5:ca:dd:65:1e:04:28:28:96:50:69:26:f3:17:58:0d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Oberibsrel52\build\releases\build\ARKCmdCaps\vc10\Release\ARKCmdCaps.pdb

Imports

ole32

CoTaskMemFree

advapi32

GetNamedSecurityInfoW
FreeSid
SetNamedSecurityInfoW
SetEntriesInAclW
AllocateAndInitializeSid

shlwapi

PathAppendW
PathRemoveBackslashW
PathStripPathW
PathFileExistsW

shell32

SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW

kernel32

EncodePointer
DecodePointer
WideCharToMultiByte
MultiByteToWideChar
GetLastError
CloseHandle
LocalFree
GetCurrentProcess
GetFileAttributesW
FlushFileBuffers
CreateFileW
lstrlenW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
AreFileApisANSI
Sleep
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
GetFileSize
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
DeleteFileW
LoadLibraryA
LoadLibraryW
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
DeleteCriticalSection
LockFileEx
InterlockedIncrement
InitializeCriticalSection
GetTempPathA
GetTempPathW
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
IsProcessorFeaturePresent
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
GetVersionExA

arkengine

?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
??0ARKCommand@@QAE@AAVLogAppender@@@Z
??1ARKCommand@@UAE@XZ
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

msvcr100

_except_handler4_common
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
??3@YAXPAX@Z
??2@YAPAXI@Z
_time64
strcmp
strlen
memcpy
_CxxThrowException
__CxxFrameHandler3
strcpy
atoi
strstr
free
malloc
wcslen
memset
?_type_info_dtor_internal_method@type_info@@QAEXXZ
wcscpy_s
_localtime64_s
realloc
memcmp
strncmp
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
__clean_type_info_names_internal

Exports

Exports

GetCommandObject

Sections

.text
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE6/resources/libraries/ARKCmdDefrag.dll
.dll windows:5 windows x86 arch:x86

44415ce685498c53bcf991d6867d8f54

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2c:ec:96:52:12:d5:19:f5:a7:95:57:0e:84:4f:e5:a1:9e:d8:1c:b2
Signer

Actual PE Digest

2c:ec:96:52:12:d5:19:f5:a7:95:57:0e:84:4f:e5:a1:9e:d8:1c:b2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Oberibsrel52\build\releases\build\ARKCmdDefrag\vc10\Release\ARKCmdDefrag.pdb

Imports

kernel32

GetTickCount
GetCurrentProcessId
GetCurrentThreadId
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetVersionExW
CloseHandle
CreateFileW
GetLastError
DeviceIoControl
MultiByteToWideChar
QueryPerformanceCounter
WideCharToMultiByte
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

ole32

CoUninitialize
CoInitialize

arkengine

?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
??0ARKCommand@@QAE@AAVLogAppender@@@Z
??1ARKCommand@@UAE@XZ
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z

msvcp100

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?ends@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_7ios_base@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
?_Decref@facet@locale@std@@QAEPAV123@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z

msvcr100

memcpy
_CxxThrowException
__CxxFrameHandler3
memset
??_V@YAXPAX@Z
_wstat64i32
_wsplitpath
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
?terminate@@YAXXZ
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
??2@YAPAXI@Z
??3@YAXPAX@Z
memmove
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_purecall

Exports

Exports

GetCommandObject

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE6/resources/libraries/ARKCmdFS.dll
.dll windows:5 windows x86 arch:x86

fa2d91fde78ee1ec37284e3a01c9f6a2

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d0:75:ae:fd:24:58:d8:f9:9a:63:00:af:d8:55:3b:17:d4:f8:24:86
Signer

Actual PE Digest

d0:75:ae:fd:24:58:d8:f9:9a:63:00:af:d8:55:3b:17:d4:f8:24:86

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Oberibsrel52\build\releases\build\ARKCmdFS\vc10\Release\ARKCmdFS.pdb

Imports

ole32

CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance

advapi32

GetServiceKeyNameW
FreeSid
OpenProcessToken
CreateRestrictedToken
CreateProcessAsUserW
LookupPrivilegeValueW
AdjustTokenPrivileges
CreateWellKnownSid
SetNamedSecurityInfoW
GetNamedSecurityInfoW
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
InitializeSecurityDescriptor
RegDeleteKeyW
SetSecurityDescriptorDacl
RegGetKeySecurity
RegDeleteValueW
SetEntriesInAclW
RegEnumValueW
RegSetKeySecurity
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
GetSecurityDescriptorDacl
AllocateAndInitializeSid
CreateServiceW
CloseServiceHandle
DeleteService
OpenSCManagerW
QueryServiceConfigW
OpenServiceW
QueryServiceConfig2W
ChangeServiceConfig2W
StartServiceW
ChangeServiceConfigW
QueryServiceStatusEx
GetServiceDisplayNameW
ControlService

shlwapi

PathIsUNCW
PathRemoveFileSpecW
PathUnmakeSystemFolderW
PathMakeSystemFolderW
PathIsRelativeW
PathAppendW
PathMakePrettyW
PathCombineW
PathIsDirectoryW
PathStripPathW
PathRemoveBackslashW
PathRenameExtensionW
PathIsRootW
PathFileExistsW
PathAddBackslashW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW

shell32

SHSetLocalizedName
SHChangeNotify
ord75
SHCreateDirectoryExW
ord709
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation

mscms

InstallColorProfileW
UninstallColorProfileW

psapi

EnumProcessModules
EnumProcesses
GetModuleFileNameExW

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
QueryPerformanceCounter
EncodePointer
LCMapStringW
LoadLibraryA
GetStringTypeExW
GetUserDefaultLCID
FreeLibrary
InterlockedExchange
InterlockedCompareExchange
GetModuleHandleW
lstrcatW
MoveFileW
lstrcmpiW
lstrlenW
GetLastError
CreateProcessW
GetCurrentProcess
WaitForSingleObject
OpenProcess
GetExitCodeProcess
TerminateProcess
LocalAlloc
CloseHandle
LocalFree
Sleep
WideCharToMultiByte
CopyFileW
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryW
GetProcAddress
GetTickCount
SystemTimeToFileTime
SetFileTime
CreateFileW
GetSystemTime
GetFileSize
ReadFile
SetDllDirectoryW
GetModuleFileNameW
MultiByteToWideChar
FindFirstFileW
MoveFileExW
FormatMessageW
GetFileAttributesW
lstrcmpW
GetTempPathW
GetCurrentDirectoryW
SetLastError
FindClose
SetCurrentDirectoryW
RemoveDirectoryW
FindNextFileW
DeleteFileW
lstrcpyW
SetFileAttributesW
CreateDirectoryW

user32

LoadStringW

gdi32

AddFontResourceW
RemoveFontResourceW

oleaut32

VariantClear
SysAllocString
SysFreeString

arkengine

?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?Perform@ARKCommand@@QAE_NXZ
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
??1ARKCommand@@UAE@XZ
??0ARKCommand@@QAE@AAVLogAppender@@@Z
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z

msvcp100

??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

msvcr100

memcpy
_CxxThrowException
memset
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
??8type_info@@QBE_NABV0@@Z
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
__CxxFrameHandler3
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
_wtoi
??3@YAXPAX@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
free
malloc
strcat_s
wcstoul
toupper
wcscpy_s
sprintf_s
_purecall
_vsnwprintf_s
fputc
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
_unlock_file
ungetc
fgetpos
_fseeki64
fflush
fgetc
fsetpos
setvbuf
_lock_file
memcpy_s
fwrite
fclose
memchr
swprintf_s
_wstat64i32
_snwprintf_s
rand
srand
_time64
vswprintf_s
wprintf

Exports

Exports

GetCommandObject
SetARKController
SetLogger

Sections

.text
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE6/resources/libraries/ARKEngine.dll
.dll windows:5 windows x86 arch:x86

e39ab12f9f65e046042937bb5027244e

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7c:4e:89:18:51:af:4d:79:08:c4:6a:1d:09:1e:3d:78:f3:ae:2e:a7
Signer

Actual PE Digest

7c:4e:89:18:51:af:4d:79:08:c4:6a:1d:09:1e:3d:78:f3:ae:2e:a7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Oberibsrel52\build\releases\build\ARKEngine\vc10\Release\ARKEngine.pdb

Imports

kernel32

lstrcatW
FindNextFileW
CloseHandle
FileTimeToLocalFileTime
lstrcpyW
GetLastError
SetLastError
GetCurrentProcess
LocalAlloc
LocalFree
lstrcmpiW
MultiByteToWideChar
GetFileSize
CopyFileW
FormatMessageW
GetModuleFileNameW
lstrcmpW
GetTempPathW
GetCurrentDirectoryW
RemoveDirectoryW
DeleteFileW
SetFileAttributesW
CreateProcessW
WaitForSingleObject
GetModuleHandleW
GetExitCodeProcess
GetProcAddress
SetFilePointer
WriteFile
FindClose
CreateDirectoryW
SetFileTime
GetFileTime
LocalFileTimeToFileTime
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
AreFileApisANSI
Sleep
SetEndOfFile
FlushFileBuffers
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
LoadLibraryA
LoadLibraryW
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
DeleteCriticalSection
LockFileEx
InterlockedIncrement
InitializeCriticalSection
GetTempPathA
FormatMessageA
GetFullPathNameA
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
lstrlenW
CreateFileW
ReadFile
FileTimeToSystemTime
GetFileAttributesW
WideCharToMultiByte
FindFirstFileW
DosDateTimeToFileTime
GetFullPathNameW
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer

advapi32

SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
CreateWellKnownSid

shell32

SHGetPathFromIDListW
SHGetFolderLocation
SHCreateDirectoryExW
SHGetFolderPathW

ole32

CoTaskMemFree

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xout_of_range@std@@YAXPBD@Z

msvcr100

wcschr
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
_wcsnicmp
_wsplitpath_s
_wmakepath_s
wcsstr
??3@YAXPAX@Z
??2@YAPAXI@Z
_wtoi
isalpha
??_V@YAXPAX@Z
isdigit
_purecall
_stricmp
memchr
atoi
_wtoi64
strstr
fclose
_vsnwprintf_s
swprintf_s
sprintf_s
_wstat64i32
_snwprintf_s
free
malloc
fopen
fread
ferror
fwrite
ftell
fseek
wcsrchr
wcscat_s
wcscpy_s
_wcsdup
_localtime64_s
realloc
memset
memcpy
memcmp
strcmp
strncmp
_wgetcwd
calloc
_wfullpath
_waccess_s
wcsncpy_s
wcsncat_s
strncpy_s
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_vsnprintf_s
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
__CxxFrameHandler3
_wfopen_s
_CxxThrowException

shlwapi

PathFileExistsW
PathIsRootW
PathRenameExtensionW
PathRemoveBackslashW
PathAddBackslashW
PathStripToRootW
PathIsUNCW
PathMakePrettyW
PathIsSameRootW
PathFindFileNameW
PathIsRelativeW
PathStripPathW

Exports

Exports

??0ARKCommand@@QAE@AAVLogAppender@@@Z
??0ARKCommand@@QAE@ABV0@@Z
??1ARKCommand@@UAE@XZ
??_7ARKCommand@@6B@
?Commit@ARKCommand@@QAE_NXZ
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
?Perform@ARKCommand@@QAE_NXZ
?Rollback@ARKCommand@@QAE_NXZ
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z
ARKEngineDoPayloadOperation
ARKEngineDoPayloadOperation2

Sections

.text
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE6/resources/libraries/AdobePIM.dll
.dll windows:5 windows x86 arch:x86

1bfc6eeb470b95e54b73f2e787bce3c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\3.2\c3p0\dev\target\win\Release\resources\AdobePIM.pdb

Imports

msi

ord145
ord147
ord74

kernel32

InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetDateFormatW
SetFilePointer
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
GetTempPathW
GetLocalTime
FreeLibrary
LoadLibraryW
GetProcAddress
OpenProcess
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
FindFirstFileW
CreateProcessW
MoveFileExW
SetEvent
CopyFileW
GetVersionExW
GetModuleFileNameW
FindClose
ResetEvent
CreateEventW
RemoveDirectoryW
lstrcmpiW
FindNextFileW
GetDiskFreeSpaceExW
DeleteFileW
SetFileAttributesW
GetFileSize
GetExitCodeProcess
ReadFile
FlushFileBuffers
SetLastError
lstrlenA
DosDateTimeToFileTime
SetFileTime
GetFileAttributesW
lstrlenW
lstrcatW
GetFileTime
LocalFileTimeToFileTime
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetEndOfFile
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LeaveCriticalSection
GetFileAttributesA
InterlockedIncrement
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
GetACP
GetCurrentProcess
lstrcpyW
GetFileSizeEx
CompareStringW
GetProcessHeap
LocalFree
GetCurrentProcessId
CloseHandle
ReleaseMutex
OpenSemaphoreW
LocalAlloc
CreateSemaphoreW
UnhandledExceptionFilter
GetLastError
ReleaseSemaphore
Sleep
WaitForSingleObject
CreateMutexW
SetEnvironmentVariableA
SetUnhandledExceptionFilter
WriteConsoleW
SetStdHandle
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetTimeZoneInformation
GetStartupInfoW
GetFileType
SetHandleCount
GetConsoleMode
TerminateProcess
GetCPInfo
LCMapStringW
RtlUnwind
RaiseException
GetCommandLineA
HeapReAlloc
MoveFileA
MoveFileW
HeapFree
GetConsoleCP
InitializeCriticalSectionAndSpinCount
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
HeapSize
HeapDestroy
IsDebuggerPresent
LockFileEx
HeapCreate
ExitProcess
GetModuleHandleW
GetLocaleInfoW
GetStdHandle
EncodePointer
DecodePointer
HeapAlloc
IsProcessorFeaturePresent

user32

wsprintfW

advapi32

CreateWellKnownSid
SetSecurityDescriptorDacl
GetNamedSecurityInfoW
SetNamedSecurityInfoW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
InitializeSecurityDescriptor

shell32

SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
SHGetSpecialFolderPathW
SHCreateDirectoryExW

ole32

CoCreateInstance
OleRun
CoUninitialize
CoInitialize
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoCreateGuid

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantClear
SysStringLen
SysAllocString
GetErrorInfo

shlwapi

PathAppendW
PathRenameExtensionW
PathRemoveFileSpecW
PathFindFileNameW
PathIsDirectoryW
PathFileExistsW
PathRemoveBackslashW
PathStripPathW

Exports

Exports

AAMIU_Uninstall
AAMIU_getDeploymentValidationStatus
AAMIU_preInstallPropertySet
pim_copyPkgsFromACFToCFPath
pim_createLibraryRef
pim_createLibraryRefWithType
pim_createOrUpdateAAMInventory
pim_executeInstallModifersForInstalledPackages
pim_freeLiraryRef
pim_getAppletRegistrationInfo
pim_getCurrentPIMCFPath
pim_getCurrentPackagesVersion
pim_getCurrentPathType
pim_getInstalledPackagesInfo
pim_getPathOfType
pim_getStandardACFPath
pim_getStandardUSFPath
pim_getStandardUSFTempPath
pim_getUpdateStatusAtPath
pim_getUpdateStatusAtPathCInterface
pim_haveEnoughDiskSpaceIfACFLatest
pim_haveEnoughDiskSpaceToInstallPackages
pim_haveEnoughDiskSpaceToInstallPackagesCInterface
pim_installPackage
pim_postInstallPackages
pim_registerProgressTicksCallback
pim_syncFromPathToACF
pim_syncFromPathToPath
pim_syncUSFToACF
pim_uninstallAAMFromAAMCleanerTool
pim_uninstallAAMUsingAAMCleanerTool

Sections

.text
Size: 863KB - Virtual size: 862KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE6/resources/libraries/Adobe_Helperx32.exe
.exe windows:5 windows x86 arch:x86

8e97201d97b692c9c1da3acfb39f6fcc

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f9:f3:9d:69:07:65:b3:18:03:61:af:41:83:20:d1:7a:7e:1b:6e:b5
Signer

Actual PE Digest

f9:f3:9d:69:07:65:b3:18:03:61:af:41:83:20:d1:7a:7e:1b:6e:b5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Oberibsrel52\build\releases\build\Adobe_Helperx64\bin\windows\Release\Adobe_Helperx64.pdb

Imports

kernel32

GlobalFlags
lstrcmpiW
WriteFile
SetFilePointer
FlushFileBuffers
GetVersionExW
UnlockFile
SetEndOfFile
DuplicateHandle
GetFullPathNameW
InterlockedExchange
GetLocaleInfoW
GetUserDefaultUILanguage
GetSystemDirectoryW
GetFileAttributesExW
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetTempFileNameW
GetWindowsDirectoryW
GetNumberFormatW
GetTickCount
GetProfileIntW
Sleep
SearchPathW
VirtualProtect
FindResourceExW
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
RtlUnwind
RaiseException
HeapReAlloc
ExitThread
CreateThread
HeapSize
HeapQueryInformation
ExitProcess
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeResource
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetStartupInfoW
GetCPInfo
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
lstrlenA
lstrcmpA
GlobalGetAtomNameW
CompareStringW
InterlockedIncrement
GetCurrentThreadId
ResumeThread
SetThreadPriority
GlobalSize
MulDiv
GetCurrentProcessId
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedDecrement
ActivateActCtx
ReleaseActCtx
DeactivateActCtx
TlsFree
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalAlloc
GlobalHandle
GlobalUnlock
GlobalReAlloc
GlobalLock
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GlobalAddAtomW
GlobalFindAtomW
IsProcessorFeaturePresent
GlobalDeleteAtom
GetVolumeInformationW
lstrcpyW
SetCurrentDirectoryW
FindClose
GetCurrentDirectoryW
lstrlenW
lstrcmpW
GetModuleFileNameW
GetFileAttributesW
FormatMessageW
CopyFileW
FindFirstFileW
GetFileSize
SetLastError
GetLastError
CreateFileW
ReadFile
WaitForSingleObject
GetModuleHandleW
LocalFree
CloseHandle
LocalAlloc
GetCurrentProcess
GetTempPathW
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetProcAddress
LoadLibraryW
LockFile
FreeLibrary

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
CreateWellKnownSid

shell32

SHAppBarMessage
DragQueryFileW
DragFinish
ShellExecuteW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

DoDragDrop
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
RevokeDragDrop
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CoTaskMemFree

oleaut32

VariantClear
VariantChangeType
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
SysFreeString
VarBstrFromDate
VariantInit

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathStripPathW
PathRemoveBackslashW
PathFindFileNameW
PathIsRelativeW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFileExistsW
PathRemoveFileSpecW

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

user32

CreateAcceleratorTableW
SetRect
SetCursorPos
BringWindowToTop
LockWindowUpdate
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
GetNextDlgTabItem
GetIconInfo
LoadImageW
GetNextDlgGroupItem
EndDialog
CreateDialogIndirectParamW
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
MonitorFromPoint
UnionRect
UpdateLayeredWindow
IsMenu
CreateMenu
PostThreadMessageW
WaitMessage
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
RegisterClipboardFormatW
CopyIcon
CharUpperBuffW
GetDoubleClickTime
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
SubtractRect
MapDialogRect
DrawIcon
DestroyCursor
GetWindowRgn
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
CopyImage
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
CharUpperW
DestroyIcon
RealChildWindowFromPoint
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetAsyncKeyState
GetClassLongW
GetClassNameW
LoadAcceleratorsW
GetPropW
RemovePropW
IsWindow
SetFocus
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
UpdateWindow
GetClientRect
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
CopyRect
PtInRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetWindowThreadProcessId
SendMessageW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
UnhookWindowsHookEx
NotifyWinEvent
WindowFromPoint
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateW
MessageBeep
ReleaseCapture
SetCapture
GetSystemMenu
LoadMenuW
SetPropW
SetClassLongW
IsZoomed
OffsetRect
IsRectEmpty
KillTimer
SetTimer
DeleteMenu
ShowOwnedPopups
SetCursor
IntersectRect
InvalidateRect
GetCapture
IsIconic
GetDesktopWindow

gdi32

SetRectRgn
CombineRgn
PatBlt
DPtoLP
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateDIBitmap
CreateHatchBrush
CreateSolidBrush
CopyMetaFileW
CreateDCW
CreateBitmap
SetTextColor
SetBkColor
GetObjectW
DeleteObject
CreateFontIndirectW
CreateCompatibleDC
BitBlt
GetTextExtentPoint32W
SaveDC
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreatePatternBrush
DeleteDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
Escape
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
ExtTextOutW
GetDeviceCaps
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
SetPixelV
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceW
SelectObject

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

comdlg32

GetFileTitleW

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE6/resources/libraries/Adobe_Helperx64.exe
.exe windows:5 windows x64 arch:x64

efa469df8c8e7591255fc637179a4aff

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f8:7c:0c:20:85:86:97:12:69:c1:86:f0:df:e1:52:9b:c7:31:52:06
Signer

Actual PE Digest

f8:7c:0c:20:85:86:97:12:69:c1:86:f0:df:e1:52:9b:c7:31:52:06

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Oberibsrel52\build\releases\build\Adobe_Helperx64\bin\windows_x64\Release\Adobe_Helperx64.pdb

Imports

kernel32

lstrcmpiW
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetFullPathNameW
GlobalFindAtomW
GetLocaleInfoW
GetUserDefaultUILanguage
GetSystemDirectoryW
GetFileAttributesExW
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetTempFileNameW
GetWindowsDirectoryW
GetNumberFormatW
GetTickCount
GetProfileIntW
Sleep
SearchPathW
VirtualProtect
FindResourceExW
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineW
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
HeapReAlloc
ExitThread
CreateThread
HeapSize
HeapQueryInformation
ExitProcess
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetStartupInfoW
GetCPInfo
GetOEMCP
IsValidCodePage
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetTimeZoneInformation
HeapSetInformation
GetVersion
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
GlobalDeleteAtom
GetVersionExW
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
lstrlenA
lstrcmpA
GlobalGetAtomNameW
CompareStringW
GetCurrentThreadId
ResumeThread
SetThreadPriority
GlobalSize
MulDiv
GetCurrentProcessId
FindResourceW
LoadResource
LockResource
SizeofResource
ActivateActCtx
ReleaseActCtx
DeactivateActCtx
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalAlloc
GlobalHandle
GlobalUnlock
GlobalReAlloc
GlobalLock
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GlobalFlags
FreeResource
GlobalAddAtomW
GetVolumeInformationW
lstrcpyW
SetCurrentDirectoryW
FindClose
GetCurrentDirectoryW
lstrlenW
lstrcmpW
GetModuleFileNameW
GetFileAttributesW
FormatMessageW
CopyFileW
FindFirstFileW
GetFileSize
SetLastError
GetLastError
CreateFileW
ReadFile
WaitForSingleObject
GetModuleHandleW
LocalFree
CloseHandle
LocalAlloc
GetCurrentProcess
GetTempPathW
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetProcAddress
LoadLibraryW
FreeLibrary

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
CreateWellKnownSid

shell32

SHAppBarMessage
DragQueryFileW
DragFinish
ShellExecuteW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

DoDragDrop
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
RevokeDragDrop
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CoTaskMemFree

oleaut32

VariantClear
VariantChangeType
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
SysFreeString
VarBstrFromDate
VariantInit

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathStripPathW
PathRemoveBackslashW
PathFindFileNameW
PathIsRelativeW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFileExistsW
PathRemoveFileSpecW

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

user32

GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
SetRect
SetCursorPos
BringWindowToTop
LockWindowUpdate
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
GetNextDlgTabItem
GetIconInfo
LoadImageW
GetNextDlgGroupItem
EndDialog
CreateDialogIndirectParamW
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
MonitorFromPoint
UnionRect
UpdateLayeredWindow
IsMenu
CreateMenu
PostThreadMessageW
WaitMessage
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
RegisterClipboardFormatW
CopyIcon
CharUpperBuffW
GetDoubleClickTime
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
SubtractRect
MapDialogRect
DrawIcon
DestroyCursor
GetWindowRgn
SetRectEmpty
CopyImage
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
CharUpperW
DestroyIcon
GetDesktopWindow
RealChildWindowFromPoint
ClientToScreen
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
WindowFromPoint
GetClassLongPtrW
SetPropW
GetKeyboardLayout
RemovePropW
IsWindow
SetFocus
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
UpdateWindow
GetClientRect
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
CopyRect
PtInRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetWindowThreadProcessId
SendMessageW
GetWindowLongW
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
UnhookWindowsHookEx
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
OffsetRect
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateW
MessageBeep
ReleaseCapture
SetCapture
GetSystemMenu
LoadMenuW
SetClassLongPtrW
GetAsyncKeyState
GetPropW
NotifyWinEvent
IsRectEmpty
KillTimer
SetTimer
DeleteMenu
ShowOwnedPopups
SetCursor
IntersectRect
InvalidateRect
IsIconic
SetLayeredWindowAttributes
GetClassNameW
EnumDisplayMonitors
ShowWindow

gdi32

SetRectRgn
CombineRgn
PatBlt
DPtoLP
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateDIBitmap
CreateHatchBrush
CreateSolidBrush
CopyMetaFileW
CreateDCW
CreateBitmap
SetTextColor
SetBkColor
GetObjectW
DeleteObject
CreateFontIndirectW
CreateCompatibleDC
BitBlt
GetTextExtentPoint32W
SaveDC
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreatePatternBrush
DeleteDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
Escape
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
ExtTextOutW
GetDeviceCaps
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
SetPixelV
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceW
SelectObject

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

comdlg32

GetFileTitleW

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 517KB - Virtual size: 517KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE6/resources/libraries/CustomHook_Helperx64.exe
.exe windows:5 windows x64 arch:x64

26c29a016f6486da6914fe357cf8cfa9

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6e:c9:7b:d5:97:27:39:c8:02:b5:d9:f3:f1:a7:81:d9:17:90:b4:e8
Signer

Actual PE Digest

6e:c9:7b:d5:97:27:39:c8:02:b5:d9:f3:f1:a7:81:d9:17:90:b4:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Oberibsrel52\build\releases\build\CustomHook_Helperx64\vc10\x64\Release\CustomHook_Helperx64.pdb

Imports

shlwapi

PathStripToRootW
PathRemoveFileSpecW
PathIsFileSpecW
PathStripPathW
PathRemoveBackslashW
PathIsUNCW
PathFileExistsW
PathFindFileNameW
PathIsRelativeW

kernel32

HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
SetFilePointer
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetDriveTypeW
FormatMessageW
GetFileAttributesW
ReadFile
GetModuleFileNameW
CreateFileW
lstrcmpW
lstrlenW
GetTempPathW
GetLastError
GetCurrentDirectoryW
SetLastError
GetConsoleCP
RemoveDirectoryW
CloseHandle
DeleteFileW
LocalFree
GetCurrentProcess
FreeLibrary
CreateProcessW
GetModuleHandleW
LoadLibraryW
WaitForSingleObject
GetExitCodeProcess
GetProcAddress
SetFilePointerEx
OutputDebugStringW
WriteFile
CreateEventA
SetEvent
FlushFileBuffers
GetCurrentThreadId
GetCommandLineW
QueryPerformanceCounter
GetConsoleMode
SetStdHandle
SetEndOfFile
GetProcessHeap
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
LocalAlloc
HeapSize
ExitProcess
IsValidCodePage
GetOEMCP
SetHandleCount
GetCurrentProcessId
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetStartupInfoW
GetFullPathNameW
RaiseException
RtlPcToFileHeader
GetCPInfo
RtlLookupFunctionEntry
RtlUnwindEx
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetFileType
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetStdHandle
GetLocaleInfoW
HeapSetInformation
GetVersion
HeapCreate
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation

advapi32

SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
CreateWellKnownSid

shell32

CommandLineToArgvW
ord165
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW

ole32

CoTaskMemFree

Sections

.text
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE6/resources/libraries/EventMessages.dll
.dll windows:5 windows x86 arch:x86

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1d:c2:34:f0:7f:a8:c4:db:f6:f3:09:d5:be:16:f8:ba:fb:11:1b:13
Signer

Actual PE Digest

1d:c2:34:f0:7f:a8:c4:db:f6:f3:09:d5:be:16:f8:ba:fb:11:1b:13

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DE6/resources/libraries/TokenResolverx64.exe
.exe windows:5 windows x64 arch:x64

d7599ce64fbe14ef79f16fa0e0bef1c0

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:ed:15:2a:cc:42:20:3d:ce:f6:2c:b2:e9:1c:07:d4:35:2a:5b:c0
Signer

Actual PE Digest

16:ed:15:2a:cc:42:20:3d:ce:f6:2c:b2:e9:1c:07:d4:35:2a:5b:c0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\York1820\workarea\csidev\cs6\build\TokenResolver\vc10\x64\Release\TokenResolver.pdb

Imports

kernel32

WriteFile
CreateFileW
GetLastError
CloseHandle
WideCharToMultiByte
GetACP
MultiByteToWideChar
FlushFileBuffers
HeapReAlloc
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapAlloc
HeapFree
EncodePointer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
RtlUnwindEx
GetStdHandle
GetModuleFileNameW
RaiseException
RtlPcToFileHeader
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
Sleep
HeapSize

shell32

SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation

ole32

CoTaskMemFree

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE6/resources/libraries/adobeFileVersioner.dll
.dll windows:5 windows x86 arch:x86

ca13f343742168eb7b59e79c6701d85a

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

85:33:e2:97:15:aa:70:01:cd:71:70:89:fc:b8:62:2e:eb:8e:7b:10
Signer

Actual PE Digest

85:33:e2:97:15:aa:70:01:cd:71:70:89:fc:b8:62:2e:eb:8e:7b:10

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileW
GetFileSize
ReadFile
WideCharToMultiByte
GetACP
MultiByteToWideChar
Sleep
InterlockedCompareExchange
InterlockedExchange
GetUserDefaultLCID
GetStringTypeExA
FreeLibrary
LCMapStringA
LCMapStringW
LoadLibraryA
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
GetCPInfo
HeapAlloc
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
ExitProcess
HeapCreate
HeapDestroy
GetOEMCP
IsValidCodePage
GetStringTypeW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers

user32

LoadStringA

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Exports

Exports

AFV_CompareFiles
AFV_CompareVersions
AFV_GetFileVersion

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE6/resources/libraries/patchw32.dll
.dll windows:1 windows x86 arch:x86

8f296cd7497fd33e575100bd64339788

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

06:17:08:2f:26:26:73:eb:00:df:1f:19:3d:e2:25:25
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

18/12/2007, 00:00

Not After

17/12/2010, 23:59

Subject

CN=Pocket Soft\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Pocket Soft\, Inc.,O=Pocket Soft\, Inc.,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfA
DdeInitializeA
DispatchMessageA
OemToCharA
PeekMessageA
DdeUninitialize
TranslateMessage
CharToOemA
DdeCreateDataHandle
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleA
DdeFreeStringHandle
DdeConnect
LoadStringA
wvsprintfA

advapi32

RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyA
RegEnumValueW
RegSetValueExW
RegEnumKeyW
RegDeleteValueA
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyA
RegDeleteKeyW
RegEnumKeyExA
SetFileSecurityW
GetFileSecurityW
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
FreeSid
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
InitializeSecurityDescriptor
AllocateAndInitializeSid
DuplicateToken
OpenProcessToken
OpenThreadToken

ole32

CoUninitialize
CoInitialize

version

GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

ReleaseMutex
GetPrivateProfileSectionA
GetProfileStringA
GetDiskFreeSpaceA
VirtualAlloc
GetSystemDirectoryA
FlushFileBuffers
CreateDirectoryA
VirtualFree
DeleteFileW
GetFileType
MoveFileW
GetDriveTypeW
GetCommandLineA
SetStdHandle
ExitProcess
GetCurrentProcessId
GetCPInfo
GetOEMCP
GetACP
GetTimeZoneInformation
GetStartupInfoA
GlobalFree
GlobalAlloc
MulDiv
GetVersion
FreeLibrary
GetDriveTypeA
GetProcAddress
LoadLibraryA
SetEndOfFile
SetFilePointer
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetWindowsDirectoryA
GetShortPathNameA
GetFullPathNameA
MoveFileExW
MoveFileExA
CopyFileA
GetFileAttributesA
GetModuleFileNameA
MoveFileA
SetEnvironmentVariableA
GetTempPathA
SetErrorMode
CreateMutexA
SetFileApisToANSI
CreateFileW
AreFileApisANSI
WaitForSingleObject
LocalFree
LocalAlloc
GetCurrentProcess
GetLastError
GetCurrentThread
WriteFile
lstrlenA
ReadFile
SetNamedPipeHandleState
WaitNamedPipeA
GetLocalTime
SetCurrentDirectoryW
GetEnvironmentStrings
WideCharToMultiByte
GetProfileSectionA
FindNextFileW
FindClose
GetPrivateProfileStringA
GetSystemTime
DeleteFileA
SetFileAttributesA
WriteProfileStringA
WriteProfileSectionA
WritePrivateProfileStringA
WritePrivateProfileSectionA
WriteProfileStringW
WritePrivateProfileStringW
CopyFileW
GetExitCodeProcess
CreateProcessA
lstrcmpiA
SystemTimeToFileTime
GetSystemInfo
LockResource
LoadResource
FindResourceA
SetFileApisToOEM
MultiByteToWideChar
GetVolumeInformationA
SetEnvironmentVariableW
GetCurrentDirectoryW
FindFirstFileW
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetModuleHandleA
SetFileAttributesW
SetFileTime
GetFileAttributesW
GetShortPathNameW
GetFullPathNameW
GetStdHandle
RaiseException
RemoveDirectoryW
RemoveDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
RtlUnwind
CreateDirectoryW
GetLogicalDrives

Exports

Exports

RTPBatSvr
RTPRegSvr
RTPRenSvr
RTPatchApply32@12
RTPatchApply32NoCall
RTPatchEnumPatches@12
RTPatchGetCost@24
RTPatchSetAttribGet@8
RTPatchSetAttribSet@8
RTPatchSetCreate@8
RTPatchSetDelete@8
RTPatchSetDirWalk@8
RTPatchSetOpen@8
RTPatchSetRename@8

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE6/resources/libraries/updaterinventory.dll
.dll windows:5 windows x86 arch:x86

1c126edb5a5bedf745bfca7fbbcddecc

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ae:39:a2:83:fe:5c:1f:35:1e:04:e5:57:e3:6e:3b:7e:c7:46:ea:58
Signer

Actual PE Digest

ae:39:a2:83:fe:5c:1f:35:1e:04:e5:57:e3:6e:3b:7e:c7:46:ea:58

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\updater3.0\build-rel\build\releases\build\updaterinventory\vc10\outdir-Release\updaterinventory.pdb

Imports

kernel32

DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
RaiseException
HeapCreate
HeapDestroy
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
WideCharToMultiByte
GetTimeZoneInformation
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapReAlloc
EncodePointer
EnterCriticalSection
FreeLibrary
InterlockedExchange
LoadLibraryW
RtlUnwind
LCMapStringW
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
CreateFileW
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA
GetLongPathNameW
GetTempPathW
DeleteFileW
CopyFileW
SetFileAttributesW
RemoveDirectoryW
GetVersionExW
CreateDirectoryW
CreateEventA
SetEvent
ReadFile
MultiByteToWideChar
LocalFree
LocalAlloc
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
CreateThread
GetExitCodeThread
WaitForSingleObject
TerminateThread
InterlockedDecrement
CloseHandle
FindNextFileW
FindClose
GetCurrentProcess
FindFirstFileW
SetEndOfFile
LeaveCriticalSection
MoveFileW
ResetEvent
OpenEventA
InitializeCriticalSection

advapi32

SetNamedSecurityInfoW
CreateWellKnownSid
GetSecurityDescriptorDacl
RegOpenKeyExW
RegSetKeySecurity
SetEntriesInAclW
RegDeleteValueW
RegGetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHGetMalloc

ole32

CoUninitialize
CoInitializeSecurity
CoInitialize
CoInitializeEx
CoTaskMemFree
CoCreateInstance

oleaut32

SysAllocString
VariantClear
SysFreeString
VariantInit

shlwapi

PathIsFileSpecW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW

Exports

Exports

UpdaterInventoryAddToMCL
UpdaterInventoryAddToMCLWithIcon
UpdaterInventoryGetLibVersion
UpdaterInventoryIsHigherUpdatePresent
UpdaterInventoryRelease
UpdaterInventoryRemoveFromMCL
UpdaterInventorySuppressUpdates

Sections

.text
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DE6/resources/uninstall/Uninstall.db
PlatformUtil.exe
.exe windows:5 windows x86 arch:x86

2878c679cd57b80ad5d7d5a41afea4b9

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b1:cb:35:d1:76:1d:fc:9f:a8:fd:92:39:d4:09:44:08:59:56:5c:a2
Signer

Actual PE Digest

b1:cb:35:d1:76:1d:fc:9f:a8:fd:92:39:d4:09:44:08:59:56:5c:a2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Oberibsrel52\build\releases\build\PlatformUtil\vc10\Release\PlatformUtil.pdb

Imports

kernel32

GetCommandLineW
FreeConsole
GetConsoleWindow
GetStdHandle
AttachConsole
LocalFree
lstrlenW
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetCurrentThreadId

user32

SendMessageW

shell32

CommandLineToArgvW

msvcp100

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_W_J@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?id@?$codecvt@_WDH@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Xlength_error@std@@YAXPBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?_BADOFF@std@@3_JB

mpr

WNetGetUniversalNameW

msvcr100

fputwc
_unlock_file
ungetwc
ungetc
fgetpos
_fseeki64
memmove
fgetc
fsetpos
wcsstr
_lock_file
??3@YAXPAX@Z
fgetwc
memcpy_s
fwrite
wcsncmp
_vsnwprintf_s
fclose
??2@YAPAXI@Z
__CxxFrameHandler3
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
_fdopen
_open_osfhandle
setvbuf
wprintf
__iob_func
fflush
memcpy
?what@exception@std@@UBEPBDXZ
_CxxThrowException

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Setup.exe
.exe windows:5 windows x86 arch:x86

3e4197592e30621bf1daa47ac2b63c48

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:3d:0d:5e:96:3c:14:72:e5:bc:21:89:b7:05:0f:c4:aa:4e:2d:02
Signer

Actual PE Digest

19:3d:0d:5e:96:3c:14:72:e5:bc:21:89:b7:05:0f:c4:aa:4e:2d:02

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Oberibsrel52\build\releases\build\Setup\vc10\Release\Setup.pdb

Imports

mpr

WNetAddConnection2W
WNetCancelConnection2W

msvcp100

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?id@?$codecvt@_WDH@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ

msvcr100

wcsncpy_s
??2@YAPAXI@Z
??3@YAXPAX@Z
memmove
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
free
??_V@YAXPAX@Z
swprintf_s
_wsplitpath_s
rand
srand
_purecall
_time64
wcscpy_s
malloc
fgetws
_wfopen_s
atoi
fclose
??0exception@std@@QAE@XZ
_localtime64_s
asctime_s
_vsnwprintf_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_vsnprintf_s
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
strncpy_s
wcsncat_s
__iob_func
_waccess_s
_wfullpath
calloc
_wgetcwd
strncmp
realloc
wcslen
strstr
strcmp
__CxxFrameHandler3
_CxxThrowException
memset
memcpy
strlen
memcmp
strcpy
fwrite
memcpy_s
fgetwc
_lock_file
fsetpos
fgetc
fflush
_fseeki64
fgetpos
ungetc
ungetwc
_unlock_file
fputwc
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
_fdopen
_open_osfhandle
setvbuf

mfc100u

ord2164
ord9447
ord4744
ord13854
ord7176
ord4086
ord11784
ord11845
ord12753
ord890
ord6140
ord1895
ord3416
ord5261
ord11228
ord11236
ord11476
ord11477
ord13381
ord7108
ord13387
ord8530
ord3684
ord3625
ord11864
ord7126
ord1739
ord14162
ord10976
ord13267
ord11469
ord7179
ord13570
ord13567
ord13572
ord1292
ord6869
ord7624
ord8346
ord9328
ord7393
ord2089
ord7391
ord11240
ord11209
ord1990
ord4792
ord6922
ord6932
ord6931
ord4623
ord4794
ord4645
ord5118
ord4901
ord8483
ord5115
ord4923
ord4642
ord2068
ord13569
ord13571
ord13568
ord7548
ord2064
ord9498
ord1934

kernel32

GetCurrentThreadId
FlushFileBuffers
SetEvent
CreateEventA
WriteFile
OutputDebugStringW
SetFilePointerEx
InterlockedDecrement
GetVersionExW
GetCurrentThread
GetExitCodeProcess
LoadLibraryW
OpenProcess
WaitForSingleObject
GetCurrentProcess
CreateProcessW
FreeLibrary
SetFileAttributesW
lstrcpyW
LocalFree
DeleteFileW
CloseHandle
GetStdHandle
LocalAlloc
SetLastError
GetCurrentDirectoryW
GetLastError
GetTempPathW
lstrlenW
CreateFileW
GetModuleFileNameW
ReadFile
GetFileAttributesW
GetCommandLineW
GetFileSize
DeleteCriticalSection
GetProcAddress
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetModuleHandleW
InterlockedExchange
InterlockedCompareExchange
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
AttachConsole
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
AreFileApisANSI
Sleep
SetFilePointer
SetEndOfFile
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
LockFileEx
InterlockedIncrement
InitializeCriticalSection
GetTempPathA
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
FreeConsole
CreateFileA
RemoveDirectoryW

user32

FindWindowW
GetWindowThreadProcessId

advapi32

OpenProcessToken
DuplicateTokenEx
AllocateAndInitializeSid
GetLengthSid
IsValidSecurityDescriptor
RevertToSelf
AddAccessAllowedAce
SetSecurityDescriptorOwner
InitializeAcl
ImpersonateSelf
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CreateWellKnownSid
AccessCheck
SetSecurityDescriptorGroup
OpenThreadToken
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
CheckTokenMembership
FreeSid

shell32

ord165
CommandLineToArgvW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW
ord75

comctl32

InitCommonControlsEx

shlwapi

PathRemoveFileSpecW
PathMakePrettyW
PathStripToRootW
PathIsRelativeW
PathFileExistsW
PathAppendW
PathIsFileSpecW
PathIsUNCW
PathStripPathW
PathRemoveBackslashW

atl100

ord31
ord30

ole32

OleUninitialize
OleInitialize
CLSIDFromProgID
CoCreateInstance
CoTaskMemFree

oleaut32

SysStringLen
SysFreeString
SysAllocString
VariantClear
VariantInit

Sections

.text
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
atl100.dll
.dll windows:5 windows x86 arch:x86

0bbf1228f837ecb83ec693b705100bde

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

60:27:ea:17:e5:46:6e:14:4b:11:f0:12:d7:8c:d1:13:40:38:6a:e8
Signer

Actual PE Digest

60:27:ea:17:e5:46:6e:14:4b:11:f0:12:d7:8c:d1:13:40:38:6a:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

atl100.i386.pdb

Imports

kernel32

lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetModuleHandleW
lstrcmpiW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
CloseHandle
ReadFile
GetFileSize
CreateFileW
GetModuleFileNameW
WideCharToMultiByte
WaitForSingleObject
GlobalAlloc
FindResourceA
MulDiv
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
lstrcmpW
GlobalUnlock
GlobalLock
SetLastError
GlobalFree
GlobalHandle
LockResource
LocalAlloc
InterlockedExchange
LoadLibraryA
HeapFree
DecodePointer
EncodePointer
HeapAlloc
GetCommandLineA
HeapCreate
HeapDestroy
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsProcessorFeaturePresent
WriteFile
GetStdHandle
ExitProcess
HeapReAlloc
HeapSize
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetHandleCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
FlushFileBuffers
InterlockedCompareExchange
InterlockedPushEntrySList
GetProcessHeap
VirtualFree
VirtualAlloc
InterlockedPopEntrySList

Exports

Exports

AtlAdvise
AtlAxAttachControl
AtlAxCreateControl
AtlAxCreateControlEx
AtlAxCreateControlLic
AtlAxCreateControlLicEx
AtlAxCreateDialogA
AtlAxCreateDialogW
AtlAxDialogBoxA
AtlAxDialogBoxW
AtlAxGetControl
AtlAxGetHost
AtlAxWinInit
AtlCallTermFunc
AtlComModuleGetClassObject
AtlComModuleRegisterClassObjects
AtlComModuleRevokeClassObjects
AtlComModuleUnregisterServer
AtlComPtrAssign
AtlComQIPtrAssign
AtlCreateRegistrar
AtlCreateTargetDC
AtlDevModeW2A
AtlFreeMarshalStream
AtlGetObjectSourceInterface
AtlGetPerUserRegistration
AtlGetVersion
AtlHiMetricToPixel
AtlIPersistPropertyBag_Load
AtlIPersistPropertyBag_Save
AtlIPersistStreamInit_Load
AtlIPersistStreamInit_Save
AtlInternalQueryInterface
AtlLoadTypeLib
AtlMarshalPtrInProc
AtlModuleAddTermFunc
AtlPixelToHiMetric
AtlRegisterClassCategoriesHelper
AtlSetErrorInfo
AtlSetPerUserRegistration
AtlUnadvise
AtlUnmarshalPtr
AtlUpdateRegistryFromResourceD
AtlWaitWithMessageLoop
AtlWinModuleAddCreateWndData
AtlWinModuleExtractCreateWndData
AtlWinModuleInit
AtlWinModuleRegisterClassExA
AtlWinModuleRegisterClassExW
AtlWinModuleRegisterWndClassInfoA
AtlWinModuleRegisterWndClassInfoW
AtlWinModuleTerm

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mfc100u.dll
.dll windows:5 windows x86 arch:x86

6ecbd31f78660e8af99e665d8a5ae336

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

03:bb:7d:b6:0a:5e:0e:ae:6b:b0:48:63:a7:2e:df:9f:06:b3:89:c3
Signer

Actual PE Digest

03:bb:7d:b6:0a:5e:0e:ae:6b:b0:48:63:a7:2e:df:9f:06:b3:89:c3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

mfc100u.i386.pdb

Imports

kernel32

LoadLibraryA
EncodePointer
DecodePointer
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
ExpandEnvironmentStringsA
GetEnvironmentVariableA
FormatMessageA
GetEnvironmentVariableW
GlobalFlags
GlobalFindAtomW
GetSystemTime
LocalUnlock
LocalLock
GlobalGetAtomNameW
GetAtomNameW
SuspendThread
ResumeThread
SetEvent
CopyFileW
WaitForMultipleObjects
CreateEventW
ReleaseMutex
CreateMutexW
ReleaseSemaphore
CreateSemaphoreW
WaitForSingleObject
FormatMessageW
SetFileAttributesW
LocalFileTimeToFileTime
GetFileAttributesExW
GetFileSizeEx
FindNextFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameW
GetStringTypeExW
GetThreadLocale
FindClose
FindFirstFileW
GetVolumeInformationW
MoveFileW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetProfileIntW
SystemTimeToFileTime
ReplaceFileW
SetFileTime
GetFileTime
GetFullPathNameW
GetDiskFreeSpaceW
VirtualProtect
RaiseException
lstrcpyA
GetVersion
CompareStringW
IsDBCSLeadByte
GetUserDefaultLCID
FindResourceExW
lstrlenA
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GlobalAddAtomW
GetCurrentProcessId
SetErrorMode
GlobalDeleteAtom
CompareStringA
lstrcmpA
WideCharToMultiByte
GetCurrentThread
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
LoadLibraryExW
SearchPathW
GlobalSize
GetFileAttributesW
GetFileSize
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsFree
TlsAlloc
LocalFree
LocalAlloc
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
SetThreadPriority
GetLocaleInfoW
GetNumberFormatW
lstrcmpiW
GetWindowsDirectoryW
GetTickCount
GlobalFree
lstrcmpW
GetCurrentDirectoryW
Sleep
InterlockedDecrement
InterlockedIncrement
SetFilePointer
CreateFileW
GetTempFileNameW
GetTempPathW
CloseHandle
InterlockedExchange
FreeLibrary
GetVersionExW
GetSystemDirectoryW
MulDiv
lstrlenW
DeleteFileW
InitializeCriticalSection
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpyW
MultiByteToWideChar
ActivateActCtx
GetProcAddress
GetModuleHandleW
LoadLibraryW
DeactivateActCtx
SetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
FindResourceW
LoadResource
LockResource
SizeofResource
IsProcessorFeaturePresent

msvcr100

memmove_s
wcslen
memset
_wcslwr_s
memcpy_s
wcsnlen
_purecall
wmemcpy_s
wcscspn
abort
toupper
__CxxFrameHandler3
wcsspn
_wcsicmp
wcscmp
vswprintf_s
_vscwprintf
wcschr
iswspace
wcsstr
free
malloc
labs
ldiv
_wtoi
_wcsupr_s
calloc
sqrt
atan2
wcspbrk
wcsrchr
clock
memcpy
abs
cos
sin
floor
fabs
ceil
exp
_wsplitpath_s
wcscoll
_wcsicoll
wcscat_s
wcsncmp
wcscpy_s
iswdigit
iswalpha
iswalnum
iswprint
towupper
towlower
_wtol
memcmp
swscanf_s
_localtime64_s
_endthread
_beginthread
_wcsdup
strlen
_wmakepath_s
_time64
wcstod
_resetstkoflw
_recalloc
_errno
_snwprintf_s
wcstoul
__argc
__wargv
_strnicmp
wcsncpy_s
swprintf_s
_itow_s
_ltow_s
_wcsnicmp
strnlen
_mktime64
_mbscmp
_snwscanf_s
_vsnwprintf_s
wcstol
realloc
_wfullpath
_get_osfhandle
_fileno
_open_osfhandle
_fdopen
__doserrno
fread
feof
ferror
clearerr_s
fwrite
fputws
fgetws
fseek
ftell
fflush
fclose
_ultow_s
strcpy_s
_endthreadex
_beginthreadex
_msize
_expand
_mbspbrk
_mbslwr_s
_mbsicmp
memmove
_mbsrev
_mbsicoll
_mbsstr
_ismbcspace
vsprintf_s
_mbschr
_mbsrchr
_mbscoll
_mbsspn
_wcsrev
_mbsupr_s
_mbsinc
_vscprintf
_mbscspn
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_CxxThrowException

user32

GetDlgItem
CreateDialogIndirectParamW
EndDialog
GetPropW
RemovePropW
SetPropW
MapDialogRect
GetMessageTime
GetMessagePos
GetDialogBaseUnits
GetDCEx
RemoveMenu
MsgWaitForMultipleObjectsEx
CharNextW
SetWindowContextHelpId
IsDialogMessageW
ClipCursor
SendNotifyMessageW
InSendMessage
GetMenuStringW
WindowFromDC
SetScrollRange
AdjustWindowRectEx
CountClipboardFormats
GetMenu
SetMenu
GetClassInfoExW
CreateWindowExW
SetWindowPlacement
TrackPopupMenuEx
RegisterClassW
WinHelpW
GetScrollRange
SetScrollInfo
GetScrollInfo
ScrollWindow
MonitorFromWindow
SendDlgItemMessageW
SendDlgItemMessageA
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
GetMenuBarInfo
SetActiveWindow
BeginPaint
EndPaint
DefFrameProcW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
ScrollWindowEx
RealChildWindowFromPoint
OemToCharBuffA
CharToOemBuffA
GetSysColorBrush
SetClassLongW
GetParent
DrawIconEx
InflateRect
OffsetRect
PtInRect
UpdateWindow
SetTimer
ScreenToClient
GetCursorPos
IsWindowVisible
GetClientRect
KillTimer
SetRectEmpty
GetWindowRect
SendMessageW
InvalidateRect
RedrawWindow
IsWindow
SetRect
EnableWindow
IsCharLowerW
GetKeyNameTextW
GetKeyboardLayout
MapVirtualKeyExW
CallWindowProcW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
SetWindowLongW
MessageBoxW
GetWindowThreadProcessId
ShowOwnedPopups
UnregisterClassW
PostQuitMessage
DrawEdge
CharUpperBuffW
RegisterClipboardFormatW
GetActiveWindow
InsertMenuW
GetTabbedTextExtentW
ShowScrollBar
FrameRect
GetWindowRgn
ReleaseDC
GetDC
GetDoubleClickTime
GetWindowTextW
EnumChildWindows
InvertRect
HideCaret
SetMenuDefaultItem
GetMenuDefaultItem
GetScrollPos
EnableScrollBar
UpdateLayeredWindow
SetFocus
GetMessageW
GetLastActivePopup
SubtractRect
DrawFrameControl
GetMenuItemInfoW
CheckMenuItem
GetMenuState
SetWindowTextW
CharUpperW
MapVirtualKeyW
ToUnicodeEx
GetKeyboardState
CopyAcceleratorTableW
CreateAcceleratorTableW
DestroyCursor
IsClipboardFormatAvailable
GetClassLongW
GetSysColor
EnumDisplayMonitors
DestroyWindow
GetTopWindow
DestroyAcceleratorTable
NotifyWinEvent
SetWindowRgn
DeleteMenu
ModifyMenuW
IsZoomed
IsMenu
GetSystemMenu
GetNextDlgTabItem
EnableMenuItem
SetScrollPos
IntersectRect
CreatePopupMenu
AppendMenuW
EndDeferWindowPos
BeginDeferWindowPos
GetKeyState
LockWindowUpdate
SetWindowPos
UnionRect
GetUpdateRect
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
SetLayeredWindowAttributes
ValidateRect
SystemParametersInfoW
MonitorFromPoint
GetMonitorInfoW
DrawIcon
GetForegroundWindow
IsIconic
GetMenuItemID
GetMenuItemCount
GetWindow
DefWindowProcW
GetClassInfoW
PostThreadMessageW
GetSubMenu
LoadMenuW
DestroyMenu
GetSystemMetrics
TranslateAcceleratorW
LoadAcceleratorsW
GetCapture
EqualRect
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetAsyncKeyState
GetDesktopWindow
WaitMessage
DispatchMessageW
TranslateMessage
PeekMessageW
SetForegroundWindow
LoadCursorW
GetFocus
IsChild
TrackPopupMenu
LoadIconW
GetNextDlgGroupItem
DrawFocusRect
SetCursor
GetWindowLongW
GetWindowTextLengthW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
InvalidateRgn
MoveWindow
IsWindowEnabled
CreateMenu
CopyImage
GetIconInfo
FillRect
LoadImageW
CopyRect
LoadBitmapW
MapWindowPoints
MessageBeep
SetCursorPos
WindowFromPoint
ClientToScreen
SetCapture
ReleaseCapture
CopyIcon
BringWindowToTop
RegisterWindowMessageW
DestroyIcon
GetClassNameW
SetParent
ShowWindow
GetWindowPlacement
IsRectEmpty
GetDlgCtrlID
PostMessageW
GetWindowDC
DeferWindowPos
DrawStateW

gdi32

Rectangle
GetStockObject
GetPaletteEntries
CreatePalette
RealizePalette
GetNearestPaletteIndex
GetSystemPaletteEntries
GetPixel
CreatePolygonRgn
PtInRegion
FrameRgn
CreateCompatibleBitmap
SetPixelV
BitBlt
GetRgnBox
CreateRectRgnIndirect
OffsetRgn
CreateDIBSection
SetPixel
Ellipse
GetBkColor
CreateFontIndirectW
GetDeviceCaps
GetTextCharsetInfo
EnumFontFamiliesW
CreatePen
CreatePatternBrush
CreateDIBitmap
SetPaletteEntries
ExtFloodFill
StartPage
EndPage
EndDoc
DeleteDC
GetCurrentObject
PatBlt
CreateRectRgn
CombineRgn
GetBoundsRect
FillRgn
SetRectRgn
CreateRoundRectRgn
EnumFontFamiliesExW
StretchBlt
SetDIBColorTable
CreateBitmap
SetBkColor
SelectPalette
GetDIBits
Polyline
ExtTextOutW
CreateHatchBrush
CreateEllipticRgn
RoundRect
StretchDIBits
CreateFontW
GetCharWidthW
LPtoDP
CreateMetaFileW
CloseMetaFile
DeleteMetaFile
GetViewportOrgEx
PtVisible
RectVisible
TextOutW
Escape
GetClipBox
Polygon
GetCurrentPositionEx
MoveToEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SaveDC
RestoreDC
GetROP2
GetBkMode
GetPolyFillMode
GetStretchBltMode
GetNearestColor
GetTextFaceW
GetWindowExtEx
GetViewportExtEx
SetTextColor
SetMapMode
SetWindowExtEx
ScaleWindowExtEx
GetWindowOrgEx
SetWindowOrgEx
IntersectClipRect
CreateDCW
SetBrushOrgEx
SetAbortProc
StartDocW
DPtoLP
AbortDoc
CopyMetaFileW
UnrealizeObject
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
OffsetWindowOrgEx
SelectClipRgn
ExcludeClipRect
OffsetClipRgn
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
SelectClipPath
GetClipRgn
ExtSelectClipRgn
PlayMetaFileRecord
PlayMetaFile
EnumMetaFile
ExtCreatePen
CreateDIBPatternBrushPt
GetMapMode
GetTextColor
GetObjectType
SelectObject
DeleteObject
CreateCompatibleDC
CreateSolidBrush
GetObjectW
GetTextExtentPoint32W
GetTextMetricsW
GetTextAlign

shlwapi

PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathRemoveExtensionW
PathFindFileNameW
PathFindExtensionW
SHStrDupW
UrlUnescapeW

comctl32

ImageList_GetIcon
ImageList_DrawEx
ImageList_AddMasked
ImageList_Remove
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ImageList_GetIconSize
ImageList_GetImageCount

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcp100.dll
.dll windows:5 windows x86 arch:x86

7a0d9f66efd1839f136ca6896fa52dfa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e5:b6:3e:89:c1:a5:ee:f3:14:b6:1c:15:d6:30:26:37:84:27:2b:bc
Signer

Actual PE Digest

e5:b6:3e:89:c1:a5:ee:f3:14:b6:1c:15:d6:30:26:37:84:27:2b:bc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcp100.i386.pdb

Imports

msvcr100

rand_s
memset
memmove
fgetc
ungetc
_lock_file
_unlock_file
fflush
setvbuf
memcpy_s
fwrite
fgetpos
_fseeki64
fsetpos
fclose
_fsopen
_wfsopen
fseek
ldexp
wcslen
memchr
memmove_s
sprintf_s
_Strftime
strcspn
setlocale
_realloc_crt
strcmp
_malloc_crt
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
_purecall
strerror
fgetwc
fputwc
ungetwc
__uncaught_exception
towlower
towupper
_create_locale
_ui64toa_s
_free_locale
__pctype_func
_errno
___mb_cur_max_l_func
___lc_codepage_func
___lc_handle_func
__crtCompareStringA
memcmp
___lc_collate_cp_func
__crtLCMapStringA
__iob_func
?Alloc@Concurrency@@YAPAXI@Z
?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z
?Yield@Context@Concurrency@@SAXXZ
??1critical_section@Concurrency@@QAE@XZ
??0invalid_link_target@Concurrency@@QAE@PBD@Z
??0message_not_found@Concurrency@@QAE@XZ
??0bad_target@Concurrency@@QAE@XZ
??0invalid_operation@Concurrency@@QAE@PBD@Z
?set@event@Concurrency@@QAEXXZ
?wait@event@Concurrency@@QAEII@Z
??1event@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
?Free@Concurrency@@YAXPAX@Z
??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ
?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ
?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ
??1_SpinLock@details@Concurrency@@QAE@XZ
??0_SpinLock@details@Concurrency@@QAE@ACJ@Z
?Log2@details@Concurrency@@YAKI@Z
isupper
_calloc_crt
islower
__crtLCMapStringW
isspace
tolower
strtod
__crtCompareStringW
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__clean_type_info_names_internal
fputs
fputc
abort
log
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_Getmonths
_Getdays
malloc
__CxxFrameHandler3
??2@YAPAXI@Z
___mb_cur_max_func
memcpy
strlen
??_V@YAXPAX@Z
_Gettnames
localeconv
free
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBDH@Z
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??1exception@std@@UAE@XZ
??0operation_timed_out@Concurrency@@QAE@XZ
??0exception@std@@QAE@XZ

kernel32

GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
Sleep
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
GetLocaleInfoW
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
InterlockedCompareExchange
DecodePointer
EncodePointer
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetSystemTimeAsFileTime

Exports

Exports

??0?$_Yarn@D@std@@QAE@ABV01@@Z
??0?$_Yarn@D@std@@QAE@PBD@Z
??0?$_Yarn@D@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$codecvt@_WDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@_W@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Concurrent_queue_base_v4@details@Concurrency@@IAE@I@Z
??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@ABV_Concurrent_queue_base_v4@12@@Z
??0_Container_base12@std@@QAE@ABU01@@Z
??0_Container_base12@std@@QAE@XZ
??0_Init_locks@std@@QAE@XZ
??0_Locimp@locale@std@@AAE@ABV012@@Z
??0_Locimp@locale@std@@AAE@_N@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
??0_Lockit@std@@QAE@XZ
??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??0_Mutex@std@@QAE@XZ
??0_Runtime_object@details@Concurrency@@QAE@H@Z
??0_Runtime_object@details@Concurrency@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_UShinit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0agent@Concurrency@@QAE@AAVScheduleGroup@1@@Z
??0agent@Concurrency@@QAE@AAVScheduler@1@@Z
??0agent@Concurrency@@QAE@XZ
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0facet@locale@std@@IAE@I@Z
??0id@locale@std@@QAE@I@Z
??0ios_base@std@@IAE@XZ
??0ios_base@std@@QAE@ABV01@@Z
??0time_base@std@@QAE@I@Z
??1?$_Yarn@D@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$codecvt@DDH@std@@MAE@XZ
??1?$codecvt@GDH@std@@MAE@XZ
??1?$codecvt@_WDH@std@@MAE@XZ
??1?$ctype@D@std@@MAE@XZ
??1?$ctype@G@std@@MAE@XZ
??1?$ctype@_W@std@@MAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Concurrent_queue_base_v4@details@Concurrency@@MAE@XZ
??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@XZ
??1_Concurrent_vector_base_v4@details@Concurrency@@IAE@XZ
??1_Container_base12@std@@QAE@XZ
??1_Init_locks@std@@QAE@XZ
??1_Locimp@locale@std@@MAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Mutex@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_UShinit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1agent@Concurrency@@UAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1facet@locale@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??4?$_Iosb@H@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@D@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEAAV01@ABV01@@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEAAV01@ABV01@@Z
??4?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEAAV01@ABV01@@Z
??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_W@std@@QAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Container_base0@std@@QAEAAU01@ABU01@@Z
??4_Container_base12@std@@QAEAAU01@ABU01@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_UShinit@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??4ios_base@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
??7ios_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
??Bios_base@std@@QBEPAXXZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$codecvt@DDH@std@@6B@
??_7?$codecvt@GDH@std@@6B@
??_7?$codecvt@_WDH@std@@6B@
??_7?$ctype@D@std@@6B@
??_7?$ctype@G@std@@6B@
??_7?$ctype@_W@std@@6B@
??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7_Locimp@locale@std@@6B@
??_7codecvt_base@std@@6B@
??_7ctype_base@std@@6B@
??_7ios_base@std@@6B@
??_7time_base@std@@6B@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@
??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@
??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_F?$codecvt@DDH@std@@QAEXXZ
??_F?$codecvt@GDH@std@@QAEXXZ
??_F?$codecvt@_WDH@std@@QAEXXZ
??_F?$ctype@D@std@@QAEXXZ
??_F?$ctype@G@std@@QAEXXZ
??_F?$ctype@_W@std@@QAEXXZ
??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F_Locimp@locale@std@@QAEXXZ
??_F_Locinfo@std@@QAEXXZ
??_F_Timevec@std@@QAEXXZ
??_Fcodecvt_base@std@@QAEXXZ
??_Fctype_base@std@@QAEXXZ
??_Ffacet@locale@std@@QAEXXZ
??_Fid@locale@std@@QAEXXZ
??_Ftime_base@std@@QAEXXZ
?NFS_Allocate@details@Concurrency@@YAPAXIIPAX@Z
?NFS_Free@details@Concurrency@@YAXPAX@Z
?NFS_GetLineSize@details@Concurrency@@YAIXZ
?_Addcats@_Locinfo@std@@QAEAAV12@HPBD@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_Addstd@ios_base@std@@SAXPAV12@@Z
?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXXZ
?_Assign@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXABV123@@Z
?_Atexit@@YAXP6AXXZ@Z
?_BADOFF@std@@3_JB
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
?_Callfns@ios_base@std@@AAEXW4event@12@@Z
?_Clocptr@_Locimp@locale@std@@0PAV123@A
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Donarrow@?$ctype@G@std@@IBEDGD@Z
?_Donarrow@?$ctype@_W@std@@IBED_WD@Z
?_Dowiden@?$ctype@G@std@@IBEGD@Z
?_Dowiden@?$ctype@_W@std@@IBE_WD@Z
?_Empty@?$_Yarn@D@std@@QBE_NXZ
?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADDH@Z
?_Findarr@ios_base@std@@AAEAAU_Iosarray@12@H@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBDIIII@Z
?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBDIIII@Z
?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBDIIII@Z
?_GetCombinableSize@details@Concurrency@@YAIXZ
?_GetCurrentThreadId@details@Concurrency@@YAKXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@GDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@facet@locale@std@@SAIPAPBV123@PBV23@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Getctype@_Locinfo@std@@QBE?AU_Ctypevec@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getdateorder@_Locinfo@std@@QBEHXZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z
?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z
?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z
?_Getfmt@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getfmt@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getfmt@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HABVlocale@2@@Z
?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAAH@Z
?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAAH@Z
?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAAH@Z
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getmonths@_Locinfo@std@@QBEPBDXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
?_Getpfirst@_Container_base12@std@@QBEPAPAU_Iterator_base12@2@XZ
?_Getptr@_Timevec@std@@QBEPAXXZ
?_Gettnames@_Locinfo@std@@QBE?AV_Timevec@2@XZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBE_JXZ
?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBE_JXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnpreinc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gnpreinc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Hexdig@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHDDDD@Z
?_Hexdig@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHGGGG@Z
?_Hexdig@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAH_W000@Z
?_Id_cnt@id@locale@std@@0HA
?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Incref@facet@locale@std@@QAEXXZ

Sections

.text
Size: 371KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcr100.dll
.dll windows:5 windows x86 arch:x86

5271d5ce8b44dd47bc92563e27585466

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d7:f5:a2:53:5c:85:b6:f2:e9:6c:04:7c:89:4e:da:ec:fa:9d:26:f3
Signer

Actual PE Digest

d7:f5:a2:53:5c:85:b6:f2:e9:6c:04:7c:89:4e:da:ec:fa:9d:26:f3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcr100.i386.pdb

Imports

kernel32

EncodePointer
DecodePointer
RaiseException
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetCurrentThreadId
TlsGetValue
GetCommandLineW
GetCommandLineA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
FindNextFileA
FindFirstFileExA
FindClose
FindNextFileW
FindFirstFileExW
GetLogicalDrives
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
Sleep
Beep
GetFileAttributesA
SetFileAttributesA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameA
GetDriveTypeW
GetCurrentProcessId
CreateDirectoryA
MoveFileA
RemoveDirectoryA
GetDriveTypeA
DeleteFileA
GetFileAttributesW
SetEnvironmentVariableW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
DeleteFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryA
FreeLibrary
CreateProcessW
ReadFile
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocalTime
WideCharToMultiByte
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
InterlockedPopEntrySList
InterlockedFlushSList
QueryDepthSList
InterlockedPushEntrySList
CreateTimerQueue
CreateTimerQueueTimer
DeleteTimerQueueTimer
SetEvent
CreateEventW
SwitchToThread
SignalObjectAndWait
TryEnterCriticalSection
GetTickCount
VirtualFree
GetVersionExW
SetThreadPriority
VirtualAlloc
GetSystemInfo
GetProcessAffinityMask
VirtualProtect
SetThreadAffinityMask
InitializeSListHead
ReleaseSemaphore
CreateSemaphoreW
WaitForMultipleObjects
GetThreadPriority
LoadLibraryW
SleepEx
OutputDebugStringW
FreeLibraryAndExitThread
GetModuleHandleA
GetThreadTimes
DebugBreak
MultiByteToWideChar
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
GetTimeFormatW
GetDateFormatW
RtlUnwind
HeapAlloc
HeapFree
HeapCreate
HeapDestroy
HeapQueryInformation
HeapReAlloc
HeapSize
HeapValidate
HeapCompact
HeapWalk
VirtualQuery
SetHandleCount
GetFileType
GetStartupInfoW
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
CreateFileW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreatePipe
SetStdHandle
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
WriteConsoleW
ReadConsoleW
SetEndOfFile
GetProcessHeap
InterlockedExchange
LockFile
UnlockFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetConsoleCtrlHandler
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringW
CompareStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsProcessorFeaturePresent

Exports

Exports

$I10_OUTPUT
??0?$_SpinWait@$00@details@Concurrency@@QAE@P6AXXZ@Z
??0?$_SpinWait@$0A@@details@Concurrency@@QAE@P6AXXZ@Z
??0SchedulerPolicy@Concurrency@@QAA@IZZ
??0SchedulerPolicy@Concurrency@@QAE@ABV01@@Z
??0SchedulerPolicy@Concurrency@@QAE@XZ
??0_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ
??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_ReaderWriterLock@details@Concurrency@@QAE@XZ
??0_ReentrantBlockingLock@details@Concurrency@@QAE@XZ
??0_ReentrantLock@details@Concurrency@@QAE@XZ
??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_SpinLock@details@Concurrency@@QAE@ACJ@Z
??0_TaskCollection@details@Concurrency@@QAE@XZ
??0_Timer@details@Concurrency@@IAE@I_N@Z
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0__non_rtti_object@std@@QAE@PBD@Z
??0bad_cast@std@@AAE@PBQBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_target@Concurrency@@QAE@PBD@Z
??0bad_target@Concurrency@@QAE@XZ
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0context_self_unblock@Concurrency@@QAE@PBD@Z
??0context_self_unblock@Concurrency@@QAE@XZ
??0context_unblock_unbalanced@Concurrency@@QAE@PBD@Z
??0context_unblock_unbalanced@Concurrency@@QAE@XZ
??0critical_section@Concurrency@@QAE@XZ
??0default_scheduler_exists@Concurrency@@QAE@PBD@Z
??0default_scheduler_exists@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??0improper_lock@Concurrency@@QAE@PBD@Z
??0improper_lock@Concurrency@@QAE@XZ
??0improper_scheduler_attach@Concurrency@@QAE@PBD@Z
??0improper_scheduler_attach@Concurrency@@QAE@XZ
??0improper_scheduler_detach@Concurrency@@QAE@PBD@Z
??0improper_scheduler_detach@Concurrency@@QAE@XZ
??0improper_scheduler_reference@Concurrency@@QAE@PBD@Z
??0improper_scheduler_reference@Concurrency@@QAE@XZ
??0invalid_link_target@Concurrency@@QAE@PBD@Z
??0invalid_link_target@Concurrency@@QAE@XZ
??0invalid_multiple_scheduling@Concurrency@@QAE@PBD@Z
??0invalid_multiple_scheduling@Concurrency@@QAE@XZ
??0invalid_operation@Concurrency@@QAE@PBD@Z
??0invalid_operation@Concurrency@@QAE@XZ
??0invalid_oversubscribe_operation@Concurrency@@QAE@PBD@Z
??0invalid_oversubscribe_operation@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_key@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_key@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_value@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_value@Concurrency@@QAE@XZ
??0message_not_found@Concurrency@@QAE@PBD@Z
??0message_not_found@Concurrency@@QAE@XZ
??0missing_wait@Concurrency@@QAE@PBD@Z
??0missing_wait@Concurrency@@QAE@XZ
??0nested_scheduler_missing_detach@Concurrency@@QAE@PBD@Z
??0nested_scheduler_missing_detach@Concurrency@@QAE@XZ
??0operation_timed_out@Concurrency@@QAE@PBD@Z
??0operation_timed_out@Concurrency@@QAE@XZ
??0reader_writer_lock@Concurrency@@QAE@XZ
??0scheduler_not_attached@Concurrency@@QAE@PBD@Z
??0scheduler_not_attached@Concurrency@@QAE@XZ
??0scheduler_resource_allocation_error@Concurrency@@QAE@J@Z
??0scheduler_resource_allocation_error@Concurrency@@QAE@PBDJ@Z
??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z
??0scoped_lock@reader_writer_lock@Concurrency@@QAE@AAV12@@Z
??0scoped_lock_read@reader_writer_lock@Concurrency@@QAE@AAV12@@Z
??0task_canceled@details@Concurrency@@QAE@PBD@Z
??0task_canceled@details@Concurrency@@QAE@XZ
??0unsupported_os@Concurrency@@QAE@PBD@Z
??0unsupported_os@Concurrency@@QAE@XZ
??1SchedulerPolicy@Concurrency@@QAE@XZ
??1_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ
??1_ReentrantBlockingLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_SpinLock@details@Concurrency@@QAE@XZ
??1_TaskCollection@details@Concurrency@@QAE@XZ
??1_Timer@details@Concurrency@@IAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1critical_section@Concurrency@@QAE@XZ
??1event@Concurrency@@QAE@XZ
??1exception@std@@UAE@XZ
??1reader_writer_lock@Concurrency@@QAE@XZ
??1scoped_lock@critical_section@Concurrency@@QAE@XZ
??1scoped_lock@reader_writer_lock@Concurrency@@QAE@XZ
??1scoped_lock_read@reader_writer_lock@Concurrency@@QAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??2@YAPAXIHPBDH@Z
??3@YAXPAX@Z
??4?$_SpinWait@$00@details@Concurrency@@QAEAAV012@ABV012@@Z
??4?$_SpinWait@$0A@@details@Concurrency@@QAEAAV012@ABV012@@Z
??4SchedulerPolicy@Concurrency@@QAEAAV01@ABV01@@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
??9type_info@@QBE_NABV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_F?$_SpinWait@$00@details@Concurrency@@QAEXXZ
??_F?$_SpinWait@$0A@@details@Concurrency@@QAEXXZ
??_Fbad_cast@std@@QAEXXZ
??_Fbad_typeid@std@@QAEXXZ
??_U@YAPAXI@Z
??_U@YAPAXIHPBDH@Z
??_V@YAXPAX@Z
?Alloc@Concurrency@@YAPAXI@Z
?Block@Context@Concurrency@@SAXXZ
?Create@CurrentScheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z
?Create@Scheduler@Concurrency@@SAPAV12@ABVSchedulerPolicy@2@@Z
?CreateResourceManager@Concurrency@@YAPAUIResourceManager@1@XZ
?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@XZ
?CurrentContext@Context@Concurrency@@SAPAV12@XZ
?Detach@CurrentScheduler@Concurrency@@SAXXZ
?DisableTracing@Concurrency@@YAJXZ
?EnableTracing@Concurrency@@YAJXZ
?Free@Concurrency@@YAXPAX@Z
?Get@CurrentScheduler@Concurrency@@SAPAVScheduler@2@XZ
?GetExecutionContextId@Concurrency@@YAIXZ
?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ
?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ
?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ
?GetPolicyValue@SchedulerPolicy@Concurrency@@QBEIW4PolicyElementKey@2@@Z
?GetProcessorCount@Concurrency@@YAIXZ
?GetProcessorNodeCount@Concurrency@@YAIXZ
?GetSchedulerId@Concurrency@@YAIXZ
?GetSharedTimerQueue@details@Concurrency@@YAPAXXZ
?Id@Context@Concurrency@@SAIXZ
?Id@CurrentScheduler@Concurrency@@SAIXZ
?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ
?Log2@details@Concurrency@@YAKI@Z
?Oversubscribe@Context@Concurrency@@SAX_N@Z
?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPAX@Z
?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ
?ScheduleGroupId@Context@Concurrency@@SAIXZ
?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z
?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QAEXII@Z
?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z
?SetPolicyValue@SchedulerPolicy@Concurrency@@QAEIW4PolicyElementKey@2@I@Z
?VirtualProcessorId@Context@Concurrency@@SAIXZ
?Yield@Context@Concurrency@@SAXXZ
?_Abort@_StructuredTaskCollection@details@Concurrency@@AAEXXZ
?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QAEXPAX@Z
?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Acquire@_ReentrantLock@details@Concurrency@@QAEXXZ
?_Acquire@_ReentrantPPLLock@details@Concurrency@@QAEXPAX@Z
?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_Cancel@_StructuredTaskCollection@details@Concurrency@@QAEXXZ
?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ
?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ
?_ConcRT_Assert@details@Concurrency@@YAXPBD0H@Z
?_ConcRT_CoreAssert@details@Concurrency@@YAXPBD0H@Z
?_ConcRT_DumpMessage@details@Concurrency@@YAXPB_WZZ
?_ConcRT_Trace@details@Concurrency@@YAXHPB_WZZ
?_Copy_str@exception@std@@AAEXPBD@Z
?_DoYield@?$_SpinWait@$00@details@Concurrency@@IAEXXZ
?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ
?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QAE_NXZ
?_IsCanceling@_TaskCollection@details@Concurrency@@QAE_NXZ
?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IAEKXZ
?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IAEKXZ
?_Release@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Release@_NonReentrantPPLLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantPPLLock@details@Concurrency@@QAEXXZ
?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_Reset@?$_SpinWait@$00@details@Concurrency@@IAEXXZ
?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ
?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QAEXI@Z
?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QAEXI@Z
?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IAE_NXZ
?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IAE_NXZ
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ
?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QAE_NXZ
?_SpinYield@Context@Concurrency@@SAXXZ
?_Start@_Timer@details@Concurrency@@IAEXXZ
?_Stop@_Timer@details@Concurrency@@IAEXXZ
?_Tidy@exception@std@@AAEXXZ
?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z
?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QAE_NXZ
?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QAE_NXZ
?_TryAcquire@_ReentrantLock@details@Concurrency@@QAE_NXZ
?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QAE_NXZ
?_Type_info_dtor@type_info@@CAXPAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_ValidateExecute@@YAHP6GHXZ@Z
?_ValidateRead@@YAHPBXI@Z
?_ValidateWrite@@YAHPAXI@Z
?_Value@_SpinCount@details@Concurrency@@SAIXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCompare@@YA_NPBX0@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPBG00II@Z
?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?_open@@YAHPBDHH@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?_wopen@@YAHPB_WHH@Z
?_wsopen@@YAHPB_WHHH@Z
?before@type_info@@QBEHABV1@@Z
?get_error_code@scheduler_resource_allocation_error@Concurrency@@QBEJXZ
?lock@critical_section@Concurrency@@QAEXXZ
?lock@reader_writer_lock@Concurrency@@QAEXXZ
?lock_read@reader_writer_lock@Concurrency@@QAEXXZ
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
?native_handle@critical_section@Concurrency@@QAEAAV12@XZ
?raw_name@type_info@@QBEPBDXZ
?reset@event@Concurrency@@QAEXXZ
?set@event@Concurrency@@QAEXXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?try_lock@critical_section@Concurrency@@QAE_NXZ
?try_lock@reader_writer_lock@Concurrency@@QAE_NXZ
?try_lock_read@reader_writer_lock@Concurrency@@QAE_NXZ
?unexpected@@YAXXZ
?unlock@critical_section@Concurrency@@QAEXXZ
?unlock@reader_writer_lock@Concurrency@@QAEXXZ
?vswprintf@@YAHPA_WIPB_WPAD@Z
?wait@Concurrency@@YAXI@Z
?wait@event@Concurrency@@QAEII@Z
?wait_for_multiple@event@Concurrency@@SAIPAPAV12@I_NI@Z
?what@exception@std@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___fls_getvalue@4
___fls_setvalue@8
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__control87_2
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtLCMapStringA
__crtLCMapStringW
__daylight
__dllonexit
__doserrno
__dstbias
__fpecode
__free_locale
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lconv
__lconv_init
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abnormal_termination
_abs64
_access
_access_s
_acmdln
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_cprintf
_cprintf_l
_cprintf_p

Sections

.text
Size: 708KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/DECore/DECore.pimx
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/DECore/DECore.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/DWA/DWA.pima
.zip
AdobeIDFlex.swf
DWAFlex.swf
DWANative.dll
.dll windows:5 windows x86 arch:x86

cab3415d2f5fc9d0d08fbf16020c8b50

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b5:7e:72:d4:10:41:48:f8:dc:8a:24:2a:6f:50:45:40:c6:1c:fa:50
Signer

Actual PE Digest

b5:7e:72:d4:10:41:48:f8:dc:8a:24:2a:6f:50:45:40:c6:1c:fa:50

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\3.0\c3p0\dev5\target\win\Release\DWANative.pdb

Imports

shlwapi

PathFileExistsW
PathStripPathW
PathIsNetworkPathW
PathRemoveBackslashW
PathRemoveFileSpecW
PathIsDirectoryW
PathAppendW

kernel32

CloseHandle
GetCurrentProcessId
LocalFree
GetDateFormatW
SetFilePointer
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLocalTime
GetFileSize
FindFirstFileW
CreateProcessW
SetEvent
WideCharToMultiByte
Sleep
GetExitCodeProcess
ReadFile
GetModuleFileNameW
FlushFileBuffers
FindClose
RemoveDirectoryW
FindNextFileW
DeleteFileW
lstrlenA
InterlockedIncrement
InterlockedDecrement
GetShortPathNameW
OpenFile
GetDriveTypeW
GetCurrentProcess
GetModuleHandleW
FormatMessageW
GetVersionExW
IsProcessorFeaturePresent
GetProcAddress
GlobalMemoryStatusEx
OpenEventW
GetDiskFreeSpaceExW
CreateThread
ExitProcess
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetEndOfFile
FreeLibrary
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LoadLibraryW
LeaveCriticalSection
GetFileAttributesA
GetFileAttributesW
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
ConnectNamedPipe
CreateNamedPipeW
GetCPInfo
SetFileAttributesW
CopyFileW
lstrlenW
GetACP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
SetEnvironmentVariableA
CompareStringW
CreateSemaphoreW
GetLastError
ReleaseSemaphore
WaitForSingleObject
HeapSize
GetConsoleCP
GetConsoleMode
GetSystemInfo
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetTimeZoneInformation
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
IsValidCodePage
GetOEMCP
HeapCreate
GetStdHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
GetCommandLineA
HeapReAlloc
HeapFree
DecodePointer
EncodePointer
HeapAlloc

user32

SendMessageW
GetActiveWindow
GetSystemMetrics
wsprintfW

advapi32

SetNamedSecurityInfoW
RegOpenKeyExW
RegQueryValueExW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW

shell32

SHGetFolderLocation
SHGetFolderPathW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteExW
SHBrowseForFolderW
SHGetSpecialFolderPathW
ord680
SHCreateDirectoryExW

ole32

CLSIDFromProgID
StringFromGUID2
CLSIDFromString
OleRun
CoInitialize
CoTaskMemFree
CoCreateGuid
CoCreateInstance

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantClear
SysAllocString
GetErrorInfo

Exports

Exports

finalizeApplet
freeMemory
initializeApplet
processMessage

Sections

.text
Size: 567KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Setup.exe
.exe windows:5 windows x86 arch:x86

9f4ff423a447ada46dd9fbac63bf339d

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9b:77:70:9a:62:91:c0:af:a5:a1:ca:2e:37:d9:d5:76:98:7c:83:b6
Signer

Actual PE Digest

9b:77:70:9a:62:91:c0:af:a5:a1:ca:2e:37:d9:d5:76:98:7c:83:b6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Oberibsreldev5\build\releases\build\Redirector\vc10\Release\Setup.pdb

Imports

shlwapi

PathRemoveFileSpecW

kernel32

TerminateProcess
FreeConsole
GetConsoleWindow
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetModuleFileNameW
GetStdHandle
AttachConsole
CreateFileW
WriteConsoleW
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLastError
GetFileType
GetCommandLineW
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
HeapAlloc
HeapFree
EncodePointer
DecodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
SetHandleCount
DeleteCriticalSection
ExitProcess
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer

user32

SendMessageW

shell32

CommandLineToArgvW

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 306KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TokenGenerator64.exe
.exe windows:5 windows x64 arch:x64

8266186537c9574129823c009a79f97f

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:7e:49:d2:23:88:d7:c3:55:98:b1:ef:66:9d:78:29:04:81:5e:70
Signer

Actual PE Digest

04:7e:49:d2:23:88:d7:c3:55:98:b1:ef:66:9d:78:29:04:81:5e:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\oobe\3.0\c3p0\dev5\target\win\Release\TokenGenerator64.pdb

Imports

kernel32

CloseHandle
GetCurrentProcessId
LocalFree
GetDateFormatW
SetFilePointer
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLocalTime
GetCommandLineW
WideCharToMultiByte
Sleep
GetModuleFileNameW
FlushFileBuffers
lstrlenA
HeapSize
EnterCriticalSection
CreateSemaphoreW
GetLastError
ReleaseSemaphore
WaitForSingleObject
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
HeapReAlloc
IsValidCodePage
GetOEMCP
LeaveCriticalSection
LoadLibraryW
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetStartupInfoW
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStdHandle
HeapSetInformation
GetVersion
HeapCreate
GetProcAddress
GetModuleHandleW
ExitProcess
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
RtlUnwindEx
FreeEnvironmentStringsW
GetEnvironmentStringsW

user32

wsprintfW

shell32

SHGetSpecialFolderPathW
CommandLineToArgvW

ole32

CLSIDFromProgID
CLSIDFromString
OleRun
CoCreateInstance
CoInitialize

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantClear
GetErrorInfo
SysAllocString

shlwapi

PathFileExistsW

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZStringResources/cs_CZ/stringtable.xml
.vbs .xml polyglot
ZStringResources/da_DK/stringtable.xml
.vbs .xml polyglot
ZStringResources/de_DE/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_GB/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_US/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_XM/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_ES/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_LA/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_MX/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_NA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fi_FI/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_CA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_FR/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_XM/stringtable.xml
.vbs .xml polyglot
ZStringResources/hu_HU/stringtable.xml
.vbs .xml polyglot
ZStringResources/it_IT/stringtable.xml
.vbs .xml polyglot
ZStringResources/ja_JP/stringtable.xml
.vbs .xml polyglot
ZStringResources/ko_KR/stringtable.xml
.vbs .xml polyglot
ZStringResources/nb_NO/stringtable.xml
.vbs .xml polyglot
ZStringResources/nl_NL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pl_PL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pt_BR/stringtable.xml
.vbs .xml polyglot
ZStringResources/ru_RU/stringtable.xml
.vbs .xml polyglot
ZStringResources/sv_SE/stringtable.xml
.vbs .xml polyglot
ZStringResources/tr_TR/stringtable.xml
.vbs .xml polyglot
ZStringResources/uk_UA/stringtable.xml
.vbs .xml polyglot
ZStringResources/zh_CN/stringtable.xml
.vbs .xml polyglot
ZStringResources/zh_TW/stringtable.xml
.vbs .xml polyglot
adobeIdManifest.xml
.xml
assets/fonts_clean.swf
assets/fonts_system.swf
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/DWA/DWA.pimx
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/DWA/DWA.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/LWA/LWA.pima
.zip
AAM Registration Notifier.exe
.exe windows:5 windows x86 arch:x86

67fea5fef213e1a0a746934b53e82d2b

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

49:9d:8e:fc:23:61:51:92:8d:63:45:13:38:12:53:79:61:8d:5a:a7
Signer

Actual PE Digest

49:9d:8e:fc:23:61:51:92:8d:63:45:13:38:12:53:79:61:8d:5a:a7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\oobe\3.0\c3p0\dev5\target\win\Release\AAMRegistrationNotifier.pdb

Imports

user32

DefWindowProcW
UpdateWindow
SendMessageW
CreateWindowExW
ShowWindow
LoadIconW
RegisterClassExW
LoadAcceleratorsW
wsprintfW
EndPaint
DestroyWindow
TranslateAcceleratorW
GetMessageW
PostQuitMessage
PostMessageW
LoadCursorW
BeginPaint
TranslateMessage
DispatchMessageW

ole32

CoCreateInstance
OleRun
CoInitialize

oleaut32

GetErrorInfo
SysFreeString
VariantClear
SysAllocString

shlwapi

PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW

kernel32

UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapSize
TerminateProcess
GetCurrentProcess
CreateEventW
GetProcessHeap
SetEndOfFile
WriteConsoleW
SetStdHandle
HeapReAlloc
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetOEMCP
GetACP
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
GetCommandLineW
WaitForSingleObject
SetEvent
GetCurrentThreadId
CloseHandle
CreateThread
ReleaseSemaphore
GetLastError
CreateSemaphoreW
LocalAlloc
OpenSemaphoreW
GetCurrentProcessId
LocalFree
GetDateFormatW
SetFilePointer
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLocalTime
FreeLibrary
LoadLibraryW
GetProcAddress
GetSystemDefaultLangID
GetUserDefaultLCID
WideCharToMultiByte
Sleep
ReadFile
GetModuleFileNameW
FlushFileBuffers
GetEnvironmentStringsW
GetUserDefaultUILanguage
DeleteFileW
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByteEx
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapSetInformation
GetStartupInfoW
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
RtlUnwind
RaiseException
LCMapStringW
GetCPInfo
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
GetStdHandle
FreeEnvironmentStringsW

advapi32

InitializeSecurityDescriptor
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
SetSecurityDescriptorDacl

shell32

CommandLineToArgvW
ShellExecuteW
Shell_NotifyIconW

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AMT/AdobeConfig.xml
.xml
AMT/application.sif
AdobeIDFlex.swf
OBLRes/ar_AE/ConnectionFAQ.html
.html
OBLRes/ar_AE/LicenseFAQ.html
.html
OBLRes/ar_AE/Main.zdct
OBLRes/bg_BG/ConnectionFAQ.html
.html
OBLRes/bg_BG/LicenseFAQ.html
.html
OBLRes/bg_BG/Main.zdct
OBLRes/bg_BG/oobe_launcher.zdct
OBLRes/cs_CZ/ConnectionFAQ.html
.html
OBLRes/cs_CZ/LicenseFAQ.html
.html
OBLRes/cs_CZ/Main.zdct
OBLRes/cs_CZ/oobe_launcher.zdct
OBLRes/da_DK/ConnectionFAQ.html
.html
OBLRes/da_DK/LicenseFAQ.html
.html
OBLRes/da_DK/Main.zdct
OBLRes/da_DK/oobe_launcher.zdct
OBLRes/de_DE/ConnectionFAQ.html
.html
OBLRes/de_DE/LicenseFAQ.html
.html
OBLRes/de_DE/Main.zdct
OBLRes/de_DE/oobe_launcher.zdct
OBLRes/el_GR/ConnectionFAQ.html
.html
OBLRes/el_GR/LicenseFAQ.html
.html
OBLRes/el_GR/Main.zdct
OBLRes/en_GB/ConnectionFAQ.html
.html
OBLRes/en_GB/LicenseFAQ.html
.html
OBLRes/en_GB/Main.zdct
OBLRes/en_GB/oobe_launcher.zdct
OBLRes/en_MX/ConnectionFAQ.html
.html
OBLRes/en_MX/LicenseFAQ.html
.html
OBLRes/en_MX/Main.zdct
OBLRes/en_MX/oobe_launcher.zdct
OBLRes/en_US/ConnectionFAQ.html
.html
OBLRes/en_US/LicenseFAQ.html
.html
OBLRes/en_US/Main.zdct
OBLRes/en_US/oobe_launcher.zdct
OBLRes/en_XM/ConnectionFAQ.html
.html
OBLRes/en_XM/LicenseFAQ.html
.html
OBLRes/en_XM/Main.zdct
OBLRes/en_XM/oobe_launcher.zdct
OBLRes/es_ES/ConnectionFAQ.html
.html
OBLRes/es_ES/LicenseFAQ.html
.html
OBLRes/es_ES/Main.zdct
OBLRes/es_ES/oobe_launcher.zdct
OBLRes/es_LA/oobe_launcher.zdct
OBLRes/es_MX/ConnectionFAQ.html
.html
OBLRes/es_MX/LicenseFAQ.html
.html
OBLRes/es_MX/Main.zdct
OBLRes/es_MX/oobe_launcher.zdct
OBLRes/es_NA/oobe_launcher.zdct
OBLRes/et_EE/ConnectionFAQ.html
.html
OBLRes/et_EE/LicenseFAQ.html
.html
OBLRes/et_EE/Main.zdct
OBLRes/et_EE/oobe_launcher.zdct
OBLRes/fi_FI/ConnectionFAQ.html
.html
OBLRes/fi_FI/LicenseFAQ.html
.html
OBLRes/fi_FI/Main.zdct
OBLRes/fi_FI/oobe_launcher.zdct
OBLRes/fr_CA/ConnectionFAQ.html
.html
OBLRes/fr_CA/LicenseFAQ.html
.html
OBLRes/fr_CA/Main.zdct
OBLRes/fr_CA/oobe_launcher.zdct
OBLRes/fr_FR/ConnectionFAQ.html
.html
OBLRes/fr_FR/LicenseFAQ.html
.html
OBLRes/fr_FR/Main.zdct
OBLRes/fr_FR/oobe_launcher.zdct
OBLRes/fr_MX/ConnectionFAQ.html
.html
OBLRes/fr_MX/LicenseFAQ.html
.html
OBLRes/fr_MX/Main.zdct
OBLRes/fr_MX/oobe_launcher.zdct
OBLRes/fr_XM/ConnectionFAQ.html
.html
OBLRes/fr_XM/LicenseFAQ.html
.html
OBLRes/fr_XM/Main.zdct
OBLRes/fr_XM/oobe_launcher.zdct
OBLRes/he_IL/ConnectionFAQ.html
.html
OBLRes/he_IL/LicenseFAQ.html
.html
OBLRes/he_IL/Main.zdct
OBLRes/hr_HR/ConnectionFAQ.html
.html
OBLRes/hr_HR/LicenseFAQ.html
.html
OBLRes/hr_HR/Main.zdct
OBLRes/hr_HR/oobe_launcher.zdct
OBLRes/hu_HU/ConnectionFAQ.html
.html
OBLRes/hu_HU/LicenseFAQ.html
.html
OBLRes/hu_HU/Main.zdct
OBLRes/hu_HU/oobe_launcher.zdct
OBLRes/it_IT/ConnectionFAQ.html
.html
OBLRes/it_IT/LicenseFAQ.html
.html
OBLRes/it_IT/Main.zdct
OBLRes/it_IT/oobe_launcher.zdct
OBLRes/ja_JP/ConnectionFAQ.html
.html
OBLRes/ja_JP/LicenseFAQ.html
.html
OBLRes/ja_JP/Main.zdct
OBLRes/ja_JP/oobe_launcher.zdct
OBLRes/ko_KR/ConnectionFAQ.html
.html
OBLRes/ko_KR/LicenseFAQ.html
.html
OBLRes/ko_KR/Main.zdct
OBLRes/ko_KR/oobe_launcher.zdct
OBLRes/lt_LT/ConnectionFAQ.html
.html
OBLRes/lt_LT/LicenseFAQ.html
.html
OBLRes/lt_LT/Main.zdct
OBLRes/lt_LT/oobe_launcher.zdct
OBLRes/lv_LV/ConnectionFAQ.html
.html
OBLRes/lv_LV/LicenseFAQ.html
.html
OBLRes/lv_LV/Main.zdct
OBLRes/lv_LV/oobe_launcher.zdct
OBLRes/nb_NO/ConnectionFAQ.html
.html
OBLRes/nb_NO/LicenseFAQ.html
.html
OBLRes/nb_NO/Main.zdct
OBLRes/nb_NO/oobe_launcher.zdct
OBLRes/nl_NL/ConnectionFAQ.html
.html
OBLRes/nl_NL/LicenseFAQ.html
.html
OBLRes/nl_NL/Main.zdct
OBLRes/nl_NL/oobe_launcher.zdct
OBLRes/pl_PL/ConnectionFAQ.html
.html
OBLRes/pl_PL/LicenseFAQ.html
.html
OBLRes/pl_PL/Main.zdct
OBLRes/pl_PL/oobe_launcher.zdct
OBLRes/pt_BR/ConnectionFAQ.html
.html
OBLRes/pt_BR/LicenseFAQ.html
.html
OBLRes/pt_BR/Main.zdct
OBLRes/pt_BR/oobe_launcher.zdct
OBLRes/ro_RO/ConnectionFAQ.html
.html
OBLRes/ro_RO/LicenseFAQ.html
.html
OBLRes/ro_RO/Main.zdct
OBLRes/ro_RO/oobe_launcher.zdct
OBLRes/ru_RU/ConnectionFAQ.html
.html
OBLRes/ru_RU/LicenseFAQ.html
.html
OBLRes/ru_RU/Main.zdct
OBLRes/ru_RU/oobe_launcher.zdct
OBLRes/sk_SK/ConnectionFAQ.html
.html
OBLRes/sk_SK/LicenseFAQ.html
.html
OBLRes/sk_SK/Main.zdct
OBLRes/sk_SK/oobe_launcher.zdct
OBLRes/sl_SI/ConnectionFAQ.html
.html
OBLRes/sl_SI/LicenseFAQ.html
.html
OBLRes/sl_SI/Main.zdct
OBLRes/sl_SI/oobe_launcher.zdct
OBLRes/sv_SE/ConnectionFAQ.html
.html
OBLRes/sv_SE/LicenseFAQ.html
.html
OBLRes/sv_SE/Main.zdct
OBLRes/sv_SE/oobe_launcher.zdct
OBLRes/tr_TR/ConnectionFAQ.html
.html
OBLRes/tr_TR/LicenseFAQ.html
.html
OBLRes/tr_TR/Main.zdct
OBLRes/tr_TR/oobe_launcher.zdct
OBLRes/uk_UA/ConnectionFAQ.html
.html
OBLRes/uk_UA/LicenseFAQ.html
.html
OBLRes/uk_UA/Main.zdct
OBLRes/uk_UA/oobe_launcher.zdct
OBLRes/zh_CN/ConnectionFAQ.html
OBLRes/zh_CN/LicenseFAQ.html
OBLRes/zh_CN/Main.zdct
OBLRes/zh_CN/oobe_launcher.zdct
OBLRes/zh_TW/ConnectionFAQ.html
.html
OBLRes/zh_TW/LicenseFAQ.html
.html
OBLRes/zh_TW/Main.zdct
OBLRes/zh_TW/oobe_launcher.zdct
PWAFlex.swf
PWANative.dll
.dll windows:5 windows x86 arch:x86

5e8f605ed2c42b8108626c6a95e590e5

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8d:67:8e:b8:49:a3:8c:0e:09:fa:64:bd:71:32:ed:ab:da:d1:02:7c
Signer

Actual PE Digest

8d:67:8e:b8:49:a3:8c:0e:09:fa:64:bd:71:32:ed:ab:da:d1:02:7c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\3.0\c3p0\dev5\target\win\Release\PWANative.pdb

Imports

kernel32

WriteFile
MultiByteToWideChar
ReadFile
GetFileSize
WideCharToMultiByte
WaitForSingleObject
CreateProcessW
GetModuleFileNameW
Sleep
GetTempPathW
RemoveDirectoryW
InterlockedIncrement
InterlockedDecrement
lstrlenA
CreateSemaphoreW
ReleaseSemaphore
GetCurrentProcessId
CreateDirectoryW
SetFilePointer
GetDateFormatW
GetTimeFormatW
GetLocalTime
FreeLibrary
GetProcAddress
LoadLibraryW
LeaveCriticalSection
DeleteFileW
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
GetVersionExW
AreFileApisANSI
SetEndOfFile
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
GetFileAttributesW
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetSystemTime
GetSystemTimeAsFileTime
LockFileEx
GetTempPathA
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
GetCurrentProcess
SetFileAttributesW
CopyFileW
lstrlenW
GetACP
GetFileInformationByHandle
GetTimeZoneInformation
CreateFileW
GetLastError
FlushFileBuffers
CloseHandle
LocalFree
FindFirstFileW
FindNextFileW
FindClose
EnterCriticalSection
SetEnvironmentVariableA
WriteConsoleW
SetEnvironmentVariableW
CompareStringW
IsValidCodePage
GetProcessHeap
SetStdHandle
GetStringTypeW
LCMapStringW
GetConsoleMode
GetConsoleCP
HeapSize
GetOEMCP
GetCPInfo
GetStdHandle
ExitProcess
HeapDestroy
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
GetStartupInfoW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentDirectoryW
GetFileType
RaiseException
RtlUnwind
HeapFree
HeapAlloc
DecodePointer
EncodePointer
HeapReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExW
GetCommandLineA
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
TerminateProcess
PeekNamedPipe

user32

wsprintfW

advapi32

GetNamedSecurityInfoW
SetNamedSecurityInfoW
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid

shell32

SHGetFolderPathW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHCreateDirectoryExW

ole32

OleRun
StringFromGUID2
CLSIDFromString
CoTaskMemFree
CLSIDFromProgID
CoCreateGuid
CoInitialize
CoCreateInstance

oleaut32

VariantClear
VariantCopy
VariantInit
SysFreeString
SysAllocString
GetErrorInfo

shlwapi

PathFileExistsW
PathIsDirectoryW
PathRemoveFileSpecW
PathStripPathW
PathRemoveBackslashW
PathAppendW
StrToIntExA

Exports

Exports

finalizeApplet
freeMemory
initializeApplet
processMessage

Sections

.text
Size: 566KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RNResources/Dictionary/cs_CZ/stringTable.zdct
RNResources/Dictionary/da_DK/stringTable.zdct
RNResources/Dictionary/de_DE/stringTable.zdct
RNResources/Dictionary/en_GB/stringTable.zdct
RNResources/Dictionary/en_US/stringTable.zdct
RNResources/Dictionary/es_ES/stringTable.zdct
RNResources/Dictionary/es_LA/stringTable.zdct
RNResources/Dictionary/es_MX/stringTable.zdct
RNResources/Dictionary/es_NA/stringTable.zdct
RNResources/Dictionary/fi_FI/stringTable.zdct
RNResources/Dictionary/fr_CA/stringTable.zdct
RNResources/Dictionary/fr_FR/stringTable.zdct
RNResources/Dictionary/fr_XM/stringTable.zdct
RNResources/Dictionary/hr_HR/stringTable.zdct
RNResources/Dictionary/hu_HU/stringTable.zdct
RNResources/Dictionary/it_IT/stringTable.zdct
RNResources/Dictionary/ja_JP/stringTable.zdct
RNResources/Dictionary/ko_KR/stringTable.zdct
RNResources/Dictionary/nb_NO/stringTable.zdct
RNResources/Dictionary/nl_NL/stringTable.zdct
RNResources/Dictionary/pl_PL/stringTable.zdct
RNResources/Dictionary/pt_BR/stringTable.zdct
RNResources/Dictionary/ro_RO/stringTable.zdct
RNResources/Dictionary/ru_RU/stringTable.zdct
RNResources/Dictionary/sk_SK/stringTable.zdct
RNResources/Dictionary/sl_SI/stringTable.zdct
RNResources/Dictionary/sv_SE/stringTable.zdct
RNResources/Dictionary/tr_TR/stringTable.zdct
RNResources/Dictionary/uk_UA/stringTable.zdct
RNResources/Dictionary/zh_CN/stringTable.zdct
RNResources/Dictionary/zh_TW/stringTable.zdct
ZStringResources/cs_CZ/stringtable.xml
.vbs .xml polyglot
ZStringResources/da_DK/stringtable.xml
.vbs .xml polyglot
ZStringResources/de_DE/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_GB/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_US/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_XM/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_ES/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_LA/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_MX/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_NA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fi_FI/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_CA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_FR/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_XM/stringtable.xml
.vbs .xml polyglot
ZStringResources/hr_HR/stringtable.xml
.vbs .xml polyglot
ZStringResources/hu_HU/stringtable.xml
.vbs .xml polyglot
ZStringResources/it_IT/stringtable.xml
.vbs .xml polyglot
ZStringResources/ja_JP/stringtable.xml
.vbs .xml polyglot
ZStringResources/ko_KR/stringtable.xml
.vbs .xml polyglot
ZStringResources/nb_NO/stringtable.xml
.vbs .xml polyglot
ZStringResources/nl_NL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pl_PL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pt_BR/stringtable.xml
.vbs .xml polyglot
ZStringResources/ro_RO/stringtable.xml
.vbs .xml polyglot
ZStringResources/ru_RU/stringtable.xml
.vbs .xml polyglot
ZStringResources/sk_SK/stringtable.xml
.vbs .xml polyglot
ZStringResources/sl_SI/stringtable.xml
.vbs .xml polyglot
ZStringResources/sv_SE/stringtable.xml
.vbs .xml polyglot
ZStringResources/tr_TR/stringtable.xml
.vbs .xml polyglot
ZStringResources/uk_UA/stringtable.xml
.vbs .xml polyglot
ZStringResources/zh_CN/stringtable.xml
.vbs .xml polyglot
ZStringResources/zh_TW/stringtable.xml
.vbs .xml polyglot
adobeIdManifest.xml
.xml
adobe_caps.dll
.dll windows:5 windows x86 arch:x86

5dc689234bd587c30d88fa8b0128a74a

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

81:ac:bc:69:4b:b7:0a:1e:74:ad:4d:7f:ee:a2:a2:c2:5e:a9:b0:16
Signer

Actual PE Digest

81:ac:bc:69:4b:b7:0a:1e:74:ad:4d:7f:ee:a2:a2:c2:5e:a9:b0:16

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Oberibsrel50\build\releases\public\caps\libraries\windows\Release\dynamic\adobe_caps.pdb

Imports

ole32

CoTaskMemFree

shlwapi

PathAppendW
PathRemoveBackslashW
PathStripPathW
PathFileExistsW

shell32

SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW

advapi32

AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoW
FreeSid
GetNamedSecurityInfoW

kernel32

GetStringTypeW
GetConsoleMode
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
LCMapStringW
InitializeCriticalSection
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetLastError
CloseHandle
LocalFree
GetCurrentProcess
SystemTimeToFileTime
GetFileAttributesExW
GetFileAttributesW
SetFileAttributesW
FlushFileBuffers
CreateFileW
CopyFileW
lstrlenW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
AreFileApisANSI
Sleep
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
GetFileSize
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
DeleteFileW
LoadLibraryA
LoadLibraryW
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
DeleteCriticalSection
LockFileEx
InterlockedIncrement
GetTempPathA
GetTempPathW
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
RaiseException
RtlUnwind
HeapFree
HeapAlloc
DecodePointer
GetCommandLineA
HeapReAlloc
IsProcessorFeaturePresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
ExitProcess
GetStdHandle
GetModuleFileNameW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTimeZoneInformation
HeapSize
GetCPInfo
GetOEMCP
IsValidCodePage
SetStdHandle
GetConsoleCP

Exports

Exports

GetSetupManifest
capsBackup
capsCloseSession
capsGetCollection
capsGetCollectionData
capsGetCollectionDataKeys
capsGetCollectionDataKeysAndValues
capsGetCollectionPayloads
capsGetCollections
capsGetInstallState
capsGetLastModTime
capsGetPayload
capsGetPayloadCollections
capsGetPayloadCollectionsAcrossUpgrades
capsGetPayloadConstraint
capsGetPayloadData
capsGetPayloadDataKeys
capsGetPayloadDataKeysAndValues
capsGetPayloads
capsGetUpgradedPayloadsKeysAndValues
capsOpenSession
capsOpenSessionNoCreate
capsRemoveCollectionData
capsRemoveCollectionDomainData
capsRemovePayloadData
capsRemovePayloadDomainData
capsSessionCommit
capsSessionRollback
capsSetCollectionData
capsSetPayloadData
mdbCloseSession
mdbGetBrandingData
mdbGetDependencyData
mdbGetDependencyDataEx
mdbGetEulaData
mdbGetEulaLanguageList
mdbGetPayload
mdbGetPayloadData
mdbGetProduct
mdbGetProductIDList
mdbGetProductPayloads
mdbOpenSession
mdbOpenSessionNoCreate
mdbOpenSessionWithPath
mdbSessionRollback
pcdCacheGetLastModTime
pcdCloseSession
pcdGetDomainData
pcdGetDomainDataKeys
pcdGetDomainDataSubdomains
pcdGetLastModTime
pcdOpenCacheSession
pcdOpenCacheSessionNoCreate
pcdOpenSession
pcdOpenSessionNoCreate
pcdRemoveDomainData
pcdSessionCommit
pcdSessionRollback
pcdSetDomainData
pdbCloseSession
pdbGetInstallState
pdbGetLastModTime
pdbGetPayload
pdbGetPayloadData
pdbGetPayloadDataKeys
pdbGetPayloadDataKeysAndValues
pdbGetPayloadDependency
pdbGetPayloadDependencyKeysAndValues
pdbGetPayloadDependencyReverse
pdbGetPayloads
pdbGetUpgradedPayloadsKeysAndValues
pdbGetUserAction
pdbOpenSession
pdbOpenSessionNoCreate
pdbSessionRollback

Sections

.text
Size: 307KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
adobe_licutil.exe
.exe windows:5 windows x86 arch:x86

c84c4d1fa763b03427be4ed7b5d2f070

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

fe:92:55:1f:30:3d:f2:5c:d2:98:1f:c5:98:b1:4d:ed:19:39:46:e1
Signer

Actual PE Digest

fe:92:55:1f:30:3d:f2:5c:d2:98:1f:c5:98:b1:4d:ed:19:39:46:e1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

none

Imports

winhttp

WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetStatusCallback
WinHttpReceiveResponse
WinHttpGetIEProxyConfigForCurrentUser
WinHttpOpen
WinHttpGetProxyForUrl
WinHttpCloseHandle

kernel32

CompareStringW
GetProcessHeap
SetEndOfFile
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
WideCharToMultiByte
GetModuleFileNameW
CloseHandle
GetLastError
CreateProcessW
SetEnvironmentVariableA
MultiByteToWideChar
CreateMutexW
GlobalFree
SetEvent
WaitForMultipleObjects
CreateEventW
GetTimeZoneInformation
GetVersionExW
GetComputerNameExW
IsDBCSLeadByteEx
GetCurrentDirectoryW
CreateFileW
QueryPerformanceCounter
GetTempPathW
OutputDebugStringA
LoadLibraryW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapFree
HeapAlloc
RaiseException
RtlUnwind
DeleteFileW
GetSystemTimeAsFileTime
HeapReAlloc
GetCurrentProcessId
GetCommandLineW
HeapSetInformation
GetDriveTypeW
GetFileAttributesW
CreateDirectoryW
GetFullPathNameW
LCMapStringW
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetLocaleInfoW
SetStdHandle

user32

MessageBoxW

shell32

SHGetFolderPathW

Sections

.text
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
adobe_oobelib.dll
.dll windows:5 windows x86 arch:x86

58b7843a32cfed75be2a94f00ea746b5

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:c4:5b:66:fe:54:92:a2:c4:8a:ce:c3:80:31:81:8a:06:ed:b0:f6
Signer

Actual PE Digest

41:c4:5b:66:fe:54:92:a2:c4:8a:ce:c3:80:31:81:8a:06:ed:b0:f6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winhttp

WinHttpCloseHandle
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetStatusCallback
WinHttpReceiveResponse
WinHttpGetIEProxyConfigForCurrentUser
WinHttpOpen
WinHttpGetProxyForUrl

kernel32

GetStartupInfoW
SetHandleCount
CreateSemaphoreW
SetEnvironmentVariableA
GetModuleFileNameA
CloseHandle
GetLastError
CreateProcessW
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
GetVersionExW
CreateThread
GetComputerNameExW
SetEvent
OpenEventW
GlobalFree
WaitForMultipleObjects
CreateEventW
WideCharToMultiByte
GetExitCodeThread
TerminateThread
OutputDebugStringA
QueryPerformanceCounter
GetTempPathW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
SetStdHandle
GetFileAttributesW
LocalFree
GetTimeZoneInformation
GetTickCount
GetUserDefaultLCID
WriteFile
Sleep
ReadFile
CreateFileW
FlushFileBuffers
FindClose
DeleteFileW
GetDateFormatW
SetFilePointer
CreateDirectoryW
GetTimeFormatW
GetLocalTime
lstrlenA
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
GetCurrentDirectoryW
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateFileA
GetFileAttributesA
GetProcAddress
GetFileType
PeekNamedPipe
GetFileInformationByHandle
TerminateProcess
InitializeCriticalSectionAndSpinCount
HeapSize
SetLastError
IsValidCodePage
CompareStringW
WriteConsoleW
GetProcessHeap
SetEndOfFile
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStdHandle
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
GetOEMCP
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStringTypeW
InterlockedCompareExchange
InterlockedExchange
EncodePointer
DecodePointer
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
HeapReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExW
GetCurrentThreadId
GetCommandLineA
GetTimeFormatA
GetDateFormatA
GetFullPathNameW
MoveFileA
LCMapStringW
GetCPInfo
GetCurrentProcess

user32

wsprintfW

advapi32

LookupAccountNameW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
SetNamedSecurityInfoW
GetUserNameW

shell32

SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHGetFolderPathW

ole32

CoInitializeSecurity
CoSetProxyBlanket
OleRun
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

SysFreeString
VariantChangeType
VariantInit
VariantCopy
VariantClear
SysAllocString
GetErrorInfo

shlwapi

PathRemoveFileSpecW
PathFileExistsW

Exports

Exports

Adobe_OOBELib_BackDoorUpgradeCheck
Adobe_OOBELib_CalculateVC
Adobe_OOBELib_CheckSubscriptionMode
Adobe_OOBELib_CheckSubscriptionValidity
Adobe_OOBELib_CheckSubscriptionValidityOnline
Adobe_OOBELib_CheckWFType
Adobe_OOBELib_CheckforUpgrade
Adobe_OOBELib_CleanUpCachePCD
Adobe_OOBELib_CreateRef
Adobe_OOBELib_Deactivate
Adobe_OOBELib_DeactivateLicense
Adobe_OOBELib_DisAssociateAll
Adobe_OOBELib_EnumerateKeys
Adobe_OOBELib_GetAdobeId
Adobe_OOBELib_GetChallengeString_UpgradeCheck
Adobe_OOBELib_GetRefID
Adobe_OOBELib_GetSerialInfo
Adobe_OOBELib_GetServiceClaimData
Adobe_OOBELib_GetValueforKeyInSubDomain
Adobe_OOBELib_Getversion
Adobe_OOBELib_ISOTaggingAtInstall
Adobe_OOBELib_LaunchPurchaseWorkFlow
Adobe_OOBELib_LoadTrial
Adobe_OOBELib_Process_file
Adobe_OOBELib_ProtectedContentCheck
Adobe_OOBELib_QueryLicenses
Adobe_OOBELib_ReleaseRef
Adobe_OOBELib_RemoveKeyInSubDomainInCache
Adobe_OOBELib_Remove_payload
Adobe_OOBELib_Retrieve_SerialNumber
Adobe_OOBELib_Retryactivation
Adobe_OOBELib_SaveAdobeId
Adobe_OOBELib_SetAdobeId
Adobe_OOBELib_SetAdobeIdExtProfile
Adobe_OOBELib_SetAppXMLData
Adobe_OOBELib_SetClaimStatus
Adobe_OOBELib_SetClaimStatusEx
Adobe_OOBELib_SetCredentialsForProxy
Adobe_OOBELib_SetUniversalCookie
Adobe_OOBELib_SetValueforKeyInSubDomainInCache
Adobe_OOBELib_Set_Eula
Adobe_OOBELib_Set_InstallLocale
Adobe_OOBELib_Set_serialnumber
Adobe_OOBELib_SuppressRegistrationNag
Adobe_OOBELib_UpgradeCheck
Adobe_OOBELib_UpgradeDoneAtInstallTime
Adobe_OOBELib_Validate_SerialNumber

Sections

.text
Size: 717KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
adobe_upgrade.dll
.dll windows:5 windows x86 arch:x86

b8801d5281dc47eccdced0f96a88288c

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:59:5b:15:6c:e0:cb:7e:f6:0f:87:0e:a6:47:9d:71:d7:e5:3e:76
Signer

Actual PE Digest

68:59:5b:15:6c:e0:cb:7e:f6:0f:87:0e:a6:47:9d:71:d7:e5:3e:76

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathRemoveBackslashA

kernel32

OutputDebugStringA
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
GetCurrentProcess
CloseHandle
GetLastError
lstrcpyA
lstrcmpA
LoadLibraryA
GetProcAddress
FreeLibrary
GetEnvironmentVariableA
IsValidLocale
CompareStringW
InterlockedCompareExchange
QueryPerformanceCounter
EnumSystemLocalesA
GetLocaleInfoA
HeapFree
GetCurrentProcessId
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetEnvironmentVariableA
GetDriveTypeW
GetCurrentThreadId
GetCommandLineA
GetFullPathNameW
InitializeCriticalSection
GetFileAttributesW
HeapReAlloc
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
IsProcessorFeaturePresent
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
ExitProcess
HeapSize
GetLocaleInfoW
ReadFile
SetFilePointer
GetCurrentDirectoryW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
CreateFileW
SetStdHandle
CreateFileA
LCMapStringW
GetStringTypeW
WriteConsoleW
InterlockedExchange
SetEndOfFile
GetProcessHeap
GetUserDefaultLCID

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

AULAcceptsChallengeResponse
AULCloseSession
AULGetChallengeString
AULGetQualifyingSerialNumbers
AULGetUpgradeStatus
AULIsQualifyingSerialNumberForAnyProduct
AULIsQualifyingSerialNumberForProduct
AULNeedsUpgradeCheck
AULNextProduct
AULOpenSession
AULSetQualifyingSerialNumbers

Sections

.text
Size: 462KB - Virtual size: 462KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
amtservices.dll
.dll windows:5 windows x86 arch:x86

51cac0aa2868e2c01592256457c39caf

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:29:a1:4c:85:a7:0f:b0:6b:36:f8:43:c9:9e:d8:c6:40:95:be:75
Signer

Actual PE Digest

67:29:a1:4c:85:a7:0f:b0:6b:36:f8:43:c9:9e:d8:c6:40:95:be:75

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

none

Imports

iphlpapi

GetIfTable

winhttp

WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
WinHttpReceiveResponse
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpGetProxyForUrl
WinHttpSetStatusCallback
WinHttpQueryHeaders
WinHttpReadData
WinHttpSendRequest
WinHttpSetCredentials

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status

kernel32

lstrlenW
LocalFree
lstrlenA
SetFileAttributesW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
GetTempPathW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableA
QueryPerformanceCounter
QueryPerformanceFrequency
OutputDebugStringA
InitializeCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventW
CloseHandle
ResetEvent
WaitForMultipleObjects
SetEvent
SwitchToThread
ResumeThread
CreateThread
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
GetLastError
HeapFree
EncodePointer
DecodePointer
GetCurrentThreadId
GetCommandLineA
GetFullPathNameW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetFileAttributesW
DeleteFileW
CreateDirectoryW
GetCurrentProcessId
GetTimeFormatA
GetDateFormatA
HeapAlloc
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetCurrentThread
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
ExitProcess
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
FatalAppExitA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
GetLocaleInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
CreateFileW
SetStdHandle
CreateFileA
GetFileAttributesA
SetFilePointer
ReadFile
GetTimeZoneInformation
LCMapStringW
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
SetConsoleCtrlHandler
InterlockedExchange
WriteConsoleW
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
InterlockedCompareExchange
FindNextFileW
FindFirstFileW
GlobalFree

advapi32

RegCreateKeyExW
EqualSid
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
SetSecurityInfo
RegOpenKeyExW
RegQueryValueExW
FreeSid
RegSetValueExW
RegCloseKey
RegDeleteKeyW
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid

shell32

SHGetFolderPathW

ole32

CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
CoInitializeEx

oleaut32

SysStringLen
SysFreeString
VariantClear
SysAllocStringByteLen
GetErrorInfo
VariantChangeType
CreateErrorInfo
SetErrorInfo
VariantInit
SysAllocString

Exports

Exports

C_AMTAUMServiceCreate
C_AMTAUMServiceGetLEIDXml
C_AMTAUMServiceGetLibVersion
C_AMTAUMServiceIsUpdaterEnabled
C_AMTAUMServiceNotificationsRelease
C_AMTConfigurationGetLoadTrial
C_AMTConfigurationGetRunningLocale
C_AMTConfigurationIsAppAllowedtobeRelaunched
C_AMTConfigurationIsGrowlSuppressed
C_AMTConfigurationIsRegistrationSuppressed
C_AMTConfigurationServiceAMTConfigInstallPath
C_AMTConfigurationServiceAMTConfigPath
C_AMTConfigurationServiceAMTConfigRelativePath
C_AMTConfigurationServiceAMTDirectoryPath
C_AMTConfigurationServiceAppLicensingCode
C_AMTConfigurationServiceAppPayloadCode
C_AMTConfigurationServiceApplicationDirectoryPath
C_AMTConfigurationServiceApplicationPath
C_AMTConfigurationServiceBaseConfigPath
C_AMTConfigurationServiceBridgeTalkCodeAtIndex
C_AMTConfigurationServiceBridgeTalkCodeCount
C_AMTConfigurationServiceCanonicalLEID
C_AMTConfigurationServiceCheckSerialNumber
C_AMTConfigurationServiceCreate
C_AMTConfigurationServiceCurrentLicense
C_AMTConfigurationServiceDominatingLEsForLEID
C_AMTConfigurationServiceDriverLicensingCode
C_AMTConfigurationServiceDriverPayloadCode
C_AMTConfigurationServiceInstallDate
C_AMTConfigurationServiceInstalledLocales
C_AMTConfigurationServiceIsInstalled
C_AMTConfigurationServiceIsSerialNumberRegisteredAsRejected
C_AMTConfigurationServiceIsSubscription
C_AMTConfigurationServiceLocale
C_AMTConfigurationServiceMapCLEToLEID
C_AMTConfigurationServiceMappedLEIDForCLE
C_AMTConfigurationServiceMediaTag
C_AMTConfigurationServicePathForLocalizedResource
C_AMTConfigurationServicePathForLocalizedResourceInDirectory
C_AMTConfigurationServicePathForResource
C_AMTConfigurationServicePathForResourceInDirectory
C_AMTConfigurationServicePrecedenceValueForEnigmaID
C_AMTConfigurationServiceProductName
C_AMTConfigurationServiceRegisterSerialNumberAsRejected
C_AMTConfigurationServiceRemoveKey
C_AMTConfigurationServiceRemoveKeyInLocale
C_AMTConfigurationServiceRemoveSerialNumber
C_AMTConfigurationServiceSerialNumber
C_AMTConfigurationServiceSetApplicationPath
C_AMTConfigurationServiceSetCurrentLicense
C_AMTConfigurationServiceSetDefaultConfigurationService
C_AMTConfigurationServiceSetInstalledLocales
C_AMTConfigurationServiceSetLocale
C_AMTConfigurationServiceSetSerialNumber
C_AMTConfigurationServiceSetValueForKey
C_AMTConfigurationServiceSetValueForKeyInLocale
C_AMTConfigurationServiceUpdaterCode
C_AMTConfigurationServiceValueForKey
C_AMTConfigurationServiceValueForKeyInLocale
C_AMTConfigurationShowEULAForPassive
C_AMTEnigmaServiceAllLocales
C_AMTEnigmaServiceCreate
C_AMTEnigmaServiceDecryptSerialNumber
C_AMTEnigmaServiceDefaultLocale
C_AMTEnigmaServiceEncryptSerialNumber
C_AMTEnigmaServiceExpirationDateData
C_AMTEnigmaServiceGetProductID
C_AMTEnigmaServiceGetProductInfo
C_AMTEnigmaServiceGetProductVersion
C_AMTEnigmaServiceGetProductVersionString
C_AMTEnigmaServiceGetScenarioKey
C_AMTEnigmaServiceGetUpgradeScenario
C_AMTEnigmaServiceIsEnigmaSerialNumber
C_AMTErrnoServiceALMErrno
C_AMTErrnoServiceCreate
C_AMTErrnoServiceErrno
C_AMTErrnoServiceSetALMErrno
C_AMTErrnoServiceSetErrno
C_AMTGetTypeID
C_AMTLog
C_AMTLogAll
C_AMTLoggerCreateFileLoggerWithFile
C_AMTLoggerCreateFileLoggerWithPath
C_AMTLoggerCreateFileLoggerWithPathAndSize
C_AMTLoggingServiceAddGroupLogger
C_AMTLoggingServiceAddLogger
C_AMTLoggingServiceCleanUpResource
C_AMTLoggingServiceCreateWithID
C_AMTLogv
C_AMTLogvAll
C_AMTPCDServiceAllKeysInSubDomain
C_AMTPCDServiceAllKeysInSubDomainForLocale
C_AMTPCDServiceAllSubDomains
C_AMTPCDServiceBeginTransaction
C_AMTPCDServiceCachePCDIsWritable
C_AMTPCDServiceCheckDatabase
C_AMTPCDServiceCreate
C_AMTPCDServiceEndTransaction
C_AMTPCDServiceInstallDateForAdobeCode
C_AMTPCDServiceLicensingCodeForAdobeCode
C_AMTPCDServiceMasterHiveExistsForSubDomain
C_AMTPCDServiceMasterPCDExists
C_AMTPCDServiceMasterPCDIsWritable
C_AMTPCDServiceOwnerAdobeCodeForAdobeCode
C_AMTPCDServicePopulatedLocalesForSubDomain
C_AMTPCDServicePrimarySubDomains
C_AMTPCDServiceRemoveAllKeysInSubDomain
C_AMTPCDServiceRemoveAllKeysInSubDomainForLocale
C_AMTPCDServiceRemoveKeyInSubDomain
C_AMTPCDServiceRemoveKeyInSubDomainForLocale
C_AMTPCDServiceRemoveKeyWithPropertyInSubDomain
C_AMTPCDServiceRemoveKeyWithPropertyInSubDomainForLocale
C_AMTPCDServiceSetMode
C_AMTPCDServiceSetValueForKeyInSubDomain
C_AMTPCDServiceSetValueForKeyInSubDomainForLocale
C_AMTPCDServiceSetValueForKeyWithPropertyInSubDomain
C_AMTPCDServiceSetValueForKeyWithPropertyInSubDomainForLocale
C_AMTPCDServiceSubDomainExists
C_AMTPCDServiceSubDomainForLocaleExists
C_AMTPCDServiceSubDomainsForPrimarySubDomain
C_AMTPCDServiceValueForKeyInSubDomain
C_AMTPCDServiceValueForKeyInSubDomainForLocale
C_AMTPCDServiceValueForKeyWithPropertyInSubDomain
C_AMTPCDServiceValueForKeyWithPropertyInSubDomainForLocale
C_AMTRegistrationServiceCreate
C_AMTRegistrationServiceHasDataToSend
C_AMTRegistrationServiceNeedsToShowRegistrationScreen
C_AMTRegistrationServiceSendData
C_AMTRegistrationServiceShowRegistrationDialog
C_AMTRelease
C_AMTRetain
C_AMTStringListAddString
C_AMTStringListCopyInto
C_AMTStringListCount
C_AMTStringListCreate
C_AMTStringListCreateWithConstStrings
C_AMTStringListCreateWithStrings
C_AMTStringListIndexOfString
C_AMTStringListNextString
C_AMTStringListRemoveAllStrings
C_AMTStringListRewind
C_AMTStringListStringAtIndex
C_AMTUISwitchIsUpdateAvailable
C_AMTUISwitchIsUpdateCheckEnabled
C_AMTUISwitchServiceCreate
C_AMTUISwitchServiceGetMode
C_AMTUISwitchServiceSetLaunchContext
C_AMTUISwitchServiceSetMode
C_AMTUISwitchServiceSetParentWindow
C_AMTUISwitchShowCreateAdobeID
C_AMTUISwitchShowEULA
C_AMTUISwitchShowProvisioningUI
C_AMTUISwitchShowRegistration
C_AMTUISwitchShowUpdatesUI
C_AMTUISwitchSuppressUpdates
C_AMTUISwitchTriggerUpdateCheck
C_AMTUpdaterNotificationsLaunchAAMNotifierOnQuitIfReqd
C_AMTUpgradeServiceAcceptsChallengeResponse
C_AMTUpgradeServiceCloseSession
C_AMTUpgradeServiceCreate
C_AMTUpgradeServiceGetChallengeString
C_AMTUpgradeServiceGetQualifyingSerialNumbers
C_AMTUpgradeServiceGetUpgradeStatus
C_AMTUpgradeServiceIsQualifyingSerialNumberForAnyProduct
C_AMTUpgradeServiceIsQualifyingSerialNumberForProduct
C_AMTUpgradeServiceNeedsUpgradeCheck
C_AMTUpgradeServiceNextProduct
C_AMTUpgradeServiceSetQualifyingSerialNumbers
C_EULAServiceCreate
C_EULA_GetEULAFolder
C_EULA_GetState
C_EULA_SetState
C_LC_GetCacheStatus
C_LC_LaunchTypeForCache
C_LC_SetCacheStatus
C_LaunchCacheServiceCreate
C_SLCoreServiceActivateLicense
C_SLCoreServiceCreate
C_SLCoreServiceCreateDictionary
C_SLCoreServiceDeactivateAllLicenses
C_SLCoreServiceDeactivateLicense
C_SLCoreServiceDeleteLicense
C_SLCoreServiceDestroy
C_SLCoreServiceDestroyDictionary
C_SLCoreServiceGetAllDictionaryKeysValues
C_SLCoreServiceGetAllLicenses
C_SLCoreServiceGetDictionaryValue
C_SLCoreServiceGetErrorString
C_SLCoreServiceGetFeatures
C_SLCoreServiceGetLicenseDurationFromProductConfig
C_SLCoreServiceGetLicenseInfo
C_SLCoreServiceGetLicenseServerData
C_SLCoreServiceGetLicenseUserData
C_SLCoreServiceGetLicensingEvents
C_SLCoreServiceGetMachineIDHash
C_SLCoreServiceGetMachineIDHashWOStorage
C_SLCoreServiceGetVersion
C_SLCoreServiceLoadLicenseExtension
C_SLCoreServiceLoadLicenseFromProductConfig
C_SLCoreServiceQueryFeatures
C_SLCoreServiceRefreshLicense
C_SLCoreServiceResetTrialLicense
C_SLCoreServiceSetDictionaryValue
C_SLCoreServiceSetLEID
C_SLCoreServiceSetLicenseUserData
C_SLCoreServiceSetProxySettings
C_SLCoreServiceSynchronize

Sections

.text
Size: 893KB - Virtual size: 892KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
asneu.dll
.dll windows:5 windows x86 arch:x86

785d273c7cac083d4d0a3beae368461e

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

22:e7:83:35:dd:e4:90:bf:3c:9d:42:0a:34:2d:1d:47:80:a9:cb:9b
Signer

Actual PE Digest

22:e7:83:35:dd:e4:90:bf:3c:9d:42:0a:34:2d:1d:47:80:a9:cb:9b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\esg\asn\1.6\Asn\AsnEndUser\Release\asneu.pdb

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
GetLastError
HeapFree
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetFullPathNameA
GetCurrentDirectoryA
ReadFile
CloseHandle
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetTimeZoneInformation
SetStdHandle
CreateFileW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetEndOfFile
GetProcessHeap
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

??0AsnDll@@QAE@XZ
??4AsnDll@@QAEAAV0@ABV0@@Z
?dllMain@AsnDll@@SAHPAXK0@Z
GetAsnVersion
_Java_com_adobe_asn_AsnEndUser_doDecrypt@20
_Java_com_adobe_asn_AsnEndUser_doEncrypt@20
_Java_com_adobe_asn_AsnEndUser_exit@16
_Java_com_adobe_asn_AsnEndUser_getAsnProductInfo@20
_Java_com_adobe_asn_AsnEndUser_getVersion@12
_Java_com_adobe_asn_AsnEndUser_init@16
_Java_com_adobe_asn_AsnEndUser_makeChecksum@12
_Java_com_adobe_asn_AsnEndUser_makePrivateEx@16
_Java_com_adobe_asn_AsnEndUser_verifyChecksum@12
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makeChecksum
asn_makePrivate
asn_makePrivateEx
asn_verifyChecksum

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
assets/fonts_clean.swf
assets/fonts_system.swf
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/LWA/LWA.pimx
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/LWA/LWA.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/P6/P6.pima
.zip
AAM Registration Notifier.exe
.exe windows:5 windows x86 arch:x86

ab5cbd58af43be8e1db35bb6c0a7177f

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

18:f7:e7:98:99:44:24:e4:bf:d6:39:63:2d:d7:de:5b:53:90:9b:86
Signer

Actual PE Digest

18:f7:e7:98:99:44:24:e4:bf:d6:39:63:2d:d7:de:5b:53:90:9b:86

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\AAMRegistrationNotifier.pdb

Imports

user32

DefWindowProcW
UpdateWindow
SendMessageW
CreateWindowExW
ShowWindow
LoadIconW
RegisterClassExW
LoadAcceleratorsW
wsprintfW
EndPaint
DestroyWindow
TranslateAcceleratorW
GetMessageW
PostQuitMessage
PostMessageW
LoadCursorW
BeginPaint
TranslateMessage
DispatchMessageW

ole32

CoCreateInstance
OleRun
CoInitialize

oleaut32

GetErrorInfo
SysFreeString
VariantClear
SysAllocString

shlwapi

PathRenameExtensionW
PathAppendW
PathAddExtensionW
PathIsFileSpecW
PathRemoveExtensionW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW

kernel32

TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetTickCount
SetEnvironmentVariableA
CompareStringW
GetProcessHeap
SetEndOfFile
CreateFileA
WriteConsoleW
SetStdHandle
HeapReAlloc
GetStringTypeW
IsValidLocale
QueryPerformanceCounter
HeapCreate
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
GetCommandLineW
WaitForSingleObject
SetEvent
GetCurrentThreadId
CloseHandle
CreateThread
CreateMutexW
Sleep
ReleaseSemaphore
GetLastError
CreateSemaphoreW
LocalAlloc
OpenSemaphoreW
ReleaseMutex
GetCurrentProcessId
LocalFree
GetDateFormatW
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLocalTime
FreeLibrary
LoadLibraryW
GetProcAddress
GetSystemDefaultLangID
WideCharToMultiByte
ReadFile
GetModuleFileNameW
FlushFileBuffers
SetLastError
CreateEventW
GetStdHandle
GetUserDefaultUILanguage
DeleteFileW
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByteEx
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetFilePointer
GetFileSizeEx
OpenMutexW
EncodePointer
DecodePointer
HeapSetInformation
GetStartupInfoW
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
MoveFileW
GetTimeZoneInformation
LCMapStringW
GetCPInfo
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
HeapSize

advapi32

SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
InitializeSecurityDescriptor

shell32

CommandLineToArgvW
SHCreateDirectoryExW
ShellExecuteW
Shell_NotifyIconW

Sections

.text
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AXFB/AX_SLConfig.xml
.xml
AXFB/AX_application.sif
AXFB/FB_SLConfig.xml
.xml
AXFB/FB_application.sif
IMSLib.dll
.dll windows:5 windows x86 arch:x86

978d81421effba752c27aa0416efd748

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

bf:c3:92:8b:a8:70:2c:0f:67:d2:f4:b8:25:9f:6f:cf:d0:60:10:db
Signer

Actual PE Digest

bf:c3:92:8b:a8:70:2c:0f:67:d2:f4:b8:25:9f:6f:cf:d0:60:10:db

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\OOBECommon\IMSLib.pdb

Imports

winhttp

WinHttpSendRequest
WinHttpConnect
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpOpenRequest
WinHttpGetProxyForUrl
WinHttpReadData
WinHttpSetStatusCallback
WinHttpReceiveResponse
WinHttpAddRequestHeaders
WinHttpSetCredentials

kernel32

SetEvent
MultiByteToWideChar
GetLastError
GlobalFree
CreateEventW
WaitForMultipleObjects
CloseHandle
CreateThread
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetFileSize
CreateMutexW
WriteFile
WideCharToMultiByte
Sleep
GetVersionExW
ReadFile
GetModuleFileNameW
CreateFileW
FlushFileBuffers
GetTempPathW
SetLastError
ReleaseMutex
DeleteFileW
LocalFree
lstrlenA
InterlockedIncrement
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreW
GetCurrentProcessId
GetDateFormatW
CreateDirectoryW
GetTimeFormatW
GetLocalTime
SetFilePointer
GetFileSizeEx
OpenMutexW
GetFileAttributesW
SetFileAttributesW
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetEndOfFile
FreeLibrary
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
LoadLibraryW
GetFileAttributesA
GetProcAddress
LockFileEx
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
GetCurrentThreadId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
GetConsoleMode
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
SetStdHandle
WriteConsoleW
GetProcessHeap
GetCPInfo
CompareStringW
SetEnvironmentVariableA
TerminateProcess
GetCurrentProcess
InterlockedDecrement
GetConsoleCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
InitializeCriticalSectionAndSpinCount
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LCMapStringW
RtlUnwind
RaiseException
GetTimeZoneInformation
MoveFileW
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
GetLocaleInfoW
HeapSize
GetStdHandle
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
EncodePointer
DecodePointer
InterlockedExchange
UnhandledExceptionFilter

user32

wsprintfW

advapi32

GetUserNameW

shell32

SHCreateDirectoryExW
SHGetSpecialFolderPathW

ole32

CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleRun
CoUninitialize

oleaut32

SysFreeString
VariantChangeType
VariantInit
VariantCopy
VariantClear
SysAllocString
GetErrorInfo

shlwapi

PathRemoveExtensionW
PathIsFileSpecW
PathRemoveFileSpecW
PathIsDirectoryW
PathAddExtensionW
PathAppendW
PathRenameExtensionW
PathFileExistsW

Exports

Exports

IMS_EEPLogin
IMS_createRef
IMS_createRefEx
IMS_fetchAccessToken
IMS_fetchAccounts
IMS_fetchContinueToken
IMS_fetchDefaultUserInfoForClientId
IMS_fetchIDPResponseForKey
IMS_getProxyCredentialsFromIMSLibSession
IMS_releaseData
IMS_releaseRef
IMS_revokeDeviceToken
IMS_setProxyCredentials
IMS_setProxyCredentialsInIMSLibSession

Sections

.text
Size: 734KB - Virtual size: 733KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OBLRes/ar_AE/ConnectionFAQ.html
.html
OBLRes/ar_AE/LicenseFAQ.html
.html
OBLRes/ar_AE/Main.zdct
OBLRes/bg_BG/ConnectionFAQ.html
.html
OBLRes/bg_BG/LicenseFAQ.html
.html
OBLRes/bg_BG/Main.zdct
OBLRes/bg_BG/oobe_launcher.zdct
OBLRes/cs_CZ/ConnectionFAQ.html
.html
OBLRes/cs_CZ/LicenseFAQ.html
.html
OBLRes/cs_CZ/Main.zdct
OBLRes/cs_CZ/oobe_launcher.zdct
OBLRes/da_DK/ConnectionFAQ.html
.html
OBLRes/da_DK/LicenseFAQ.html
.html
OBLRes/da_DK/Main.zdct
OBLRes/da_DK/oobe_launcher.zdct
OBLRes/de_DE/ConnectionFAQ.html
.html
OBLRes/de_DE/LicenseFAQ.html
.html
OBLRes/de_DE/Main.zdct
OBLRes/de_DE/oobe_launcher.zdct
OBLRes/el_GR/ConnectionFAQ.html
.html
OBLRes/el_GR/LicenseFAQ.html
.html
OBLRes/el_GR/Main.zdct
OBLRes/en_AE/ConnectionFAQ.html
.html
OBLRes/en_AE/LicenseFAQ.html
.html
OBLRes/en_AE/Main.zdct
OBLRes/en_AE/oobe_launcher.zdct
OBLRes/en_GB/ConnectionFAQ.html
.html
OBLRes/en_GB/LicenseFAQ.html
.html
OBLRes/en_GB/Main.zdct
OBLRes/en_GB/oobe_launcher.zdct
OBLRes/en_IL/ConnectionFAQ.html
.html
OBLRes/en_IL/LicenseFAQ.html
.html
OBLRes/en_IL/Main.zdct
OBLRes/en_IL/oobe_launcher.zdct
OBLRes/en_MX/ConnectionFAQ.html
.html
OBLRes/en_MX/LicenseFAQ.html
.html
OBLRes/en_MX/Main.zdct
OBLRes/en_MX/oobe_launcher.zdct
OBLRes/en_US/ConnectionFAQ.html
.html
OBLRes/en_US/LicenseFAQ.html
.html
OBLRes/en_US/Main.zdct
OBLRes/en_US/oobe_launcher.zdct
OBLRes/en_XM/ConnectionFAQ.html
.html
OBLRes/en_XM/LicenseFAQ.html
.html
OBLRes/en_XM/Main.zdct
OBLRes/en_XM/oobe_launcher.zdct
OBLRes/es_ES/ConnectionFAQ.html
.html
OBLRes/es_ES/LicenseFAQ.html
.html
OBLRes/es_ES/Main.zdct
OBLRes/es_ES/oobe_launcher.zdct
OBLRes/es_LA/oobe_launcher.zdct
OBLRes/es_MX/ConnectionFAQ.html
.html
OBLRes/es_MX/LicenseFAQ.html
.html
OBLRes/es_MX/Main.zdct
OBLRes/es_MX/oobe_launcher.zdct
OBLRes/es_NA/oobe_launcher.zdct
OBLRes/et_EE/ConnectionFAQ.html
.html
OBLRes/et_EE/LicenseFAQ.html
.html
OBLRes/et_EE/Main.zdct
OBLRes/et_EE/oobe_launcher.zdct
OBLRes/fi_FI/ConnectionFAQ.html
.html
OBLRes/fi_FI/LicenseFAQ.html
.html
OBLRes/fi_FI/Main.zdct
OBLRes/fi_FI/oobe_launcher.zdct
OBLRes/fr_CA/ConnectionFAQ.html
.html
OBLRes/fr_CA/LicenseFAQ.html
.html
OBLRes/fr_CA/Main.zdct
OBLRes/fr_CA/oobe_launcher.zdct
OBLRes/fr_FR/ConnectionFAQ.html
.html
OBLRes/fr_FR/LicenseFAQ.html
.html
OBLRes/fr_FR/Main.zdct
OBLRes/fr_FR/oobe_launcher.zdct
OBLRes/fr_MA/ConnectionFAQ.html
.html
OBLRes/fr_MA/LicenseFAQ.html
.html
OBLRes/fr_MA/Main.zdct
OBLRes/fr_MA/oobe_launcher.zdct
OBLRes/fr_MX/ConnectionFAQ.html
.html
OBLRes/fr_MX/LicenseFAQ.html
.html
OBLRes/fr_MX/Main.zdct
OBLRes/fr_MX/oobe_launcher.zdct
OBLRes/fr_XM/ConnectionFAQ.html
.html
OBLRes/fr_XM/LicenseFAQ.html
.html
OBLRes/fr_XM/Main.zdct
OBLRes/fr_XM/oobe_launcher.zdct
OBLRes/he_IL/ConnectionFAQ.html
.html
OBLRes/he_IL/LicenseFAQ.html
.html
OBLRes/he_IL/Main.zdct
OBLRes/hr_HR/ConnectionFAQ.html
.html
OBLRes/hr_HR/LicenseFAQ.html
.html
OBLRes/hr_HR/Main.zdct
OBLRes/hr_HR/oobe_launcher.zdct
OBLRes/hu_HU/ConnectionFAQ.html
.html
OBLRes/hu_HU/LicenseFAQ.html
.html
OBLRes/hu_HU/Main.zdct
OBLRes/hu_HU/oobe_launcher.zdct
OBLRes/it_IT/ConnectionFAQ.html
.html
OBLRes/it_IT/LicenseFAQ.html
.html
OBLRes/it_IT/Main.zdct
OBLRes/it_IT/oobe_launcher.zdct
OBLRes/ja_JP/ConnectionFAQ.html
.html
OBLRes/ja_JP/LicenseFAQ.html
.html
OBLRes/ja_JP/Main.zdct
OBLRes/ja_JP/oobe_launcher.zdct
OBLRes/ko_KR/ConnectionFAQ.html
.html
OBLRes/ko_KR/LicenseFAQ.html
.html
OBLRes/ko_KR/Main.zdct
OBLRes/ko_KR/oobe_launcher.zdct
OBLRes/lt_LT/ConnectionFAQ.html
.html
OBLRes/lt_LT/LicenseFAQ.html
.html
OBLRes/lt_LT/Main.zdct
OBLRes/lt_LT/oobe_launcher.zdct
OBLRes/lv_LV/ConnectionFAQ.html
.html
OBLRes/lv_LV/LicenseFAQ.html
.html
OBLRes/lv_LV/Main.zdct
OBLRes/lv_LV/oobe_launcher.zdct
OBLRes/nb_NO/ConnectionFAQ.html
.html
OBLRes/nb_NO/LicenseFAQ.html
.html
OBLRes/nb_NO/Main.zdct
OBLRes/nb_NO/oobe_launcher.zdct
OBLRes/nl_NL/ConnectionFAQ.html
.html
OBLRes/nl_NL/LicenseFAQ.html
.html
OBLRes/nl_NL/Main.zdct
OBLRes/nl_NL/oobe_launcher.zdct
OBLRes/pl_PL/ConnectionFAQ.html
.html
OBLRes/pl_PL/LicenseFAQ.html
.html
OBLRes/pl_PL/Main.zdct
OBLRes/pl_PL/oobe_launcher.zdct
OBLRes/pt_BR/ConnectionFAQ.html
.html
OBLRes/pt_BR/LicenseFAQ.html
.html
OBLRes/pt_BR/Main.zdct
OBLRes/pt_BR/oobe_launcher.zdct
OBLRes/ro_RO/ConnectionFAQ.html
.html
OBLRes/ro_RO/LicenseFAQ.html
.html
OBLRes/ro_RO/Main.zdct
OBLRes/ro_RO/oobe_launcher.zdct
OBLRes/ru_RU/ConnectionFAQ.html
.html
OBLRes/ru_RU/LicenseFAQ.html
.html
OBLRes/ru_RU/Main.zdct
OBLRes/ru_RU/oobe_launcher.zdct
OBLRes/sk_SK/ConnectionFAQ.html
.html
OBLRes/sk_SK/LicenseFAQ.html
.html
OBLRes/sk_SK/Main.zdct
OBLRes/sk_SK/oobe_launcher.zdct
OBLRes/sl_SI/ConnectionFAQ.html
.html
OBLRes/sl_SI/LicenseFAQ.html
.html
OBLRes/sl_SI/Main.zdct
OBLRes/sl_SI/oobe_launcher.zdct
OBLRes/sv_SE/ConnectionFAQ.html
.html
OBLRes/sv_SE/LicenseFAQ.html
.html
OBLRes/sv_SE/Main.zdct
OBLRes/sv_SE/oobe_launcher.zdct
OBLRes/tr_TR/ConnectionFAQ.html
.html
OBLRes/tr_TR/LicenseFAQ.html
.html
OBLRes/tr_TR/Main.zdct
OBLRes/tr_TR/oobe_launcher.zdct
OBLRes/uk_UA/ConnectionFAQ.html
.html
OBLRes/uk_UA/LicenseFAQ.html
.html
OBLRes/uk_UA/Main.zdct
OBLRes/uk_UA/oobe_launcher.zdct
OBLRes/zh_CN/ConnectionFAQ.html
OBLRes/zh_CN/LicenseFAQ.html
OBLRes/zh_CN/Main.zdct
OBLRes/zh_CN/oobe_launcher.zdct
OBLRes/zh_TW/ConnectionFAQ.html
.html
OBLRes/zh_TW/LicenseFAQ.html
.html
OBLRes/zh_TW/Main.zdct
OBLRes/zh_TW/oobe_launcher.zdct
P6Flex.swf
P6Native.dll
.dll windows:5 windows x86 arch:x86

cd5c5071b012ca09c96c1d597830267e

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e3:78:a5:d1:ef:33:bb:77:78:2f:71:e3:31:1a:f6:5b:8d:85:11:3b
Signer

Actual PE Digest

e3:78:a5:d1:ef:33:bb:77:78:2f:71:e3:31:1a:f6:5b:8d:85:11:3b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\P6Native.pdb

Imports

netapi32

NetApiBufferFree
NetUserGetLocalGroups

secur32

GetUserNameExW

kernel32

CloseHandle
ReleaseMutex
CreateMutexW
SetLastError
FlushFileBuffers
CreateFileW
DeleteFileW
WriteFile
MultiByteToWideChar
ReadFile
GetFileSize
WideCharToMultiByte
WaitForSingleObject
CreateProcessW
GetModuleFileNameW
Sleep
GetTempPathW
RemoveDirectoryW
InterlockedIncrement
lstrlenA
CreateSemaphoreW
ReleaseSemaphore
GetCurrentProcessId
CreateDirectoryW
GetDateFormatW
GetTimeFormatW
GetLocalTime
FreeLibrary
GetProcAddress
LoadLibraryW
SetDllDirectoryW
LocalFree
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
AreFileApisANSI
SetFilePointer
SetEndOfFile
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
GetFileAttributesW
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetSystemTime
GetSystemTimeAsFileTime
LockFileEx
GetTempPathA
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
GetCurrentProcess
SetFileAttributesW
CopyFileW
lstrlenW
GetACP
GetFileSizeEx
OpenMutexW
IsDebuggerPresent
SetEnvironmentVariableA
WriteConsoleW
SetEnvironmentVariableW
FindFirstFileW
FindNextFileW
FindClose
GetVersionExW
GetSystemInfo
GetLastError
InterlockedDecrement
GetCurrentDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LeaveCriticalSection
CompareStringW
GetProcessHeap
SetStdHandle
GetFileType
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetConsoleMode
GetConsoleCP
HeapSize
GetModuleFileNameA
GetStartupInfoW
SetHandleCount
IsValidCodePage
GetOEMCP
GetLocaleInfoW
GetStdHandle
PeekNamedPipe
GetFileInformationByHandle
IsProcessorFeaturePresent
GetCPInfo
LCMapStringW
GetTimeZoneInformation
MoveFileW
GetCommandLineA
HeapReAlloc
HeapAlloc
InitializeCriticalSectionAndSpinCount
ExitProcess
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapDestroy
HeapCreate
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
EncodePointer
DecodePointer
RaiseException
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExW
RtlUnwind
HeapFree

user32

wsprintfW
GetSystemMetrics

advapi32

GetNamedSecurityInfoW
SetNamedSecurityInfoW
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
GetUserNameW

shell32

SHGetSpecialFolderPathW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW

ole32

StringFromGUID2
OleRun
CLSIDFromProgID
CoInitialize
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CLSIDFromString
CoInitializeSecurity
CoCreateGuid

oleaut32

VariantInit
SysStringLen
VariantCopy
SysFreeString
SysAllocString
GetErrorInfo
VariantClear

shlwapi

PathRemoveFileSpecW
PathIsDirectoryW
PathStripPathW
StrToIntExA
PathRemoveBackslashW
PathAppendW
PathRemoveExtensionW
PathIsFileSpecW
PathAddExtensionW
PathRenameExtensionW
PathFileExistsW

Exports

Exports

finalizeApplet
freeMemory
initializeApplet
processMessage

Sections

.text
Size: 804KB - Virtual size: 803KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RNResources/Dictionary/cs_CZ/stringTable.zdct
RNResources/Dictionary/da_DK/stringTable.zdct
RNResources/Dictionary/de_DE/stringTable.zdct
RNResources/Dictionary/en_AE/stringTable.zdct
RNResources/Dictionary/en_GB/stringTable.zdct
RNResources/Dictionary/en_IL/stringTable.zdct
RNResources/Dictionary/en_US/stringTable.zdct
RNResources/Dictionary/es_ES/stringTable.zdct
RNResources/Dictionary/es_LA/stringTable.zdct
RNResources/Dictionary/es_MX/stringTable.zdct
RNResources/Dictionary/es_NA/stringTable.zdct
RNResources/Dictionary/fi_FI/stringTable.zdct
RNResources/Dictionary/fr_CA/stringTable.zdct
RNResources/Dictionary/fr_FR/stringTable.zdct
RNResources/Dictionary/fr_MA/stringTable.zdct
RNResources/Dictionary/fr_XM/stringTable.zdct
RNResources/Dictionary/hr_HR/stringTable.zdct
RNResources/Dictionary/hu_HU/stringTable.zdct
RNResources/Dictionary/it_IT/stringTable.zdct
RNResources/Dictionary/ja_JP/stringTable.zdct
RNResources/Dictionary/ko_KR/stringTable.zdct
RNResources/Dictionary/nb_NO/stringTable.zdct
RNResources/Dictionary/nl_NL/stringTable.zdct
RNResources/Dictionary/pl_PL/stringTable.zdct
RNResources/Dictionary/pt_BR/stringTable.zdct
RNResources/Dictionary/ro_RO/stringTable.zdct
RNResources/Dictionary/ru_RU/stringTable.zdct
RNResources/Dictionary/sk_SK/stringTable.zdct
RNResources/Dictionary/sl_SI/stringTable.zdct
RNResources/Dictionary/sv_SE/stringTable.zdct
RNResources/Dictionary/tr_TR/stringTable.zdct
RNResources/Dictionary/uk_UA/stringTable.zdct
RNResources/Dictionary/zh_CN/stringTable.zdct
RNResources/Dictionary/zh_TW/stringTable.zdct
VulcanBridge.dll
.dll windows:5 windows x86 arch:x86

bef4ee6bcd0da427c42e6c5dcab96e32

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

fa:4b:3b:a8:b7:fa:96:f5:1a:58:47:92:29:38:72:87:63:39:31:3c
Signer

Actual PE Digest

fa:4b:3b:a8:b7:fa:96:f5:1a:58:47:92:29:38:72:87:63:39:31:3c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\VulcanBridge.pdb

Imports

vulcanmessage

??0SuiteMessage@api@vulcan@adobe@@QAE@PBD@Z
??1SuiteMessage@api@vulcan@adobe@@UAE@XZ
?SetPayload@SuiteMessage@api@vulcan@adobe@@QAEXPBD@Z
?TYPE_PREFIX@SuiteMessage@api@vulcan@adobe@@2QBDB
?Create@IVulcanMessageDispatcher@api@vulcan@adobe@@SAPAV1234@PBDPAVIVulcanMessageListener@234@1@Z

kernel32

CreateMutexW
WaitForSingleObject
Sleep
ReleaseSemaphore
GetLastError
CreateSemaphoreW
ReleaseMutex
CloseHandle
GetCurrentProcessId
GetDateFormatW
CreateDirectoryW
WriteFile
WriteConsoleW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLocalTime
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetFilePointer
GetFileSizeEx
WideCharToMultiByte
OpenMutexW
SetStdHandle
CreateFileA
SetEndOfFile
GetProcessHeap
CompareStringW
GetTimeFormatW
GetCurrentThreadId
LoadLibraryW
HeapReAlloc
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
SetEnvironmentVariableA
GetCommandLineA
MoveFileW
GetTimeZoneInformation
RaiseException
RtlUnwind
LCMapStringW
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
HeapSize
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers

user32

wsprintfW

shell32

SHCreateDirectoryExW

shlwapi

PathAppendW
PathAddExtensionW
PathRemoveFileSpecW
PathRenameExtensionW
PathIsDirectoryW
PathRemoveExtensionW
PathFileExistsW
PathIsFileSpecW

Exports

Exports

broadcastVulcanEvent

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VulcanMessage.dll
.dll windows:5 windows x86 arch:x86

6bef78ab713ff794cd4a02c503ce8198

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8e:48:e1:49:73:b5:27:91:8f:ba:60:3e:c1:87:87:f2:71:30:2a:d7
Signer

Actual PE Digest

8e:48:e1:49:73:b5:27:91:8f:ba:60:3e:c1:87:87:f2:71:30:2a:d7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\sdkbuild\products\vulcan\CS6\perforce\vulcan\main\projects\native\VulcanMessageLib\Binaries\Win32\Release\VulcanMessage.pdb

Imports

kernel32

WideCharToMultiByte
LoadLibraryW
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

msvcp100

?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBE_JXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?good@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Xlength_error@std@@YAXPBD@Z
??0id@locale@std@@QAE@I@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xout_of_range@std@@YAXPBD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z

msvcr100

_unlock
__dllonexit
_lock
_onexit
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
?terminate@@YAXXZ
memchr
??0exception@std@@QAE@XZ
_errno
_wstat64i32
_wgetenv
strstr
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
??_V@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
_purecall
?what@exception@std@@UBEPBDXZ
memcpy
_CxxThrowException
__CxxFrameHandler3
__RTDynamicCast

Exports

Exports

??0EndPoint@api@vulcan@adobe@@QAE@ABV0123@@Z
??0EndPoint@api@vulcan@adobe@@QAE@XZ
??0ErrorMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0ErrorMessage@api@vulcan@adobe@@QAE@XZ
??0GetAppPathMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0GetAppPathMessage@api@vulcan@adobe@@QAE@XZ
??0GetTargetSpecifiersMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0GetTargetSpecifiersMessage@api@vulcan@adobe@@QAE@XZ
??0HostMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0HostMessage@api@vulcan@adobe@@QAE@PBD@Z
??0IVulcanMessageDispatcher@api@vulcan@adobe@@QAE@ABV0123@@Z
??0IVulcanMessageDispatcher@api@vulcan@adobe@@QAE@XZ
??0IVulcanMessageListener@api@vulcan@adobe@@QAE@ABV0123@@Z
??0IVulcanMessageListener@api@vulcan@adobe@@QAE@XZ
??0IsAppInstalledMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0IsAppInstalledMessage@api@vulcan@adobe@@QAE@XZ
??0IsAppRunningMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0IsAppRunningMessage@api@vulcan@adobe@@QAE@XZ
??0LaunchAppMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0LaunchAppMessage@api@vulcan@adobe@@QAE@XZ
??0SuiteMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0SuiteMessage@api@vulcan@adobe@@QAE@PBD@Z
??0VulcanMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0VulcanMessage@api@vulcan@adobe@@QAE@XZ
??1EndPoint@api@vulcan@adobe@@UAE@XZ
??1ErrorMessage@api@vulcan@adobe@@UAE@XZ
??1GetAppPathMessage@api@vulcan@adobe@@UAE@XZ
??1GetTargetSpecifiersMessage@api@vulcan@adobe@@UAE@XZ
??1HostMessage@api@vulcan@adobe@@UAE@XZ
??1IVulcanMessageDispatcher@api@vulcan@adobe@@UAE@XZ
??1IsAppInstalledMessage@api@vulcan@adobe@@UAE@XZ
??1IsAppRunningMessage@api@vulcan@adobe@@UAE@XZ
??1LaunchAppMessage@api@vulcan@adobe@@UAE@XZ
??1SuiteMessage@api@vulcan@adobe@@UAE@XZ
??1VulcanMessage@api@vulcan@adobe@@UAE@XZ
??4EndPoint@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4ErrorMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4GetAppPathMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4GetTargetSpecifiersMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4HostMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IVulcanMessageDispatcher@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IVulcanMessageListener@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IsAppInstalledMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IsAppRunningMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4LaunchAppMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4MessageUtil@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4SuiteMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4VulcanMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??8EndPoint@api@vulcan@adobe@@QBE_NABV0123@@Z
??9EndPoint@api@vulcan@adobe@@QBE_NABV0123@@Z
??_7EndPoint@api@vulcan@adobe@@6B@
??_7ErrorMessage@api@vulcan@adobe@@6B@
??_7GetAppPathMessage@api@vulcan@adobe@@6B@
??_7GetTargetSpecifiersMessage@api@vulcan@adobe@@6B@
??_7HostMessage@api@vulcan@adobe@@6B@
??_7IVulcanMessageDispatcher@api@vulcan@adobe@@6B@
??_7IVulcanMessageListener@api@vulcan@adobe@@6B@
??_7IsAppInstalledMessage@api@vulcan@adobe@@6B@
??_7IsAppRunningMessage@api@vulcan@adobe@@6B@
??_7LaunchAppMessage@api@vulcan@adobe@@6B@
??_7SuiteMessage@api@vulcan@adobe@@6B@
??_7VulcanMessage@api@vulcan@adobe@@6B@
?Clone@ErrorMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@GetAppPathMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@GetTargetSpecifiersMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@HostMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@IsAppInstalledMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@IsAppRunningMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@LaunchAppMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@SuiteMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Create@EndPoint@api@vulcan@adobe@@SA?AV1234@PBD@Z
?Create@IVulcanMessageDispatcher@api@vulcan@adobe@@SAPAV1234@PBDPAVIVulcanMessageListener@234@1@Z
?CreateMessage@MessageUtil@api@vulcan@adobe@@SAPAVVulcanMessage@234@PBD@Z
?CreateMessageByType@MessageUtil@api@vulcan@adobe@@SAPAVVulcanMessage@234@PBD@Z
?GetAppId@EndPoint@api@vulcan@adobe@@QBEXPAD@Z
?GetAppId@VulcanMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetAppIdSize@EndPoint@api@vulcan@adobe@@QBEIXZ
?GetAppIdSize@VulcanMessage@api@vulcan@adobe@@QBEIXZ
?GetCmdLine@LaunchAppMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetCmdLineSize@LaunchAppMessage@api@vulcan@adobe@@QBEIXZ
?GetData@ErrorMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@GetAppPathMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@GetTargetSpecifiersMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@HostMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@IsAppInstalledMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@IsAppRunningMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@LaunchAppMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@SuiteMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetDataSize@ErrorMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@GetAppPathMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@GetTargetSpecifiersMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@HostMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@IsAppInstalledMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@IsAppRunningMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@LaunchAppMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@SuiteMessage@api@vulcan@adobe@@UBEIXZ
?GetDestinationCount@SuiteMessage@api@vulcan@adobe@@QBEIXZ
?GetDestinations@SuiteMessage@api@vulcan@adobe@@QBEXPAVEndPoint@234@@Z
?GetError@ErrorMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetErrorSize@ErrorMessage@api@vulcan@adobe@@QBEIXZ
?GetFault@ErrorMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetFaultSize@ErrorMessage@api@vulcan@adobe@@QBEIXZ
?GetFocus@LaunchAppMessage@api@vulcan@adobe@@QBE_NXZ
?GetId@EndPoint@api@vulcan@adobe@@QBEXPAD@Z
?GetIdSize@EndPoint@api@vulcan@adobe@@QBEIXZ
?GetPayload@HostMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetPayload@SuiteMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetPayloadSize@HostMessage@api@vulcan@adobe@@QBEIXZ
?GetPayloadSize@SuiteMessage@api@vulcan@adobe@@QBEIXZ
?GetResult@GetAppPathMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetResult@GetTargetSpecifiersMessage@api@vulcan@adobe@@QBEXIPAD@Z
?GetResult@IsAppInstalledMessage@api@vulcan@adobe@@QBE_NXZ
?GetResult@IsAppRunningMessage@api@vulcan@adobe@@QBE_NXZ
?GetResult@LaunchAppMessage@api@vulcan@adobe@@QBE_NXZ
?GetResultCount@GetTargetSpecifiersMessage@api@vulcan@adobe@@QBEIXZ
?GetResultSize@GetAppPathMessage@api@vulcan@adobe@@QBEIXZ
?GetResultSize@GetTargetSpecifiersMessage@api@vulcan@adobe@@QBEII@Z
?GetScope@VulcanMessage@api@vulcan@adobe@@QBE?AW4MessageScope@234@XZ
?GetSource@SuiteMessage@api@vulcan@adobe@@QBE?AVEndPoint@234@XZ
?GetTargetSpecifier@GetAppPathMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTargetSpecifier@IsAppInstalledMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTargetSpecifier@IsAppRunningMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTargetSpecifier@LaunchAppMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTargetSpecifierSize@GetAppPathMessage@api@vulcan@adobe@@QBEIXZ
?GetTargetSpecifierSize@IsAppInstalledMessage@api@vulcan@adobe@@QBEIXZ
?GetTargetSpecifierSize@IsAppRunningMessage@api@vulcan@adobe@@QBEIXZ
?GetTargetSpecifierSize@LaunchAppMessage@api@vulcan@adobe@@QBEIXZ
?GetType@VulcanMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTypeSize@VulcanMessage@api@vulcan@adobe@@QBEIXZ
?GetXmlSize@EndPoint@api@vulcan@adobe@@QBEIXZ
?GetXmlSize@VulcanMessage@api@vulcan@adobe@@UBEIXZ
?INVALID_ENDPOINT@EndPoint@api@vulcan@adobe@@2V1234@B
?IsHostMessage@HostMessage@api@vulcan@adobe@@SA_NABVVulcanMessage@234@@Z
?IsSuiteMessage@SuiteMessage@api@vulcan@adobe@@SA_NABVVulcanMessage@234@@Z
?SetAppId@EndPoint@api@vulcan@adobe@@QAEXPBD@Z
?SetAppId@MessageUtil@api@vulcan@adobe@@SAXAAVVulcanMessage@234@PBD@Z
?SetCmdLine@LaunchAppMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetData@ErrorMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@GetAppPathMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@GetTargetSpecifiersMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@HostMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@IsAppInstalledMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@IsAppRunningMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@LaunchAppMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@SuiteMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetDestination@SuiteMessage@api@vulcan@adobe@@QAEXABVEndPoint@234@@Z
?SetDestinations@SuiteMessage@api@vulcan@adobe@@QAEXPBVEndPoint@234@I@Z
?SetFocus@LaunchAppMessage@api@vulcan@adobe@@QAEX_N@Z
?SetId@EndPoint@api@vulcan@adobe@@QAEXPBD@Z
?SetPayload@HostMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetPayload@HostMessage@api@vulcan@adobe@@QAEXPBDI@Z
?SetPayload@SuiteMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetPayload@SuiteMessage@api@vulcan@adobe@@QAEXPBDI@Z
?SetSource@SuiteMessage@api@vulcan@adobe@@QAEXABVEndPoint@234@@Z
?SetTargetSpecifier@GetAppPathMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetTargetSpecifier@IsAppInstalledMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetTargetSpecifier@IsAppRunningMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetTargetSpecifier@LaunchAppMessage@api@vulcan@adobe@@QAEXPBD@Z
?TYPE@ErrorMessage@api@vulcan@adobe@@2QBDB
?TYPE@GetAppPathMessage@api@vulcan@adobe@@2QBDB
?TYPE@GetTargetSpecifiersMessage@api@vulcan@adobe@@2QBDB
?TYPE@IsAppInstalledMessage@api@vulcan@adobe@@2QBDB
?TYPE@IsAppRunningMessage@api@vulcan@adobe@@2QBDB
?TYPE@LaunchAppMessage@api@vulcan@adobe@@2QBDB
?TYPE_PREFIX@HostMessage@api@vulcan@adobe@@2QBDB
?TYPE_PREFIX@SuiteMessage@api@vulcan@adobe@@2QBDB
?TYPE_PREFIX@VulcanMessage@api@vulcan@adobe@@2QBDB
?ToXml@EndPoint@api@vulcan@adobe@@QBEXPAD@Z
?ToXml@VulcanMessage@api@vulcan@adobe@@UBEXPAD@Z

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZStringResources/FontCustomization.xml
.xml
ZStringResources/cs_CZ/stringtable.xml
.vbs .xml polyglot
ZStringResources/da_DK/stringtable.xml
.vbs .xml polyglot
ZStringResources/de_DE/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_AE/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_GB/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_IL/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_US/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_XM/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_ES/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_LA/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_MX/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_NA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fi_FI/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_CA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_FR/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_MA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_XM/stringtable.xml
.vbs .xml polyglot
ZStringResources/hr_HR/stringtable.xml
.vbs .xml polyglot
ZStringResources/hu_HU/stringtable.xml
.vbs .xml polyglot
ZStringResources/it_IT/stringtable.xml
.vbs .xml polyglot
ZStringResources/ja_JP/stringtable.xml
.vbs .xml polyglot
ZStringResources/ko_KR/stringtable.xml
.vbs .xml polyglot
ZStringResources/nb_NO/stringtable.xml
.vbs .xml polyglot
ZStringResources/nl_NL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pl_PL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pt_BR/stringtable.xml
.vbs .xml polyglot
ZStringResources/ro_RO/stringtable.xml
.vbs .xml polyglot
ZStringResources/ru_RU/stringtable.xml
.vbs .xml polyglot
ZStringResources/sk_SK/stringtable.xml
.vbs .xml polyglot
ZStringResources/sl_SI/stringtable.xml
.vbs .xml polyglot
ZStringResources/sv_SE/stringtable.xml
.vbs .xml polyglot
ZStringResources/tr_TR/stringtable.xml
.vbs .xml polyglot
ZStringResources/uk_UA/stringtable.xml
.vbs .xml polyglot
ZStringResources/zh_CN/stringtable.xml
.vbs .xml polyglot
ZStringResources/zh_TW/stringtable.xml
.vbs .xml polyglot
adobe_licutil.exe
.exe windows:5 windows x86 arch:x86

57ebdbbabea330d5c4085280a7d5617b

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c5:d4:c6:82:6e:f6:7b:e3:02:22:89:fc:5a:12:a7:6a:c2:b9:45:03
Signer

Actual PE Digest

c5:d4:c6:82:6e:f6:7b:e3:02:22:89:fc:5a:12:a7:6a:c2:b9:45:03

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

none

Imports

winhttp

WinHttpGetProxyForUrl
WinHttpSetOption
WinHttpGetIEProxyConfigForCurrentUser
WinHttpOpen
WinHttpReceiveResponse
WinHttpQueryDataAvailable
WinHttpSetStatusCallback
WinHttpQueryHeaders
WinHttpReadData
WinHttpCrackUrl
WinHttpCloseHandle
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSetCredentials
WinHttpSendRequest

setupapi

SetupDiGetDeviceInstanceIdW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

GetModuleFileNameW
GlobalFree
GetComputerNameExW
InterlockedIncrement
InterlockedDecrement
CloseHandle
CreateProcessW
SetEnvironmentVariableA
CreateMutexW
SetEvent
WaitForMultipleObjects
CreateEventW
GetTimeZoneInformation
GetVersionExW
OutputDebugStringA
QueryPerformanceCounter
GetEnvironmentVariableA
QueryPerformanceFrequency
lstrlenA
GetTempPathW
LocalFree
GetCurrentProcess
GetCurrentThread
FindClose
FindNextFileW
FindFirstFileW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileW
SetFileAttributesW
GetFileAttributesW
CreateDirectoryW
IsDBCSLeadByteEx
GetFileSize
SetFilePointer
SetEndOfFile
UnlockFileEx
LoadLibraryW
ReadFile
FlushFileBuffers
LockFileEx
LocalAlloc
WaitForSingleObject
WideCharToMultiByte
SetLastError
DeleteFileW
GetDateFormatW
GetTimeFormatW
GetLocalTime
GetFullPathNameW
GetFullPathNameA
CreateFileA
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
GetFileAttributesA
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
GetCurrentThreadId
GetCurrentProcessId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
ReleaseSemaphore
CreateSemaphoreW
HeapSize
GetStdHandle
ExitProcess
GetProcAddress
GetLastError
FreeLibrary
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
CompareStringW
GetStartupInfoW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
Sleep
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
SetStdHandle
GetLocaleInfoW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
MultiByteToWideChar
WriteConsoleW
GetProcessHeap
WriteFile
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
GetCPInfo
LCMapStringW
MoveFileA
FindFirstFileExA
GetDriveTypeA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
GetTimeFormatA
HeapSetInformation
GetCommandLineW
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
RaiseException
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc

user32

wsprintfW
MessageBoxW

advapi32

RegDeleteKeyW
GetUserNameW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
CryptDestroyKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextW
CryptExportKey
SetEntriesInAclW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
SetSecurityInfo
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid

shell32

SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHGetFolderPathW

ole32

CoInitialize
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize

oleaut32

SysStringLen
SysAllocString
SysFreeString
VariantClear
SysAllocStringByteLen

shlwapi

PathRemoveFileSpecW
PathFileExistsW

Exports

Exports

GetAsnVersion
IAL_ActivateLicense
IAL_CloseSession
IAL_CreateSession
IAL_DeactivateLicense
IAL_GetAULData
IAL_GetEntitledSerialData
IAL_GetEntitlementsForLEIDS
IAL_GetSLConfigData
IAL_GetType2aOfflineException
IAL_GetVersion
IAL_ReloadLocalDispatchTable
IAL_SetLicensingLEID
IAL_SetLoggingMethod
IAL_SetProxyDetails
IAL_ValidateSerial
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makePrivate
asn_makePrivateEx

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
adobe_oobelib.dll
.dll windows:5 windows x86 arch:x86

ab825009e2c1880cbe3bd6f1469fb609

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a3:84:d9:e0:0b:05:ec:c4:f7:8c:de:61:31:f8:62:08:15:03:25:26
Signer

Actual PE Digest

a3:84:d9:e0:0b:05:ec:c4:f7:8c:de:61:31:f8:62:08:15:03:25:26

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

none

Imports

winhttp

WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpSetOption
WinHttpOpen
WinHttpReceiveResponse
WinHttpQueryDataAvailable
WinHttpSetStatusCallback
WinHttpQueryHeaders
WinHttpReadData
WinHttpSendRequest
WinHttpCrackUrl
WinHttpCloseHandle
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSetCredentials

iphlpapi

GetIfTable

setupapi

SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
SetupDiGetClassDevsW

kernel32

SetEndOfFile
WriteFile
SetFilePointer
LockFileEx
GetFileSize
CreateFileW
InitializeCriticalSection
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
SwitchToThread
ResumeThread
CreateThread
FreeLibrary
GetProcAddress
LoadLibraryW
WideCharToMultiByte
GetModuleFileNameW
GlobalFree
GetComputerNameExW
InterlockedIncrement
InterlockedDecrement
GetVersionExW
SetEvent
OpenEventW
WaitForMultipleObjects
CreateEventW
GetExitCodeThread
TerminateThread
OutputDebugStringA
QueryPerformanceCounter
GetEnvironmentVariableA
QueryPerformanceFrequency
GetTempPathW
GetTimeZoneInformation
lstrlenA
LocalFree
lstrlenW
GetCurrentProcess
GetCurrentThread
FindClose
MultiByteToWideChar
FindFirstFileW
SetFileAttributesW
GetFileAttributesW
CreateDirectoryW
ReadFile
LocalAlloc
GetTickCount
GetLocalTime
FlushFileBuffers
Sleep
SetLastError
DeleteFileW
GetDateFormatW
GetTimeFormatW
GetFullPathNameW
GetFullPathNameA
CreateFileA
UnlockFile
LockFile
GetSystemTimeAsFileTime
FormatMessageA
GetFileAttributesA
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
GetCurrentThreadId
GetCurrentProcessId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
SystemTimeToFileTime
GetACP
GetFileType
PeekNamedPipe
CreateProcessW
GetLastError
CloseHandle
GetModuleFileNameA
CompareStringW
SetEnvironmentVariableA
CreateSemaphoreW
GetCurrentDirectoryW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
GetConsoleCP
GetConsoleMode
GetOEMCP
IsValidCodePage
HeapSize
SetStdHandle
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
UnlockFileEx
GetProcessHeap
WriteConsoleW
FindNextFileW
GetFileInformationByHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStdHandle
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
GetCPInfo
LCMapStringW
MoveFileA
LocalFileTimeToFileTime
SetFileTime
GetDateFormatA
GetTimeFormatA
GetCommandLineA
FindFirstFileExW
GetDriveTypeW
HeapReAlloc
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
RtlUnwind
RaiseException
HeapAlloc
HeapFree
DecodePointer
EncodePointer
InterlockedExchange
GetStringTypeW
InterlockedCompareExchange

user32

wsprintfW

advapi32

AllocateAndInitializeSid
CryptDestroyKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextW
CryptExportKey
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetEntriesInAclW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
SetSecurityInfo
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
OpenThreadToken
OpenProcessToken
GetTokenInformation
EqualSid
FreeSid
GetUserNameW
LookupAccountNameW

shell32

SHGetFolderLocation
SHCreateDirectoryExW
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetPathFromIDListW

ole32

CoTaskMemFree
CoInitialize
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize

oleaut32

SysStringLen
SysAllocString
SysFreeString
VariantClear
SysAllocStringByteLen

shlwapi

PathRemoveFileSpecW
PathFileExistsW
PathStripPathW
PathRemoveBackslashW
PathAppendW

Exports

Exports

Adobe_OOBELib_Activate
Adobe_OOBELib_BackDoorUpgradeCheck
Adobe_OOBELib_CalculateVC
Adobe_OOBELib_CheckForUpgradeOnline
Adobe_OOBELib_CheckSubscriptionMode
Adobe_OOBELib_CheckSubscriptionValidity
Adobe_OOBELib_CheckSubscriptionValidityOnline
Adobe_OOBELib_CheckWFType
Adobe_OOBELib_CheckforUpgrade
Adobe_OOBELib_CleanUpCachePCD
Adobe_OOBELib_CreateRef
Adobe_OOBELib_Deactivate
Adobe_OOBELib_DeactivateLicense
Adobe_OOBELib_DeactivateLicenseForSerial
Adobe_OOBELib_DisAssociateAll
Adobe_OOBELib_EnumerateKeys
Adobe_OOBELib_Generate_OffLineExcpType1_ReqCode
Adobe_OOBELib_GetAdobeId
Adobe_OOBELib_GetChallengeString_UpgradeCheck
Adobe_OOBELib_GetCredentialsForProxy
Adobe_OOBELib_GetCurrentLicenseState
Adobe_OOBELib_GetEntitlement
Adobe_OOBELib_GetLicenseStatus
Adobe_OOBELib_GetLicenseStatusEx
Adobe_OOBELib_GetRefID
Adobe_OOBELib_GetSerialInfo
Adobe_OOBELib_GetServiceClaimData
Adobe_OOBELib_GetValueforKeyInSubDomain
Adobe_OOBELib_Get_OffLineExcpType1_ReqCode
Adobe_OOBELib_Get_SeatID
Adobe_OOBELib_Getversion
Adobe_OOBELib_ISOTaggingAtInstall
Adobe_OOBELib_LaunchPurchaseWorkFlow
Adobe_OOBELib_LoadActivationGraceLicense
Adobe_OOBELib_LoadOfflineGraceLicense
Adobe_OOBELib_LoadOnlineTrial
Adobe_OOBELib_LoadTrial
Adobe_OOBELib_ProcessExceptionFile
Adobe_OOBELib_Process_file
Adobe_OOBELib_ProtectedContentCheck
Adobe_OOBELib_QueryLicenses
Adobe_OOBELib_ReleaseRef
Adobe_OOBELib_RememberAdobeID
Adobe_OOBELib_RemoveKeyInSubDomainInCache
Adobe_OOBELib_Remove_payload
Adobe_OOBELib_Retrieve_SerialNumber
Adobe_OOBELib_Retrieve_SerialNumberEx
Adobe_OOBELib_Retryactivation
Adobe_OOBELib_SaveAdobeId
Adobe_OOBELib_SetAdobeId
Adobe_OOBELib_SetAdobeIdExtProfile
Adobe_OOBELib_SetAppXMLData
Adobe_OOBELib_SetClaimStatus
Adobe_OOBELib_SetClaimStatusEx
Adobe_OOBELib_SetCredentialsForProxy
Adobe_OOBELib_SetLEID
Adobe_OOBELib_SetUniversalCookie
Adobe_OOBELib_SetValueforKeyInSubDomainInCache
Adobe_OOBELib_Set_Eula
Adobe_OOBELib_Set_InstallLocale
Adobe_OOBELib_Set_serialnumber
Adobe_OOBELib_SuppressRegSerialNag
Adobe_OOBELib_SuppressRegistrationNag
Adobe_OOBELib_Suppress_Eula
Adobe_OOBELib_Suppress_Registration
Adobe_OOBELib_UpgradeCheck
Adobe_OOBELib_UpgradeDoneAtInstallTime
Adobe_OOBELib_ValidateSerialOnline
Adobe_OOBELib_Validate_SerialNumber
Adobe_OOBELib_Verify_OffLineExcpType1_ServerResponseCode
GetAsnVersion
IAL_ActivateLicense
IAL_CloseSession
IAL_CreateSession
IAL_DeactivateLicense
IAL_GetAULData
IAL_GetEntitledSerialData
IAL_GetEntitlementsForLEIDS
IAL_GetSLConfigData
IAL_GetType2aOfflineException
IAL_GetVersion
IAL_ReloadLocalDispatchTable
IAL_SetLicensingLEID
IAL_SetLoggingMethod
IAL_SetProxyDetails
IAL_ValidateSerial
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makePrivate
asn_makePrivateEx

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
adobe_upgrade.dll
.dll windows:5 windows x86 arch:x86

d8ab1023a8d497c22333105a507dd420

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f0:a0:90:a8:50:1d:d0:b8:33:72:2a:b6:53:2c:03:c9:89:33:65:de
Signer

Actual PE Digest

f0:a0:90:a8:50:1d:d0:b8:33:72:2a:b6:53:2c:03:c9:89:33:65:de

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

CM_Get_DevNode_Status
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList

shlwapi

PathStripPathW
PathAppendW
PathFileExistsW
PathRemoveBackslashW
PathRemoveBackslashA

kernel32

WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringA
LoadLibraryW
GetModuleFileNameW
GetTempPathW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FindFirstFileW
CreateDirectoryW
GetFileAttributesW
FindClose
FindNextFileW
GetFileSize
SetFilePointer
SetEndOfFile
UnlockFileEx
WriteFile
ReadFile
CreateFileW
FlushFileBuffers
LockFileEx
LocalAlloc
LocalFree
GetCurrentProcess
InterlockedDecrement
lstrlenW
QueryPerformanceCounter
GetACP
GetCurrentThreadId
GetVersionExA
AreFileApisANSI
Sleep
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
DeleteFileW
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
CloseHandle
GetLastError
lstrcpyA
lstrcmpA
LoadLibraryA
GetProcAddress
FreeLibrary
GetEnvironmentVariableA
GetStringTypeW
WriteConsoleW
InterlockedExchange
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
InterlockedCompareExchange
IsValidLocale
GetProcessHeap
lstrlenA
CompareStringW
InterlockedIncrement
LCMapStringW
SetStdHandle
PeekNamedPipe
GetFileInformationByHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentDirectoryW
GetLocaleInfoW
HeapSize
ExitProcess
GetStartupInfoW
GetFileType
GetStdHandle
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetCPInfo
GetTimeZoneInformation
IsProcessorFeaturePresent
SetLastError
HeapFree
RtlUnwind
RaiseException
GetTimeFormatA
GetDateFormatA
EncodePointer
DecodePointer
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetEnvironmentVariableA
GetDriveTypeW
GetCommandLineA
HeapReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW

advapi32

SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHCreateDirectoryExW
SHGetPathFromIDListW
SHGetFolderLocation
SHGetFolderPathW

ole32

CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoTaskMemFree
CoCreateInstance
CoUninitialize

oleaut32

SysStringLen
SysFreeString
VariantClear
SysAllocStringByteLen
SysAllocString

Exports

Exports

AULAcceptsChallengeResponse
AULCloseSession
AULGetChallengeString
AULGetQualifyingSerialNumbers
AULGetUpgradeStatus
AULIsQualifyingSerialNumberForAnyProduct
AULIsQualifyingSerialNumberForProduct
AULNeedsUpgradeCheck
AULNextProduct
AULOpenSession
AULSetQualifyingSerialNumbers
AULSetUpgradeScenario
GetAsnVersion
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makePrivate
asn_makePrivateEx

Sections

.text
Size: 851KB - Virtual size: 850KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
axlib.dll
.dll windows:5 windows x86 arch:x86

78aeb6aa6ec1389415ef05f618cab8fb

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

28:e5:f9:5d:46:e2:c6:18:6e:37:73:54:52:24:9d:a3:ef:a4:c6:e9
Signer

Actual PE Digest

28:e5:f9:5d:46:e2:c6:18:6e:37:73:54:52:24:9d:a3:ef:a4:c6:e9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\r2d2_70\win32\r2d2\client\obj\output-dir\axlib\Win32-Release\axlib.pdb

Imports

setupapi

SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
SetupDiGetClassDevsW

kernel32

LocalFree
GetCurrentProcess
SystemTimeToFileTime
GetFileAttributesW
SetFileAttributesW
FlushFileBuffers
CreateFileW
lstrlenW
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetCurrentThreadId
EnterCriticalSection
CloseHandle
GetVersionExA
AreFileApisANSI
Sleep
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
GetFileSize
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
DeleteFileW
LoadLibraryA
LoadLibraryW
GetProcAddress
FreeLibrary
LeaveCriticalSection
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
DeleteCriticalSection
LockFileEx
InterlockedIncrement
InitializeCriticalSection
GetTempPathA
GetTempPathW
FormatMessageA
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
GetEnvironmentVariableA
QueryPerformanceFrequency
OutputDebugStringA
GetModuleFileNameW
GetCurrentThread
FindClose
FindNextFileW
FindFirstFileW
GetTimeZoneInformation
CreateDirectoryW
InterlockedDecrement
UnlockFileEx
LocalAlloc
lstrlenA
HeapDestroy
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetLastError
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
SetEnvironmentVariableA
SetStdHandle
GetLocaleInfoW
HeapSize
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetProcessHeap
CompareStringW
QueryPerformanceCounter
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
ExitProcess
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCPInfo
LCMapStringW
FindFirstFileExA
GetDriveTypeA
LocalFileTimeToFileTime
SetFileTime
FindFirstFileExW
InterlockedExchange
EncodePointer
DecodePointer
GetCommandLineA
RaiseException
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW

advapi32

OpenThreadToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
SetSecurityInfo
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
GetTokenInformation
EqualSid
GetNamedSecurityInfoW
AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoW
OpenProcessToken
FreeSid

shell32

SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW

ole32

CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
CoTaskMemFree

oleaut32

SysStringLen
SysAllocString
SysFreeString
VariantClear
SysAllocStringByteLen

shlwapi

PathRemoveBackslashW
PathAppendW
PathStripPathW
PathFileExistsW

Exports

Exports

AXLibCreateRef
AXLibReleaseRef
GetAsnVersion
IsProductAlreadyLicensed
IsProductWithLEIDLicensedByMagicSN
LoadLicenseForSuiteProducts
LoadLicenseForSuiteProductsForLEIDAndSN
RemoveAdobeIDEntriesForTrial
RemoveEULAEntriesForAXFB
RemoveLicenseForSuiteProducts
RemoveLicenseForSuiteProductsForLEIDAndSN
SetAdobeIDEntriesForTrial
SetEULAEntriesForAXFB
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makePrivate
asn_makePrivateEx

Sections

.text
Size: 797KB - Virtual size: 796KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dispatchtable.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/P6/P6.pimx
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/P6/P6.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/UWA/UWA.pima
.zip
AAM Updates Notifier.exe
.exe windows:5 windows x86 arch:x86

18ad027af16c1b039f3e94812b8f807d

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2a:28:71:55:57:87:99:13:11:b6:5f:b6:70:4c:b0:c5:93:df:45:d4
Signer

Actual PE Digest

2a:28:71:55:57:87:99:13:11:b6:5f:b6:70:4c:b0:c5:93:df:45:d4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\AAMUpdatesNotifier.pdb

Imports

shlwapi

PathRenameExtensionW
PathAddExtensionW
PathIsFileSpecW
PathRemoveExtensionW
PathRemoveFileSpecW
PathStripPathW
PathRemoveBackslashW
PathAppendW
PathIsDirectoryW
PathFileExistsW

shell32

SHGetSpecialFolderPathW
Shell_NotifyIconW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
SetNamedSecurityInfoW

user32

TranslateMessage
RegisterClassExW
LoadIconW
GetCursorPos
CreatePopupMenu
CreateWindowExW
InsertMenuW
MessageBoxW
SendMessageW
UpdateWindow
DestroyMenu
DefWindowProcW
DispatchMessageW
wsprintfW
BeginPaint
LoadCursorW
SetForegroundWindow
PostMessageW
TrackPopupMenu
PostQuitMessage
GetMessageW
TranslateAcceleratorW
DestroyWindow
EndPaint
LoadAcceleratorsW

ole32

CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleRun
CoTaskMemFree

oleaut32

GetErrorInfo
SysFreeString
VariantInit
VariantCopy
VariantClear
SysAllocString

kernel32

GetOEMCP
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
IsValidCodePage
HeapSize
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
UnlockFile
TerminateProcess
HeapCreate
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
ExitProcess
SetUnhandledExceptionFilter
GetCPInfo
LCMapStringW
GetTimeZoneInformation
MoveFileW
RaiseException
RtlUnwind
HeapReAlloc
HeapAlloc
HeapFree
GetStartupInfoW
HeapSetInformation
GetCommandLineW
DecodePointer
EncodePointer
GetStringTypeW
InterlockedExchange
InterlockedCompareExchange
OpenMutexW
GetFileSizeEx
IsDBCSLeadByteEx
OpenSemaphoreW
CreateSemaphoreW
ReleaseSemaphore
InterlockedDecrement
lstrlenA
ReleaseMutex
GetUserDefaultUILanguage
LocalAlloc
GetCurrentProcess
CopyFileW
GetFileAttributesW
lstrlenW
GetLastError
CloseHandle
LocalFree
lstrcpyW
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetDateFormatW
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
GetTempPathW
GetLocalTime
GetFullPathNameW
GetFullPathNameA
CreateFileA
GetFileSize
SetFilePointer
SetEndOfFile
FreeLibrary
InterlockedIncrement
QueryPerformanceCounter
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LoadLibraryW
Sleep
GetVersionExW
LeaveCriticalSection
GetFileAttributesA
ReadFile
FlushFileBuffers
GetProcAddress
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
DeleteFileW
GetCurrentProcessId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
WaitForSingleObject
SetEvent
CreateEventW
WaitForMultipleObjects
CreateThread
GetSystemDefaultLangID
CreateMutexW
CreateProcessW
GetModuleHandleW
GetModuleFileNameW
SetLastError

Sections

.text
Size: 613KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AAMLauncher.exe
.exe windows:5 windows x86 arch:x86

821598c4ef44b42ef5a4be97cc7076d3

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ed:be:8b:80:c0:99:22:1f:77:f1:e1:dd:36:06:b2:41:f2:fd:be:28
Signer

Actual PE Digest

ed:be:8b:80:c0:99:22:1f:77:f1:e1:dd:36:06:b2:41:f2:fd:be:28

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\updater7.0\build-rel\build\build\aamlauncher\vc10\outdir-Release\AAMLauncher.pdb

Imports

advapi32

SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl

kernel32

SetEndOfFile
GetProcessHeap
CompareStringW
EncodePointer
CreateFileA
SetStdHandle
WriteConsoleW
GetCurrentProcess
CloseHandle
InterlockedDecrement
WaitForSingleObject
GetLocalTime
CreateSemaphoreA
ReleaseSemaphore
GetLastError
SetLastError
CreateMutexA
ReleaseMutex
CreateProcessW
SetEnvironmentVariableA
GetProcAddress
LoadLibraryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
DeleteFileW
CreateFileW
MoveFileW
FileTimeToLocalFileTime
GetFileTime
LocalFree
CreateDirectoryW
WideCharToMultiByte
MultiByteToWideChar
GetACP
InterlockedIncrement
GetLongPathNameW
GetTempPathW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetFilePointer
WriteFile
GetFileSizeEx
GetCurrentThreadId
GetDateFormatW
GetTimeFormatW
CreateMutexW
OpenMutexW
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
DecodePointer
Sleep
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapFree
GetSystemTimeAsFileTime
HeapReAlloc
HeapAlloc
RtlUnwind
RaiseException
GetTimeZoneInformation
GetCPInfo
LCMapStringW
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetLocaleInfoW
HeapSize
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHCreateDirectoryExW

oleaut32

VariantClear

shlwapi

PathRenameExtensionW
PathFileExistsW
PathIsDirectoryW
PathRemoveFileSpecW
PathIsFileSpecW
PathRemoveExtensionW
PathAddExtensionW
PathAppendW

Sections

.text
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AAMProductUpdate.cer
AAMUpdate.cer
Adobe Application Manager (Updater).exe
.exe windows:5 windows x86 arch:x86

27baaac976e57dbce9cf2d9715f975c5

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c1:61:74:77:58:4d:8e:9a:c3:e5:2f:7b:23:98:6f:af:c0:37:3b:e3
Signer

Actual PE Digest

c1:61:74:77:58:4d:8e:9a:c3:e5:2f:7b:23:98:6f:af:c0:37:3b:e3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\updater7.0\build-rel\build\build\updateinstaller\vc10\outdir-Release\updateinstaller.pdb

Imports

msi

ord175
ord141
ord88
ord137

shell32

ShellExecuteExW
SHFileOperationW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHCreateDirectoryExW
SHGetSpecialFolderPathW
CommandLineToArgvW

shlwapi

PathAddExtensionW
PathRemoveExtensionW
PathRenameExtensionW
PathAppendW
PathRemoveFileSpecW
PathIsFileSpecW
PathFileExistsW
PathIsDirectoryW
PathStripToRootA

winhttp

WinHttpSendRequest
WinHttpSetCredentials
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpConnect
WinHttpReceiveResponse
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpSetOption
WinHttpSetTimeouts

crypt32

CertFreeCertificateContext
CertFindCertificateInStore
CryptMsgGetParam
CryptImportPublicKeyInfo
CertGetNameStringW
CryptQueryObject

kernel32

SetWaitableTimer
OpenEventA
InterlockedCompareExchange
WaitForMultipleObjects
CreateWaitableTimerA
lstrlenA
GetTickCount
CreateEventA
CloseHandle
SetEvent
GetSystemTimeAsFileTime
GetLocalTime
GetFileAttributesW
GetProcessHeap
ReleaseSemaphore
HeapAlloc
HeapFree
WaitForSingleObject
Sleep
FreeLibrary
LoadLibraryW
GetProcAddress
DuplicateHandle
GetCurrentProcess
CreateSemaphoreA
GetCommandLineW
LocalFree
CreateProcessW
GetLastError
FindFirstFileW
GetEnvironmentStringsW
GetExitCodeProcess
FindClose
FreeEnvironmentStringsW
FindNextFileW
CreateThread
SystemTimeToFileTime
InterlockedDecrement
TerminateThread
GetExitCodeThread
SetLastError
CreateMutexA
ReleaseMutex
SetFilePointer
WriteFile
ReadFile
CreateFileW
EncodePointer
DecodePointer
FileTimeToLocalFileTime
HeapReAlloc
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
HeapCreate
InterlockedIncrement
TlsAlloc
TlsGetValue
TlsSetValue
GetModuleHandleW
GetCurrentThreadId
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
WideCharToMultiByte
GetTimeZoneInformation
GetFullPathNameW
GetFileType
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
SetHandleCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
RtlUnwind
QueryPerformanceCounter
GetCurrentProcessId
InterlockedExchange
LCMapStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
SetEndOfFile
WriteConsoleW
FlushFileBuffers
GetFullPathNameA
CompareStringW
SetEnvironmentVariableA
DeleteFileW
CopyFileW
MoveFileW
GetDiskFreeSpaceExW
GetFileTime
SetFileAttributesW
RemoveDirectoryW
GetTempFileNameW
GetVersionExW
GetVolumeInformationW
CreateDirectoryW
GetLongPathNameW
GetTempPathW
GetEnvironmentVariableW
InitializeCriticalSection
GetFileSizeEx
GetDateFormatW
GetTimeFormatW
CreateMutexW
OpenMutexW
GetFileSize
ResetEvent
LocalAlloc
CreateFileA
UnlockFile
LockFile
FormatMessageA
GetFileAttributesA
LockFileEx
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
CreateSemaphoreW
SetFilePointerEx
ResumeThread
GlobalFree
ConnectNamedPipe
CreateNamedPipeW
CreateProcessA
SearchPathA
WaitNamedPipeW
CreatePipe
ExitThread
OutputDebugStringA
TlsFree
MoveFileExW

user32

wsprintfW

advapi32

OpenProcessToken
EqualSid
AllocateAndInitializeSid
FreeSid
GetTokenInformation
CheckTokenMembership
RegCloseKey
RegSetValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetNamedSecurityInfoW
SetEntriesInAclW
RegCreateKeyExA
GetUserNameW
CryptVerifySignatureW
CryptAcquireContextW
CryptDestroyHash
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptReleaseContext

ole32

CoInitialize
CoSetProxyBlanket
CoInitializeSecurity
CoCreateInstance
CoInitializeEx

oleaut32

VariantClear
SysAllocString
SysFreeString

wintrust

WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
WTHelperGetProvCertFromChain
WinVerifyTrust

wininet

InternetOpenA
HttpQueryInfoA
InternetReadFileExA
InternetSetStatusCallbackA
InternetConnectA
HttpOpenRequestA
InternetCanonicalizeUrlA
InternetSetOptionA
HttpSendRequestA
InternetCloseHandle
InternetSetStatusCallbackW
InternetCrackUrlA

iphlpapi

GetIfTable

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AdobeAAM_rootCert.cer
LogSession.dll
.dll windows:5 windows x86 arch:x86

0781023b921ecd3f921837e0e01a84a1

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c1:71:51:80:3e:e8:28:dd:dc:c9:40:e8:ac:6c:de:94:10:49:1b:83
Signer

Actual PE Digest

c1:71:51:80:3e:e8:28:dd:dc:c9:40:e8:ac:6c:de:94:10:49:1b:83

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

WriteFile
CreateFileW
CloseHandle
FindFirstFileW
CreateProcessW
MoveFileExW
CompareFileTime
GetEnvironmentStringsW
LoadLibraryW
CopyFileW
GetDiskFreeSpaceW
FindClose
FreeEnvironmentStringsW
FindNextFileW
GetFileTime
GetFileAttributesExW
GetVersionExA
FileTimeToLocalFileTime
DeleteFileW
GetExitCodeThread
SuspendThread
FindResourceExW
MultiByteToWideChar
LoadResource
SizeofResource
LockResource
GetModuleFileNameW
ExpandEnvironmentStringsW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrlenW
VerLanguageNameW
GetLocaleInfoA
GlobalMemoryStatusEx
GetSystemInfo
SetEndOfFile
SetEnvironmentVariableW
CompareStringW
SetStdHandle
GetACP
WideCharToMultiByte
WriteProcessMemory
VirtualProtect
GetCurrentProcess
SetUnhandledExceptionFilter
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetLastError
GetSystemDirectoryA
FreeLibrary
GetProcessHeap
SetEnvironmentVariableA
FindResourceW
GetTimeZoneInformation
GetLocaleInfoW
FlushFileBuffers
CreateFileA
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
HeapSize
GetTickCount
GetConsoleMode
GetConsoleCP
SetFilePointer
ReadFile
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
Sleep
HeapFree
HeapAlloc
GetCPInfo
GetSystemTimeAsFileTime
ExitThread
GetCurrentThreadId
CreateThread
GetCurrentProcessId
GetTimeFormatA
GetDateFormatA
WriteConsoleW
GetFileType
GetStdHandle
GetCommandLineA
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
QueryPerformanceCounter

user32

GetMonitorInfoA
GetSystemMetrics
EnumDisplayMonitors

advapi32

CryptAcquireContextA
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptGetHashParam
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

ole32

CoTaskMemFree
CoCreateGuid

shlwapi

PathFileExistsW
PathIsDirectoryW

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA

Exports

Exports

UTAddToGroup
UTAddToSession
UTCloseSession
UTGetDemographic
UTGetNonDefaultDemographic
UTGetOptIn
UTInitialize
UTLogEvent
UTNewDataGroup
UTOptInGet
UTOptInSet
UTSetDemographic
UTSetNonDefaultDemographic
UTSetOptIn
UTSetSerializationState
UTStartSession

Sections

.text
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LogTransport2.exe
.exe windows:5 windows x86 arch:x86

db16a03123d1eb196dbbe74f761cce37

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4c:11:86:fa:fb:52:09:19:de:d6:19:a6:02:1e:3d:80:e1:aa:52:c6
Signer

Actual PE Digest

4c:11:86:fa:fb:52:09:19:de:d6:19:a6:02:1e:3d:80:e1:aa:52:c6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW
PathIsDirectoryW

wininet

InternetCloseHandle
HttpOpenRequestW
HttpQueryInfoW
InternetSetStatusCallbackW
InternetSetOptionW
HttpSendRequestW
InternetConnectW
InternetReadFile
InternetCrackUrlW
InternetQueryDataAvailable
InternetQueryOptionW
InternetOpenW

kernel32

GetACP
MultiByteToWideChar
FindFirstFileW
FreeLibrary
CompareFileTime
GetEnvironmentStringsW
LoadLibraryW
CopyFileW
GetVersionExW
CreateFileW
GetProcAddress
FindClose
FreeEnvironmentStringsW
FindNextFileW
GetFileTime
GetFileAttributesExW
CloseHandle
FileTimeToLocalFileTime
WideCharToMultiByte
FindResourceExW
FindResourceW
LoadResource
SizeofResource
LockResource
GetLastError
ReadFile
GetModuleFileNameW
Sleep
GetCurrentProcess
GetModuleHandleW
HeapAlloc
HeapFree
GetProcessHeap
lstrlenW
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
CreateMutexA
ReleaseMutex
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
LocalFree
FormatMessageA
GetModuleFileNameA
GetStringTypeExA
LCMapStringA
LoadLibraryA
GetTimeZoneInformation
HeapSize
DeleteFileW
SetEndOfFile
SetStdHandle
GetCurrentThreadId
GetUserDefaultLCID
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLocaleInfoW
GetCPInfo
GetFileType
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTimeFormatA
GetDateFormatA
SetConsoleCtrlHandler
ExitProcess
GetCommandLineA
HeapSetInformation
RaiseException
RtlUnwind
LCMapStringW
CompareStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
HeapCreate
HeapDestroy
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
GetUserNameW

shell32

SHGetFolderPathW
SHFileOperationW
SHCreateDirectoryExW

ole32

CoTaskMemFree
CoCreateGuid

user32

LoadStringA

Sections

.text
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
UNResources/Dictionary/cs_CZ/stringTable.zdct
UNResources/Dictionary/da_DK/stringTable.zdct
UNResources/Dictionary/de_DE/stringTable.zdct
UNResources/Dictionary/en_AE/stringTable.zdct
UNResources/Dictionary/en_GB/stringTable.zdct
UNResources/Dictionary/en_IL/stringTable.zdct
UNResources/Dictionary/en_US/stringTable.zdct
UNResources/Dictionary/es_ES/stringTable.zdct
UNResources/Dictionary/es_LA/stringTable.zdct
UNResources/Dictionary/es_MX/stringTable.zdct
UNResources/Dictionary/es_NA/stringTable.zdct
UNResources/Dictionary/fi_FI/stringTable.zdct
UNResources/Dictionary/fr_CA/stringTable.zdct
UNResources/Dictionary/fr_FR/stringTable.zdct
UNResources/Dictionary/fr_MA/stringTable.zdct
UNResources/Dictionary/fr_XM/stringTable.zdct
UNResources/Dictionary/hu_HU/stringTable.zdct
UNResources/Dictionary/it_IT/stringTable.zdct
UNResources/Dictionary/ja_JP/stringTable.zdct
UNResources/Dictionary/ko_KR/stringTable.zdct
UNResources/Dictionary/nb_NO/stringTable.zdct
UNResources/Dictionary/nl_NL/stringTable.zdct
UNResources/Dictionary/pl_PL/stringTable.zdct
UNResources/Dictionary/pt_BR/stringTable.zdct
UNResources/Dictionary/ru_RU/stringTable.zdct
UNResources/Dictionary/sv_SE/stringTable.zdct
UNResources/Dictionary/tr_TR/stringTable.zdct
UNResources/Dictionary/uk_UA/stringTable.zdct
UNResources/Dictionary/zh_CN/stringTable.zdct
UNResources/Dictionary/zh_TW/stringTable.zdct
UWAFlex.swf
UWANative.dll
.dll windows:5 windows x86 arch:x86

a050d308e6f1792ddb81277b5bb09608

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a1:81:1f:95:31:d5:0e:67:81:05:ad:cd:78:31:25:bc:71:50:c8:63
Signer

Actual PE Digest

a1:81:1f:95:31:d5:0e:67:81:05:ad:cd:78:31:25:bc:71:50:c8:63

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\UWANative.pdb

Imports

kernel32

GetCurrentProcess
GetModuleHandleW
WriteFile
WideCharToMultiByte
GetVersionExW
ReadFile
GetModuleFileNameW
CreateFileW
MultiByteToWideChar
FlushFileBuffers
GetTempPathW
GetLastError
SetLastError
GetProcAddress
FindClose
RemoveDirectoryW
FindNextFileW
ReleaseMutex
DeleteFileW
LocalFree
SetFileAttributesW
lstrlenA
InterlockedIncrement
InterlockedDecrement
ReleaseSemaphore
CreateSemaphoreW
GetCurrentProcessId
GetDateFormatW
GetTimeFormatW
GetLocalTime
FreeLibrary
FindFirstFileW
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetFilePointer
SetEndOfFile
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LeaveCriticalSection
GetFileAttributesA
GetFileAttributesW
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
CopyFileW
lstrlenW
GetACP
GetFileSizeEx
OpenMutexW
SetEnvironmentVariableA
CompareStringW
CreateMutexW
GetFileSize
CreateThread
WaitForSingleObject
Sleep
CloseHandle
GetDiskFreeSpaceExW
OpenEventW
SetEvent
CreateDirectoryW
LoadLibraryW
GetProcessHeap
WriteConsoleW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetConsoleMode
GetConsoleCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
SetHandleCount
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
HeapSize
GetStdHandle
ExitProcess
HeapDestroy
HeapCreate
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LCMapStringW
GetCPInfo
GetTimeZoneInformation
MoveFileW
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
RaiseException
RtlUnwind

user32

wsprintfW

advapi32

FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
SetNamedSecurityInfoW

shell32

SHGetPathFromIDListW
SHGetFolderPathW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetFolderLocation

ole32

CoCreateGuid
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
StringFromGUID2
CoInitialize
CoUninitialize
OleRun
CoTaskMemFree

oleaut32

GetErrorInfo
SysAllocString
VariantClear
VariantCopy
VariantInit
SysFreeString

shlwapi

PathIsFileSpecW
PathRemoveExtensionW
PathAddExtensionW
PathRenameExtensionW
PathAppendW
PathRemoveBackslashW
PathStripPathW
PathRemoveFileSpecA
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW

Exports

Exports

finalizeApplet
freeMemory
initializeApplet
processMessage

Sections

.text
Size: 618KB - Virtual size: 617KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZStringResources/FontCustomization.xml
.xml
ZStringResources/cs_CZ/stringtable.xml
.vbs .xml polyglot
ZStringResources/da_DK/stringtable.xml
.vbs .xml polyglot
ZStringResources/de_DE/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_AE/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_GB/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_IL/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_US/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_XM/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_ES/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_LA/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_MX/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_NA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fi_FI/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_CA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_FR/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_MA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_XM/stringtable.xml
.vbs .xml polyglot
ZStringResources/hu_HU/stringtable.xml
.vbs .xml polyglot
ZStringResources/it_IT/stringtable.xml
.vbs .xml polyglot
ZStringResources/ja_JP/stringtable.xml
.vbs .xml polyglot
ZStringResources/ko_KR/stringtable.xml
.vbs .xml polyglot
ZStringResources/nb_NO/stringtable.xml
.vbs .xml polyglot
ZStringResources/nl_NL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pl_PL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pt_BR/stringtable.xml
.vbs .xml polyglot
ZStringResources/ru_RU/stringtable.xml
.vbs .xml polyglot
ZStringResources/sv_SE/stringtable.xml
.vbs .xml polyglot
ZStringResources/tr_TR/stringtable.xml
.vbs .xml polyglot
ZStringResources/uk_UA/stringtable.xml
.vbs .xml polyglot
ZStringResources/zh_CN/stringtable.xml
.vbs .xml polyglot
ZStringResources/zh_TW/stringtable.xml
.vbs .xml polyglot
updatercore.dll
.dll windows:5 windows x86 arch:x86

d19d4e8f03088b14bbf0a94527cf40a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\updater7.0\build-rel\build\build\updatercore\vc10\outdir-Release\updatercore.pdb

Imports

crypt32

CryptQueryObject
CryptMsgGetParam
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptImportPublicKeyInfo

netapi32

NetApiBufferFree
NetWkstaUserGetInfo

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
ShellExecuteExW

shlwapi

PathStripToRootA
PathRemoveExtensionW
PathRemoveFileSpecW
PathAddExtensionW
PathAppendW
PathRenameExtensionW
PathIsFileSpecW
PathStripPathW
PathIsDirectoryW
PathFileExistsW
SHGetValueW
PathRemoveBackslashW

winhttp

WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetOption
WinHttpQueryHeaders
WinHttpQueryAuthSchemes
WinHttpConnect
WinHttpSendRequest
WinHttpSetCredentials
WinHttpOpen
WinHttpGetProxyForUrl
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpOpenRequest
WinHttpReceiveResponse
WinHttpSetTimeouts

kernel32

InterlockedCompareExchange
OpenEventA
WaitForMultipleObjects
WideCharToMultiByte
GetACP
MultiByteToWideChar
CreateEventA
CloseHandle
SetEvent
GetLocalTime
GetFileAttributesW
FreeLibrary
LoadLibraryW
GetProcAddress
GetTickCount
GetProcessHeap
ReleaseSemaphore
DuplicateHandle
HeapAlloc
GetCurrentProcess
HeapFree
CreateSemaphoreA
WaitForSingleObject
Sleep
GetSystemTimeAsFileTime
ConnectNamedPipe
GetLastError
FindFirstFileW
FindClose
FindNextFileW
LocalFree
CreateThread
GetSystemDefaultLCID
SystemTimeToFileTime
InterlockedDecrement
TerminateThread
FileTimeToSystemTime
GetExitCodeThread
SetLastError
CreateMutexA
ReleaseMutex
CreateNamedPipeW
FormatMessageA
WriteFile
ReadFile
CreateFileW
EncodePointer
DecodePointer
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExW
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
RaiseException
InterlockedIncrement
TlsAlloc
TlsGetValue
SetWaitableTimer
TlsFree
GetModuleHandleW
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
GetCPInfo
GetOEMCP
IsValidCodePage
GetStringTypeW
GetTimeZoneInformation
GetFullPathNameW
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetCurrentDirectoryW
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
DeleteCriticalSection
SetFilePointer
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
RtlUnwind
InterlockedExchange
LCMapStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
SetEndOfFile
WriteConsoleW
FlushFileBuffers
GetFullPathNameA
CompareStringW
SetEnvironmentVariableA
DeleteFileW
CopyFileW
MoveFileW
GetDiskFreeSpaceExW
GetFileTime
SetFileAttributesW
RemoveDirectoryW
GetTempFileNameW
GetVersionExW
GetVolumeInformationW
CreateDirectoryW
GetLongPathNameW
GetTempPathW
GetCommandLineW
InitializeCriticalSection
GetFileSizeEx
GetDateFormatW
GetTimeFormatW
CreateMutexW
OpenMutexW
GetFileSize
ResetEvent
LocalAlloc
CreateFileA
UnlockFile
LockFile
GetFileAttributesA
LockFileEx
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
CreateSemaphoreW
lstrlenW
SetFilePointerEx
ResumeThread
GlobalFree
CreateWaitableTimerA
lstrlenA
ExitThread
OutputDebugStringA
TlsSetValue

user32

wsprintfW

advapi32

AllocateAndInitializeSid
GetUserNameW
CryptReleaseContext
EqualSid
RegCreateKeyExW
GetTokenInformation
OpenProcessToken
FreeSid
CheckTokenMembership
CryptGetHashParam
RegCloseKey
RegSetValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetNamedSecurityInfoW
GetNamedSecurityInfoW
CryptHashData
CryptCreateHash
SetEntriesInAclW
CryptVerifySignatureW
CryptAcquireContextW
CryptDestroyHash

ole32

CoInitializeEx
CoCreateInstance
CoTaskMemFree
CoInitialize
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize

oleaut32

VariantInit
SysStringByteLen
SysAllocStringByteLen
VariantClear
SysAllocString
SysFreeString

ws2_32

inet_addr

wininet

InternetReadFileExA
HttpQueryInfoA
InternetOpenA
InternetSetStatusCallbackA
InternetConnectA
InternetSetOptionA
HttpOpenRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
HttpSendRequestA
InternetCloseHandle
InternetSetStatusCallbackW

wintrust

WTHelperProvDataFromStateData
WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain

iphlpapi

GetBestInterface
GetAdaptersInfo
GetIfTable

Exports

Exports

RegisterAlertUI
UCAddToPreferences
UCCheckForUpdates
UCCheckIfNonRibsPatchPresent
UCCheckUpdatesForProducts
UCDownloadUpdates
UCDownloadUpdatesGivenAAMlauncher
UCFree
UCGetAvailableUpdateStatus
UCGetInstalledChannels
UCGetInstalledUpdates
UCGetLibVersion
UCGetProxyInfo
UCGetUpdateInstallConflictInfo
UCGetUserPreferences
UCGetprogress
UCInitialize
UCInstallUpdates
UCIsOptOutRequired
UCIsSelfUpdateAvailable
UCSetOptOption
UCSetProxyInfo
UCSetUserPreferences
UCSetViewedUpdates
UCSuppressUpdates
UCTerminate
UCUserAction

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 455KB - Virtual size: 455KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
updaterinventory.dll
.dll windows:5 windows x86 arch:x86

079a2edd5203032eaaf2a5a3d981baa2

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

74:6b:19:c5:b1:fd:4e:25:be:19:cb:b0:e4:ff:57:d6:c9:19:f7:f7
Signer

Actual PE Digest

74:6b:19:c5:b1:fd:4e:25:be:19:cb:b0:e4:ff:57:d6:c9:19:f7:f7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\updater7.0\build-rel\build\build\updaterinventory\vc10\outdir-Release\updaterinventory.pdb

Imports

kernel32

DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
RaiseException
HeapCreate
HeapDestroy
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
WideCharToMultiByte
GetTimeZoneInformation
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
EncodePointer
InterlockedExchange
LoadLibraryW
RtlUnwind
LCMapStringW
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
CreateFileW
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA
GetLongPathNameW
GetTempPathW
DeleteFileW
CopyFileW
MoveFileW
SetFileAttributesW
RemoveDirectoryW
GetVersionExW
CreateDirectoryW
InitializeCriticalSection
ReadFile
MultiByteToWideChar
LocalFree
LocalAlloc
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
CreateThread
GetExitCodeThread
TerminateThread
WaitForSingleObject
InterlockedDecrement
CloseHandle
FindNextFileW
FindClose
GetCurrentProcess
FindFirstFileW
SetEndOfFile

advapi32

SetNamedSecurityInfoW
CreateWellKnownSid
GetSecurityDescriptorDacl
RegOpenKeyExW
RegSetKeySecurity
SetEntriesInAclW
RegDeleteValueW
RegGetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHGetMalloc
SHGetPathFromIDListW

ole32

CoInitialize
CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitializeEx

oleaut32

VariantInit
SysFreeString
SysAllocString
VariantClear

shlwapi

PathIsDirectoryW
PathFileExistsW
PathIsFileSpecW
PathRemoveFileSpecW

Exports

Exports

UpdaterInventoryAddToMCL
UpdaterInventoryAddToMCLWithIcon
UpdaterInventoryGetLibVersion
UpdaterInventoryIsHigherUpdatePresent
UpdaterInventoryRelease
UpdaterInventoryRemoveFromMCL
UpdaterInventorySuppressUpdates

Sections

.text
Size: 275KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
updaterstartuputility.exe
.exe windows:5 windows x86 arch:x86

a4a8d54d79f54c1eba761704c882ff05

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c4:45:db:39:1b:91:94:41:57:b7:e9:f7:89:fb:38:f1:e5:b9:41:ff
Signer

Actual PE Digest

c4:45:db:39:1b:91:94:41:57:b7:e9:f7:89:fb:38:f1:e5:b9:41:ff

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\updater7.0\build-rel\build\build\updaterstartuputility\vc10\outdir-Release\updaterstartuputility.pdb

Imports

ole32

CoInitializeEx
CoTaskMemFree
CoInitialize
CoInitializeSecurity
CoUninitialize
CoCreateInstance

advapi32

FreeSid
OpenProcessToken
GetTokenInformation
EqualSid
AllocateAndInitializeSid
CheckTokenMembership
SetNamedSecurityInfoW

netapi32

NetApiBufferFree
NetWkstaUserGetInfo

kernel32

SetEndOfFile
GetProcessHeap
CompareStringW
Sleep
CreateFileA
SetStdHandle
WriteConsoleW
GetCurrentProcess
CloseHandle
InterlockedDecrement
WaitForSingleObject
TerminateThread
GetLocalTime
GetExitCodeThread
CreateThread
MultiByteToWideChar
LocalFree
GetCommandLineW
CreateProcessW
GetLastError
SetEnvironmentVariableA
GetProcAddress
LoadLibraryW
GetVersionExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
DeleteFileW
CreateFileW
MoveFileW
FileTimeToLocalFileTime
GetFileTime
CreateDirectoryW
WideCharToMultiByte
GetACP
ReleaseMutex
InterlockedIncrement
CreateMutexA
GetLongPathNameW
GetTempPathW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetFilePointer
WriteFile
GetFileSizeEx
GetCurrentThreadId
GetDateFormatW
GetTimeFormatW
CreateMutexW
OpenMutexW
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
HeapSetInformation
GetStartupInfoW
HeapFree
GetSystemTimeAsFileTime
HeapReAlloc
HeapAlloc
RtlUnwind
RaiseException
GetTimeZoneInformation
GetCPInfo
LCMapStringW
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetOEMCP
IsValidCodePage
GetLocaleInfoW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale

shell32

SHCreateDirectoryExW
SHGetPathFromIDListW
SHGetMalloc
CommandLineToArgvW
SHGetSpecialFolderLocation

oleaut32

SysFreeString
VariantInit
VariantClear
SysAllocString

shlwapi

PathRenameExtensionW
SHGetValueW
PathFileExistsW
PathIsDirectoryW
PathRemoveFileSpecW
PathIsFileSpecW
PathRemoveExtensionW
PathAddExtensionW
PathAppendW

Sections

.text
Size: 350KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/UWA/UWA.pimx
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/UWA/UWA.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/core/PDApp.pima
.zip
AdobePIM.dll
.dll windows:5 windows x86 arch:x86

5147f1d95538d71670cacbd3d2fef4e7

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

aa:c9:91:22:5a:f1:0e:57:46:cb:7c:fc:d1:10:ab:d1:a2:8d:ae:18
Signer

Actual PE Digest

aa:c9:91:22:5a:f1:0e:57:46:cb:7c:fc:d1:10:ab:d1:a2:8d:ae:18

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\resources\AdobePIM.pdb

Imports

msi

ord147
ord74
ord145

kernel32

InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetDateFormatW
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
GetTempPathW
GetLocalTime
OpenProcess
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
FindFirstFileW
CreateProcessW
MoveFileExW
SetEvent
CopyFileW
GetVersionExW
GetModuleFileNameW
FindClose
ResetEvent
CreateEventW
RemoveDirectoryW
lstrcmpiW
FindNextFileW
GetDiskFreeSpaceExW
DeleteFileW
SetFileAttributesW
GetFileSize
GetCurrentProcess
GetModuleHandleW
GetExitCodeProcess
ReadFile
FlushFileBuffers
SetLastError
GetProcAddress
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetFilePointer
SetEndOfFile
FreeLibrary
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LoadLibraryW
LeaveCriticalSection
GetFileAttributesA
GetFileAttributesW
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
InterlockedIncrement
GetSystemTime
AreFileApisANSI
DeleteFileA
lstrlenW
GetACP
GetFileSizeEx
lstrlenA
DosDateTimeToFileTime
SetFileTime
lstrcatW
GetFileTime
LocalFileTimeToFileTime
OpenMutexW
CompareStringW
GetProcessHeap
LocalFree
GetCurrentProcessId
CloseHandle
ReleaseMutex
OpenSemaphoreW
LocalAlloc
CreateSemaphoreW
RaiseException
GetLastError
ReleaseSemaphore
Sleep
WaitForSingleObject
CreateMutexW
SetEnvironmentVariableA
RtlUnwind
WriteConsoleW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetConsoleMode
GetConsoleCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetCommandLineA
HeapReAlloc
MoveFileA
MoveFileW
HeapFree
HeapAlloc
DecodePointer
EncodePointer
GetStringTypeW
InterlockedExchange
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
HeapSize
HeapDestroy
HeapCreate
ExitProcess
GetLocaleInfoW
GetStdHandle
IsProcessorFeaturePresent
GetTimeZoneInformation
GetTempPathA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCPInfo
InterlockedCompareExchange
LCMapStringW

user32

wsprintfW

advapi32

CreateWellKnownSid
SetSecurityDescriptorDacl
GetNamedSecurityInfoW
SetNamedSecurityInfoW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
InitializeSecurityDescriptor

shell32

SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
SHGetSpecialFolderPathW
SHCreateDirectoryExW

ole32

CoCreateInstance
OleRun
CoUninitialize
CoInitialize
StringFromGUID2
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantClear
SysStringLen
SysAllocString
GetErrorInfo

shlwapi

PathRemoveExtensionW
PathAppendW
PathIsFileSpecW
PathStripPathW
PathRenameExtensionW
PathRemoveFileSpecW
PathFindFileNameW
PathIsDirectoryW
PathFileExistsW
PathAddExtensionW
PathRemoveBackslashW

Exports

Exports

AAMIU_Uninstall
AAMIU_getDeploymentValidationStatus
AAMIU_preInstallPropertySet
pim_copyPkgsFromACFToCFPath
pim_createLibraryRef
pim_createLibraryRefWithType
pim_createOrUpdateAAMInventory
pim_executeInstallModifersForInstalledPackages
pim_freeLiraryRef
pim_getAppletRegistrationInfo
pim_getCurrentPIMCFPath
pim_getCurrentPackagesVersion
pim_getCurrentPathType
pim_getInstalledPackagesInfo
pim_getPathOfType
pim_getStandardACFPath
pim_getStandardUSFPath
pim_getStandardUSFTempPath
pim_getUpdateStatusAtPath
pim_getUpdateStatusAtPathCInterface
pim_haveEnoughDiskSpaceIfACFLatest
pim_haveEnoughDiskSpaceToInstallPackages
pim_haveEnoughDiskSpaceToInstallPackagesCInterface
pim_installAdobeApplicationManager
pim_installPackage
pim_postInstallPackages
pim_registerProgressTicksCallback
pim_syncFromPathToACF
pim_syncFromPathToPath
pim_syncUSFToACF
pim_uninstallAAMFromAAMCleanerTool
pim_uninstallAAMUsingAAMCleanerTool

Sections

.text
Size: 914KB - Virtual size: 914KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.VC90.CRT/Microsoft.VC90.CRT.manifest
Microsoft.VC90.CRT/msvcm90.dll
.dll windows:5 windows x86 arch:x86

2e705c0231c4d814c2d2191566905482

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcm90.i386.pdb

Imports

msvcr90

__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
__setusermatherr
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_query_new_handler@@YAP6AHI@ZXZ
signal
_invalid_parameter
_errno
_set_invalid_parameter_handler
_get_invalid_parameter_handler
?set_terminate@@YAP6AXXZP6AXXZ@Z
_get_terminate
_set_purecall_handler
_get_purecall_handler
?set_unexpected@@YAP6AXXZP6AXXZ@Z
_get_unexpected
_fpieee_flt
_cexit
strcpy_s
strlen
_exit
_XcptFilter
_endthread
_getptd
_freefls
___fls_setvalue@8
___fls_getvalue@4
__get_flsindex
__set_flsgetvalue
_dosmaperr
_initptd
calloc
_encode_pointer
memcpy_s
memcmp
memmove_s
memset
??_V@YAXPAX@Z
___mb_cur_max_func
_invalid_parameter_noinfo
_invoke_watson
_CxxThrowException
??2@YAPAXI@Z
__CxxUnregisterExceptionObject
__CxxDetectRethrow
__CxxRegisterExceptionObject
__CxxExceptionFilter
__CxxQueryExceptionSize
abort
fgetc
fputc
ungetc
fflush
setvbuf
fwrite
fgetpos
fseek
fsetpos
fclose
__iob_func
fgetwc
fputwc
ungetwc
realloc
setlocale
sprintf_s
memcpy
___lc_handle_func
__crtGetStringTypeW
__pctype_func
___mb_cur_max_l_func
___lc_codepage_func
__crtLCMapStringW
__crtLCMapStringA
_wfsopen
mbstowcs_s
__uncaught_exception
isupper
islower
towlower
towupper
strcmp
__FrameUnwindFilter
__dllonexit
_unlock
??3@YAXPAX@Z
_ui64toa_s
_create_locale
malloc
_free_locale
_endthreadex
free

kernel32

WideCharToMultiByte
CreateThread
ResumeThread
GetLastError
ExitThread
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId

ole32

CoCreateInstance

mscoree

CorBindToRuntimeEx
_CorDllMain

Exports

Exports

?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?_Addstd@ios_base@std@@SAXPAV12@@Z
?_Atexit@@YAXP6AXXZ@Z
?_BADOFF_func@std@@YAABJXZ
?_Cerr_func@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@XZ
?_Cin_func@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@XZ
?_Clocptr_func@_Locimp@locale@std@@CAAAPAV123@XZ
?_Clog_func@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@XZ
?_Cout_func@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Fpz_func@std@@YAAA_JXZ
?_Getcvt@@YA?AU_Cvtvec@@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Id_cnt_func@id@locale@std@@CAAAHXZ
?_Id_func@?$codecvt@GDH@std@@SAAAVid@locale@2@XZ
?_Id_func@?$codecvt@_WDH@std@@SAAAVid@locale@2@XZ
?_Id_func@?$ctype@D@std@@SAAAVid@locale@2@XZ
?_Id_func@?$ctype@G@std@@SAAAVid@locale@2@XZ
?_Id_func@?$ctype@_W@std@@SAAAVid@locale@2@XZ
?_Index_func@ios_base@std@@CAAAHXZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Init_cnt_func@Init@ios_base@std@@CAAAHXZ
?_Init_ctor@Init@ios_base@std@@CAXPAV123@@Z
?_Init_dtor@Init@ios_base@std@@CAXPAV123@@Z
?_Init_locks_ctor@_Init_locks@std@@CAXPAV12@@Z
?_Init_locks_dtor@_Init_locks@std@@CAXPAV12@@Z
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?_Locimp_dtor@_Locimp@locale@std@@CAXPAV123@@Z
?_Locinfo_Addcats@_Locinfo@std@@SAAAV12@PAV12@HPBD@Z
?_Locinfo_ctor@_Locinfo@std@@SAXPAV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?_Locinfo_ctor@_Locinfo@std@@SAXPAV12@HPBD@Z
?_Locinfo_ctor@_Locinfo@std@@SAXPAV12@PBD@Z
?_Locinfo_dtor@_Locinfo@std@@SAXPAV12@@Z
?_Lockit_ctor@_Lockit@std@@CAXPAV12@@Z
?_Lockit_ctor@_Lockit@std@@CAXPAV12@H@Z
?_Lockit_ctor@_Lockit@std@@SAXH@Z
?_Lockit_dtor@_Lockit@std@@CAXPAV12@@Z
?_Lockit_dtor@_Lockit@std@@SAXH@Z
?_Mbrtowc@@YAHPAGPBDIPAHPBU_Cvtvec@@@Z
?_Mbrtowc@@YAHPA_WPBDIPAHPBU_Cvtvec@@@Z
?_Mtxdst@@YAXPAU_RTL_CRITICAL_SECTION@@@Z
?_Mtxinit@@YAXPAU_RTL_CRITICAL_SECTION@@@Z
?_Mtxlock@@YAXPAU_RTL_CRITICAL_SECTION@@@Z
?_Mtxunlock@@YAXPAU_RTL_CRITICAL_SECTION@@@Z
?_Mutex_Lock@_Mutex@std@@CAXPAV12@@Z
?_Mutex_Unlock@_Mutex@std@@CAXPAV12@@Z
?_Mutex_ctor@_Mutex@std@@CAXPAV12@@Z
?_Mutex_dtor@_Mutex@std@@CAXPAV12@@Z
?_Nomemory@std@@YAXXZ
?_Once@@YAXPAJP6AXXZ@Z
?_Setgloballocale@locale@std@@CAXPAX@Z
?_Sync_func@ios_base@std@@CAAA_NXZ
?_Wcerr_func@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@XZ
?_Wcerr_func@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@XZ
?_Wcin_func@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@1@XZ
?_Wcin_func@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@1@XZ
?_Wclog_func@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@XZ
?_Wclog_func@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@XZ
?_Wcout_func@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@XZ
?_Wcout_func@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@XZ
?_Wcrtomb@@YAHPADGPAHPBU_Cvtvec@@@Z
?_Wcrtomb@@YAHPAD_WPAHPBU_Cvtvec@@@Z
?_Xinvarg@_String_base@std@@SAXXZ
?_Xlen@_String_base@std@@SAXXZ
?_Xran@_String_base@std@@SAXXZ
?__Wcrtomb_lk@@YAHPAD_WPAHPBU_Cvtvec@@@Z
?__get_default_appdomain@@YAJPAPAUIUnknown@@@Z
?__query_new_handler_m@@YAP6MHI@ZXZ
?__release_appdomain@@YAXPAUIUnknown@@@Z
?_beginthread@@YAIP6MXPAX@ZI0@Z
?_beginthreadex@@YAIPAXIP6MI0@Z0IPAI@Z
?_fpieee_flt@@YAHKPAU_EXCEPTION_POINTERS@@P6MHPAU_FPIEEE_RECORD@@@Z@Z
?_set_invalid_parameter_handler@@YAP6AXPB_W00II@ZH@Z
?_set_invalid_parameter_handler@@YAP6MXPB_W00II@ZP6MX000II@Z@Z
?_set_new_handler@@YAP6MHI@ZP6MHI@Z@Z
?_set_purecall_handler@@YAP6AXXZH@Z
?_set_purecall_handler@@YAP6MXXZP6MXXZ@Z
?_uncaught_exception_m@std@@YA_NXZ
?classic@locale@std@@SAABV12@XZ
?empty@locale@std@@SA?AV12@XZ
?global@locale@std@@SA?AV12@ABV12@@Z
?resetiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?set_new_handler@std@@YAP6MXXZP6MXXZ@Z
?set_terminate@@YAP6MXXZP6MXXZ@Z
?set_unexpected@@YAP6MXXZP6MXXZ@Z
?setbase@std@@YA?AU?$_Smanip@H@1@H@Z
?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?setprecision@std@@YA?AU?$_Smanip@H@1@H@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?signal@@YAP6MXH@ZHH@Z
?signal@@YAP6MXH@ZHP6MXH@Z@Z
__setusermatherr_m
towctrans
wctrans
wctype

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.VC90.CRT/msvcp90.dll
.dll windows:5 windows x86 arch:x86

c2219f463c61f3122c87331837e12c34

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0f:78:4d:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2007, 00:23

Not After

23/02/2009, 00:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:14:2c:a7:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/06/2007, 23:54

Not After

13/06/2012, 00:04

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:14:2c:a7:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/06/2007, 23:54

Not After

13/06/2012, 00:04

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e9:c4:fe:36:f3:bd:3e:f2:64:2c:75:13:e1:a7:62:07:ef:2f:ea:bf
Signer

Actual PE Digest

e9:c4:fe:36:f3:bd:3e:f2:64:2c:75:13:e1:a7:62:07:ef:2f:ea:bf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcp90.i386.pdb

Imports

msvcr90

fflush
setvbuf
fwrite
??0exception@std@@QAE@XZ
_Getdays
_Getmonths
fgetpos
fseek
fsetpos
fclose
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
__iob_func
_wfsopen
mbstowcs_s
atan2
cos
exp
ldexp
log
pow
sin
sqrt
tan
fgetwc
fputwc
ungetwc
memcpy
_Strftime
strcspn
sprintf_s
abort
??0exception@std@@QAE@ABQBDH@Z
_realloc_crt
setlocale
_malloc_crt
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
fputs
__uncaught_exception
ungetc
towupper
strcmp
_create_locale
_ui64toa_s
_free_locale
__pctype_func
_errno
___mb_cur_max_l_func
___lc_codepage_func
___lc_handle_func
__crtCompareStringA
___lc_collate_cp_func
__crtLCMapStringA
isupper
_calloc_crt
islower
__crtGetStringTypeW
__crtLCMapStringW
__crtCompareStringW
isspace
tolower
strtod
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__clean_type_info_names_internal
fputc
fgetc
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??2@YAPAXI@Z
_invalid_parameter_noinfo
___mb_cur_max_func
??_V@YAXPAX@Z
_Gettnames
localeconv
free
memset
memchr
strlen
memcmp
wcslen
memmove_s
memcpy_s
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
towlower
??0exception@std@@QAE@ABQBD@Z

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
InterlockedDecrement
InterlockedIncrement
GetLocaleInfoA
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
InterlockedCompareExchange
GetSystemTimeAsFileTime

Exports

Exports

??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
??$?5DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?5GU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAG@Z
??$?5GU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAG@Z
??$?5GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?5MDU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@M@0@@Z
??$?5MGU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@M@0@@Z
??$?5M_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@M@0@@Z
??$?5NDU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@N@0@@Z
??$?5NGU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@N@0@@Z
??$?5N_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@N@0@@Z
??$?5ODU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@O@0@@Z
??$?5OGU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@O@0@@Z
??$?5O_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@O@0@@Z
??$?5U?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAC@Z
??$?5U?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??$?5U?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
??$?5U?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAE@Z
??$?5_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AA_W@Z
??$?5_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@PA_W@Z
??$?5_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?6GU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@G@Z
??$?6GU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
??$?6GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?6MDU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@M@0@@Z
??$?6MGU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@M@0@@Z
??$?6M_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$complex@M@0@@Z
??$?6NDU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@N@0@@Z
??$?6NGU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@N@0@@Z
??$?6N_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$complex@N@0@@Z
??$?6ODU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@O@0@@Z
??$?6OGU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@O@0@@Z
??$?6O_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$complex@O@0@@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@C@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@E@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBC@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBE@Z
??$?6_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@PB_W@Z
??$?6_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@_W@Z
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?8M@std@@YA_NABMABV?$complex@M@0@@Z
??$?8M@std@@YA_NABV?$complex@M@0@0@Z
??$?8M@std@@YA_NABV?$complex@M@0@ABM@Z
??$?8N@std@@YA_NABNABV?$complex@N@0@@Z
??$?8N@std@@YA_NABV?$complex@N@0@0@Z
??$?8N@std@@YA_NABV?$complex@N@0@ABN@Z
??$?8O@std@@YA_NABOABV?$complex@O@0@@Z
??$?8O@std@@YA_NABV?$complex@O@0@0@Z
??$?8O@std@@YA_NABV?$complex@O@0@ABO@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?9M@std@@YA_NABMABV?$complex@M@0@@Z
??$?9M@std@@YA_NABV?$complex@M@0@0@Z
??$?9M@std@@YA_NABV?$complex@M@0@ABM@Z
??$?9N@std@@YA_NABNABV?$complex@N@0@@Z
??$?9N@std@@YA_NABV?$complex@N@0@0@Z
??$?9N@std@@YA_NABV?$complex@N@0@ABN@Z
??$?9O@std@@YA_NABOABV?$complex@O@0@@Z
??$?9O@std@@YA_NABV?$complex@O@0@0@Z
??$?9O@std@@YA_NABV?$complex@O@0@ABO@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?DM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?DM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?DM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?DN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?DN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?DN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?DO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?DO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?DO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?GM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?GM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?GM@std@@YA?AV?$complex@M@0@ABV10@@Z
??$?GM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?GN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?GN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?GN@std@@YA?AV?$complex@N@0@ABV10@@Z
??$?GN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?GO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?GO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?GO@std@@YA?AV?$complex@O@0@ABV10@@Z
??$?GO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@G@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@GABV10@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??$?HM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?HM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?HM@std@@YA?AV?$complex@M@0@ABV10@@Z
??$?HM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?HN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?HN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?HN@std@@YA?AV?$complex@N@0@ABV10@@Z
??$?HN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?HO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?HO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?HO@std@@YA?AV?$complex@O@0@ABV10@@Z
??$?HO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@_WABV10@@Z
??$?KM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?KM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?KM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?KN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?KN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?KN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?KO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?KO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?KO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?NGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?NGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?NGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?N_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?N_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?N_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?OGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?OGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?OGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?PGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?PGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?PGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?P_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?P_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?P_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$_Fabs@M@std@@YAMABV?$complex@M@0@PAH@Z
??$_Fabs@N@std@@YANABV?$complex@N@0@PAH@Z
??$_Fabs@O@std@@YAOABV?$complex@O@0@PAH@Z
??$abs@M@std@@YAMABV?$complex@M@0@@Z
??$abs@N@std@@YANABV?$complex@N@0@@Z
??$abs@O@std@@YAOABV?$complex@O@0@@Z
??$arg@M@std@@YAMABV?$complex@M@0@@Z
??$arg@N@std@@YANABV?$complex@N@0@@Z
??$arg@O@std@@YAOABV?$complex@O@0@@Z
??$conj@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$conj@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$conj@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$cos@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$cos@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$cos@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$cosh@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$cosh@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$cosh@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$exp@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$exp@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$exp@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z
??$getline@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$getline@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@G@Z
??$getline@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$getline@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@_W@Z
??$imag@M@std@@YAMABV?$complex@M@0@@Z
??$imag@N@std@@YANABV?$complex@N@0@@Z
??$imag@O@std@@YAOABV?$complex@O@0@@Z
??$log10@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$log10@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$log10@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$log@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$log@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$log@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$norm@M@std@@YAMABV?$complex@M@0@@Z
??$norm@N@std@@YANABV?$complex@N@0@@Z
??$norm@O@std@@YAOABV?$complex@O@0@@Z
??$polar@M@std@@YA?AV?$complex@M@0@ABM0@Z
??$polar@M@std@@YA?AV?$complex@M@0@ABM@Z
??$polar@N@std@@YA?AV?$complex@N@0@ABN0@Z
??$polar@N@std@@YA?AV?$complex@N@0@ABN@Z
??$polar@O@std@@YA?AV?$complex@O@0@ABO0@Z
??$polar@O@std@@YA?AV?$complex@O@0@ABO@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABV10@H@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABV10@H@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABV10@H@Z
??$real@M@std@@YAMABV?$complex@M@0@@Z
??$real@N@std@@YANABV?$complex@N@0@@Z
??$real@O@std@@YAOABV?$complex@O@0@@Z
??$sin@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$sin@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$sin@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$sinh@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$sinh@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$sinh@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$sqrt@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$sqrt@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$sqrt@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$tan@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$tan@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$tan@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$tanh@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$tanh@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$tanh@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??0?$_Complex_base@MU_C_float_complex@@@std@@QAE@ABM0@Z
??0?$_Complex_base@NU_C_double_complex@@@std@@QAE@ABN0@Z
??0?$_Complex_base@OU_C_ldouble_complex@@@std@@QAE@ABO0@Z
??0?$_Mpunct@D@std@@IAE@PBDI_N1@Z
??0?$_Mpunct@D@std@@QAE@ABV_Locinfo@1@I_N1@Z
??0?$_Mpunct@D@std@@QAE@I_N@Z
??0?$_Mpunct@G@std@@IAE@PBDI_N1@Z
??0?$_Mpunct@G@std@@QAE@ABV_Locinfo@1@I_N1@Z
??0?$_Mpunct@G@std@@QAE@I_N@Z
??0?$_Mpunct@_W@std@@IAE@PBDI_N1@Z
??0?$_Mpunct@_W@std@@QAE@ABV_Locinfo@1@I_N1@Z
??0?$_Mpunct@_W@std@@QAE@I_N@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@QAE@ABV01@@Z
??0?$_String_val@GV?$allocator@G@std@@@std@@IAE@V?$allocator@G@1@@Z
??0?$_String_val@GV?$allocator@G@std@@@std@@QAE@ABV01@@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@QAE@ABV01@@Z
??0?$allocator@D@std@@QAE@ABV01@@Z
??0?$allocator@D@std@@QAE@XZ
??0?$allocator@G@std@@QAE@ABV01@@Z
??0?$allocator@G@std@@QAE@XZ
??0?$allocator@X@std@@QAE@ABV01@@Z
??0?$allocator@X@std@@QAE@XZ
??0?$allocator@_W@std@@QAE@ABV01@@Z
??0?$allocator@_W@std@@QAE@XZ
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBGHH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBDHH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBGHH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PB_WHH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDHH@Z
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PBGHH@Z
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBGHH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDHH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBGHH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PB_WHH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDHH@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PBGHH@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBGHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBDHH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBGHH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PB_WHH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDHH@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PBGHH@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@1@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@V?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@1@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@IIABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_WABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WIABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@IAE@PBDI@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$codecvt@_WDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
??0?$collate@D@std@@IAE@PBDI@Z
??0?$collate@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@D@std@@QAE@I@Z
??0?$collate@G@std@@IAE@PBDI@Z
??0?$collate@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@G@std@@QAE@I@Z
??0?$collate@_W@std@@IAE@PBDI@Z
??0?$collate@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@_W@std@@QAE@I@Z
??0?$complex@M@std@@QAE@ABM0@Z
??0?$complex@M@std@@QAE@ABU_C_double_complex@@@Z
??0?$complex@M@std@@QAE@ABU_C_float_complex@@@Z
??0?$complex@M@std@@QAE@ABU_C_ldouble_complex@@@Z
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??0?$complex@M@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@N@std@@QAE@ABN0@Z
??0?$complex@N@std@@QAE@ABU_C_double_complex@@@Z
??0?$complex@N@std@@QAE@ABU_C_ldouble_complex@@@Z
??0?$complex@N@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@N@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@O@std@@QAE@ABO0@Z
??0?$complex@O@std@@QAE@ABU_C_ldouble_complex@@@Z
??0?$complex@O@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@O@std@@QAE@ABV?$complex@N@1@@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@IAE@PBDI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@_W@std@@QAE@I@Z
??0?$messages@D@std@@IAE@PBDI@Z
??0?$messages@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@D@std@@QAE@I@Z
??0?$messages@G@std@@IAE@PBDI@Z
??0?$messages@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@G@std@@QAE@I@Z
??0?$messages@_W@std@@IAE@PBDI@Z
??0?$messages@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@_W@std@@QAE@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$moneypunct@D$00@std@@IAE@PBDI@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$moneypunct@D$00@std@@QAE@I@Z
??0?$moneypunct@D$0A@@std@@IAE@PBDI@Z
??0?$moneypunct@D$0A@@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$moneypunct@D$0A@@std@@QAE@I@Z
??0?$moneypunct@G$00@std@@IAE@PBDI@Z
??0?$moneypunct@G$00@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$moneypunct@G$00@std@@QAE@I@Z
??0?$moneypunct@G$0A@@std@@IAE@PBDI@Z
??0?$moneypunct@G$0A@@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
??0?$moneypunct@_W$00@std@@IAE@PBDI@Z
??0?$moneypunct@_W$00@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$moneypunct@_W$00@std@@QAE@I@Z
??0?$moneypunct@_W$0A@@std@@IAE@PBDI@Z
??0?$moneypunct@_W$0A@@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$moneypunct@_W$0A@@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

Sections

.text
Size: 521KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.VC90.CRT/msvcr90.dll
.dll windows:5 windows x86 arch:x86

0fda4497453286b1daa098623dfc53ce

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0f:78:4d:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2007, 00:23

Not After

23/02/2009, 00:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:14:2c:a7:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/06/2007, 23:54

Not After

13/06/2012, 00:04

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:14:2c:a7:00:00:00:00:00:06
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/06/2007, 23:54

Not After

13/06/2012, 00:04

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:a2:0c:d7:08:3c:6d:9c:9c:e7:11:07:12:85:b9:f7:4e:10:16:d8
Signer

Actual PE Digest

4e:a2:0c:d7:08:3c:6d:9c:9c:e7:11:07:12:85:b9:f7:4e:10:16:d8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcr90.i386.pdb

Imports

kernel32

GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetSystemWindowsDirectoryW
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
TlsGetValue
DebugBreak
OutputDebugStringA
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
GetLogicalDrives
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
Beep
GetFileAttributesA
SetFileAttributesA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
MoveFileA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
DeleteFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryA
FreeLibrary
CreateProcessW
ReadFile
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocalTime
WideCharToMultiByte
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetProcessHeap
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapSize
HeapReAlloc
VirtualAlloc
HeapValidate
HeapCompact
HeapWalk
VirtualProtect
GetSystemInfo
VirtualQuery
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
CreateFileA
FlushFileBuffers
CreatePipe
CreateFileW
SetStdHandle
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
IsDBCSLeadByteEx
ReadConsoleA
ReadConsoleW
SetEndOfFile
GetFileInformationByHandle
PeekNamedPipe
InterlockedExchange
LockFile
UnlockFile
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
QueryPerformanceCounter
GetTickCount
GetStringTypeW
GetStringTypeA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetLocaleInfoW
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
GetModuleHandleA

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1exception@std@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??2@YAPAXIHPBDH@Z
??3@YAXPAX@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
??9type_info@@QBE_NABV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_Fbad_cast@std@@QAEXXZ
??_Fbad_typeid@std@@QAEXXZ
??_U@YAPAXI@Z
??_U@YAPAXIHPBDH@Z
??_V@YAXPAX@Z
?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Type_info_dtor@type_info@@CAXPAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z
?_ValidateExecute@@YAHP6GHXZ@Z
?_ValidateRead@@YAHPBXI@Z
?_ValidateWrite@@YAHPAXI@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPBG00II@Z
?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?_open@@YAHPBDHH@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?_wopen@@YAHPB_WHH@Z
?_wsopen@@YAHPB_WHHH@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?unexpected@@YAXXZ
?vswprintf@@YAHPA_WIPB_WPAD@Z
?what@exception@std@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___fls_getvalue@4
___fls_setvalue@8
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__control87_2
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__daylight
__dllonexit
__doserrno
__dstbias
__fpecode
__free_locale
__get_app_type
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv
__lconv_init
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abnormal_termination
_abs64
_access
_access_s
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_cprintf
_cprintf_l
_cprintf_p
_cprintf_p_l
_cprintf_s
_cprintf_s_l
_cputs
_cputws
_creat
_create_locale
_crt_debugger_hook
_cscanf
_cscanf_l
_cscanf_s
_cscanf_s_l
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_cwprintf
_cwprintf_l
_cwprintf_p
_cwprintf_p_l
_cwprintf_s
_cwprintf_s_l
_cwscanf
_cwscanf_l
_cwscanf_s
_cwscanf_s_l
_daylight
_decode_pointer
_difftime32
_difftime64
_dosmaperr
_dstbias
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_encode_pointer
_encoded_null
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_except_handler4_common
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fdopen
_fflush_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filbuf
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_locale
_freea
_freea_s
_freefls
_fscanf_l
_fscanf_s_l
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_ftol
_fullpath
_futime32
_futime64
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwrite_nolock
_fwscanf_l
_fwscanf_s_l
_gcvt
_gcvt_s
_get_amblksiz
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_invalid_parameter_handler
_get_osfhandle
_get_output_format
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_sbh_threshold
_get_terminate
_get_timezone
_get_tzname
_get_unexpected
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdcwd_nolock
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getptd
_getsystime
_getw
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_global_unwind2
_gmtime32

Sections

.text
Size: 598KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
NPSWF32.dll
.dll regsvr32 windows:5 windows x86 arch:x86

487a7da859ea36f81e666d2e27cf55f7

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:ce:b3:25:07:6b:6e:7e:d3:70:7c:9c:9a:a7:63:6d:b0:bb:0b:d7
Signer

Actual PE Digest

69:ce:b3:25:07:6b:6e:7e:d3:70:7c:9c:9a:a7:63:6d:b0:bb:0b:d7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

NPSWF32.pdb

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winmm

timeGetTime
waveInStop
waveInAddBuffer
waveInStart
waveOutReset
waveOutOpen
mixerGetID
waveInGetDevCapsA
waveOutGetDevCapsA
waveOutMessage
waveInMessage
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerGetControlDetailsA
waveOutRestart
waveOutPause
waveInGetPosition
mixerSetControlDetails
waveInGetNumDevs
waveOutGetNumDevs
waveInGetDevCapsW
waveOutGetDevCapsW
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeKillEvent
waveOutGetPosition
timeSetEvent
waveInOpen
waveInPrepareHeader
waveInReset
waveInUnprepareHeader
waveInClose
waveOutClose

wininet

InternetSetOptionW
InternetCloseHandle
InternetReadFile
HttpSendRequestW
HttpOpenRequestA
InternetConnectA
InternetOpenA

crypt32

CertFreeCertificateContext
CertVerifySubjectCertificateContext
CryptVerifyMessageSignature
CryptGetMessageCertificates
CertCreateCertificateContext
CertFindCertificateInStore
CertCloseStore

rpcrt4

RpcStringFreeA
UuidToStringA

oleaut32

LoadRegTypeLi
UnRegisterTypeLi
SysFreeString
SysAllocString
SysStringLen
LoadTypeLi
RegisterTypeLi

urlmon

CopyStgMedium

dsound

ord8

kernel32

SystemTimeToFileTime
GetSystemTime
GetFileSizeEx
CreateFileW
GetFileAttributesW
CreateDirectoryW
WideCharToMultiByte
DeleteFileA
WriteFile
CreateFileA
GetTempFileNameA
GetCurrentDirectoryA
CreateDirectoryA
GetEnvironmentVariableA
GlobalFree
FreeLibrary
GetProcessTimes
GetCurrentProcess
GlobalUnlock
GlobalLock
GetCurrentProcessId
GlobalSize
GlobalAlloc
GetSystemInfo
GetModuleHandleW
GetUserDefaultUILanguage
MoveFileExW
VirtualQuery
GetUserDefaultLangID
GetVersionExA
SetFilePointer
VerifyVersionInfoW
VerSetConditionMask
CreateProcessA
CreateThread
ReadFile
GetFileSize
FindResourceExA
FindResourceExW
SetUnhandledExceptionFilter
GetTempPathW
InterlockedIncrement
FindFirstFileW
GetTimeZoneInformation
ReleaseSemaphore
WaitForMultipleObjects
SetEvent
CreateSemaphoreW
GetTempFileNameW
GetSystemDirectoryW
ExpandEnvironmentStringsA
GetTempPathA
GetFileAttributesA
CreateMutexA
SetFilePointerEx
GetFileAttributesExW
GetFileInformationByHandle
GetVolumeInformationW
GetCurrentDirectoryW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
OutputDebugStringA
RaiseException
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
CreateFileMappingA
SetLastError
SetThreadPriority
GetSystemDirectoryA
TerminateThread
lstrcpyA
lstrlenA
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
OpenThread
SleepEx
EnumSystemLocalesW
HeapAlloc
GetProcessHeap
HeapFree
HeapSize
VirtualProtect
RtlUnwind
ExitProcess
GetCommandLineA
UnhandledExceptionFilter
GetStdHandle
TerminateProcess
IsDebuggerPresent
SetHandleCount
GetFileType
RemoveDirectoryW
DeleteFileW
FindNextFileW
FindClose
GetModuleFileNameA
FindResourceA
SizeofResource
LoadResource
LockResource
OpenFile
_lwrite
_lclose
FreeResource
LoadLibraryA
GetModuleFileNameW
lstrlenW
LCMapStringW
GetTickCount
GetModuleHandleA
GetCurrentThreadId
GetLocaleInfoW
GetEnvironmentVariableW
GetLastError
ResetEvent
WaitForSingleObject
CloseHandle
CreateEventW
GetVersionExW
LoadLibraryW
GetProcAddress
GetCurrentThread
SetThreadAffinityMask
IsDBCSLeadByte
GetACP
GetCPInfo
MultiByteToWideChar
ExitThread
InterlockedExchange
InterlockedCompareExchange
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetStartupInfoA
GetUserDefaultLCID
GetTimeFormatW
GetDateFormatW
CompareStringW
GetCurrencyFormatW
GetNumberFormatW
VirtualFree
VirtualAlloc
TlsGetValue
TlsSetValue
TlsFree
GetConsoleCP
GetConsoleMode
HeapCreate
HeapDestroy
HeapReAlloc
GetOEMCP
IsValidCodePage
LCMapStringA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
FlushFileBuffers
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateSemaphoreA
WriteConsoleW
GetStringTypeA
GetStringTypeW
CompareStringA
SetEnvironmentVariableA
SetEndOfFile
TlsAlloc
SwitchToThread
DeviceIoControl
GetVersion
InterlockedExchangeAdd
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerA
InterlockedDecrement
CreateEventA

user32

CreateCaret
ShowCaret
DestroyCaret
EmptyClipboard
SetClipboardData
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
RegisterClipboardFormatW
IsWindow
GetMenuItemInfoW
RemoveMenu
SetMenuItemInfoW
InsertMenuItemW
DrawMenuBar
CreatePopupMenu
TrackPopupMenu
DestroyMenu
CreateMenu
SetMenuInfo
MapVirtualKeyW
WaitForInputIdle
GetForegroundWindow
MessageBoxA
DialogBoxParamW
SetWindowTextA
RedrawWindow
DialogBoxIndirectParamW
EndDialog
GetDesktopWindow
GetDlgItem
SetWindowTextW
SendMessageTimeoutW
CreateIconIndirect
SetRectEmpty
GetCursor
DestroyIcon
LoadImageW
GetPropW
SetPropW
SetCaretPos
GetClipboardFormatNameA
RegisterClipboardFormatA
CreateWindowExW
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExA
SetCapture
ReleaseCapture
GetSubMenu
SystemParametersInfoW
ScreenToClient
GetCapture
GetCursorPos
WindowFromPoint
GetParent
PeekMessageW
GetQueueStatus
KillTimer
SetTimer
IsWindowVisible
PostMessageW
SendMessageW
LoadIconW
RegisterClassW
GetFocus
GetTopWindow
GetKeyState
InvalidateRect
LoadCursorW
SetCursor
LoadStringW
MessageBoxW
SetWindowLongW
EnableMenuItem
CheckMenuItem
BeginPaint
GetClientRect
EndPaint
UnregisterClassA
SetFocus
MoveWindow
EnumDisplaySettingsW
GetSystemMetrics
GetWindowInfo
CopyRect
DefWindowProcW
SendInput
GetKeyboardLayout
FillRect
GetWindowLongW
GetWindowRect
UpdateLayeredWindow
GetDC
ReleaseDC
ClientToScreen
GetMonitorInfoW
SetRect
OffsetRect
MonitorFromWindow
GetDoubleClickTime
MapWindowPoints
RegisterClassA
PostMessageA
RegisterWindowMessageA
SendNotifyMessageW
GetWindowThreadProcessId

gdi32

StretchBlt
SetStretchBltMode
GetStretchBltMode
EnumFontFamiliesW
GetClipBox
GetSystemPaletteEntries
Rectangle
GetStockObject
StretchDIBits
LPtoDP
RectVisible
CreateSolidBrush
SetBkColor
ExtTextOutW
SelectPalette
RealizePalette
SelectObject
BitBlt
CreateDIBSection
GetICMProfileA
CreateDCA
SetPixel
DeleteDC
CreateCompatibleBitmap
GetTextMetricsW
EnumFontFamiliesA
SetBkMode
SetTextAlign
IntersectClipRect
SelectClipRgn
ExtTextOutA
SetTextColor
GetObjectW
GetDeviceCaps
CreateFontIndirectA
GetClipRgn
CreateRectRgn
GetTextAlign
GetBkMode
GetTextColor
SetTextCharacterExtra
GetTextExtentPoint32W
GetCurrentObject
GetBkColor
CreatePen
DPtoLP
GetTextExtentPoint32A
GetTextCharacterExtra
SetWorldTransform
SetGraphicsMode
GetWorldTransform
CreatePalette
StartDocW
EndDoc
StrokePath
ExtCreatePen
FillPath
GetDIBits
DeleteObject
CreateFontIndirectW
GdiFlush
CreateCompatibleDC
RestoreDC
SelectClipPath
PolyBezierTo
GetFontData
EnumFontFamiliesExW
LineTo
MoveToEx
EndPath
BeginPath
SaveDC
SetPolyFillMode
CreateBitmap
StartPage
EndPage

comdlg32

GetOpenFileNameW
CommDlgExtendedError
PrintDlgW
GetSaveFileNameW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegOpenKeyA
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

shell32

SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathA
SHGetFolderPathW
SHFileOperationW
SHGetDiskFreeSpaceExW

ole32

OleFlushClipboard
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CreateBindCtx
ReleaseStgMedium
OleUninitialize
PropVariantClear
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
OleInitialize
CoInitialize
CoUninitialize

mscms

CloseColorProfile
CreateColorTransformW
OpenColorProfileW
TranslateBitmapBits
DeleteColorTransform

ws2_32

inet_addr
WSACleanup
closesocket
WSAAsyncSelect
WSAGetLastError
WSAIoctl
socket
WSAStartup
setsockopt
recv
send
ntohs
getsockname
htons
WSACloseEvent
gethostbyname
inet_ntoa
htonl
ntohl
select
gethostname
connect
ioctlsocket
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
WSAAddressToStringA
bind
sendto
recvfrom
WSASetLastError
getservbyport
gethostbyaddr
WSASocketW
getservbyname

Exports

Exports

BrokerMainW
DllRegisterServer
DllUnregisterServer
FlashPlayer_10_3_181_22_FlashPlayer
Flash_DisableLocalSecurity
Flash_EnforceLocalSecurity
Java_ShockwaveFlash_CurrentFrame_stub
Java_ShockwaveFlash_FlashVersion_stub
Java_ShockwaveFlash_FrameLoaded_stub
Java_ShockwaveFlash_GetVariable_stub
Java_ShockwaveFlash_GotoFrame_stub
Java_ShockwaveFlash_IsPlaying_stub
Java_ShockwaveFlash_LoadMovie_stub
Java_ShockwaveFlash_Pan_stub
Java_ShockwaveFlash_PercentLoaded_stub
Java_ShockwaveFlash_Play_stub
Java_ShockwaveFlash_SetVariable_stub
Java_ShockwaveFlash_SetZoomRect_stub
Java_ShockwaveFlash_StopPlay_stub
Java_ShockwaveFlash_TCallFrame_stub
Java_ShockwaveFlash_TCallLabel_stub
Java_ShockwaveFlash_TCurrentFrame_stub
Java_ShockwaveFlash_TCurrentLabel_stub
Java_ShockwaveFlash_TGetProperty_stub
Java_ShockwaveFlash_TGotoFrame_stub
Java_ShockwaveFlash_TGotoLabel_stub
Java_ShockwaveFlash_TPlay_stub
Java_ShockwaveFlash_TSetProperty_stub
Java_ShockwaveFlash_TStopPlay_stub
Java_ShockwaveFlash_TotalFrames_stub
Java_ShockwaveFlash_Zoom_stub
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
native_ShockwaveFlash_CurrentFrame
native_ShockwaveFlash_FlashVersion
native_ShockwaveFlash_FrameLoaded
native_ShockwaveFlash_GetVariable
native_ShockwaveFlash_GotoFrame
native_ShockwaveFlash_IsPlaying
native_ShockwaveFlash_LoadMovie
native_ShockwaveFlash_Pan
native_ShockwaveFlash_PercentLoaded
native_ShockwaveFlash_Play
native_ShockwaveFlash_SetVariable
native_ShockwaveFlash_SetZoomRect
native_ShockwaveFlash_StopPlay
native_ShockwaveFlash_TCallFrame
native_ShockwaveFlash_TCallLabel
native_ShockwaveFlash_TCurrentFrame
native_ShockwaveFlash_TCurrentLabel
native_ShockwaveFlash_TGetProperty
native_ShockwaveFlash_TGotoFrame
native_ShockwaveFlash_TGotoLabel
native_ShockwaveFlash_TPlay
native_ShockwaveFlash_TSetProperty
native_ShockwaveFlash_TStopPlay
native_ShockwaveFlash_TotalFrames
native_ShockwaveFlash_Zoom
register_ShockwaveFlash
unregister_ShockwaveFlash
unuse_ShockwaveFlash
unuse_netscape_plugin_Plugin
use_ShockwaveFlash
use_netscape_plugin_Plugin

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PDAppFlex-app.xml
.xml
PDAppFlex.swf
PDapp.exe
.exe windows:5 windows x86 arch:x86

61e1a88482ce1e99a84fd3da36f568bc

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

85:1f:93:67:39:70:a0:25:9b:1c:2d:5e:9c:90:76:dd:33:d7:0e:4e
Signer

Actual PE Digest

85:1f:93:67:39:70:a0:25:9b:1c:2d:5e:9c:90:76:dd:33:d7:0e:4e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

none

Imports

adbeape

APEPlayerChangeAttributes
APEInitialize
APETerminate
APEPlayerFromStageHWND
APEPlayerLoadComponent
APEPlayerCallExternalInterface

user32

GetDesktopWindow
ReleaseDC
wsprintfW
DefWindowProcW
CallWindowProcW
IsWindowVisible
GetDC
CreateWindowExW
GetActiveWindow
ShowWindow
SetWindowPos
SetWindowLongW
SetClassLongW
SystemParametersInfoW
GetWindowTextW
GetAncestor
GetWindowLongW
SetPropA
SetFocus
LoadCursorW
GetParent
SetForegroundWindow
GetPropA
IsZoomed
PostMessageW
IsIconic
RegisterWindowMessageW
GetWindowRect
GetSystemMetrics
MapVirtualKeyExW
SetCursor
DestroyWindow
PostQuitMessage
ClientToScreen
DispatchMessageW
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
AppendMenuW
GetMenuStringW
GetMenuState
GetWindowTextLengthW
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowThreadProcessId
UnhookWindowsHookEx
GetSysColorBrush
GetSysColor
PtInRect
GetClassNameW
GetDlgCtrlID
GetWindow
RealChildWindowFromPoint
GetFocus
SetScrollPos
GetScrollPos
CheckDlgButton
SendDlgItemMessageW
IsDialogMessageW
IsWindow
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
CallNextHookEx
SetWindowsHookExW
DestroyIcon
CharUpperW
FillRect
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
ScreenToClient
GetWindowDC
BeginPaint
EndPaint
GetMenu
GetWindowPlacement
SetWindowPlacement
CopyRect
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
AdjustWindowRectEx
RegisterClassW
GetClassInfoW
GetClassInfoExW
UpdateWindow
ShowScrollBar
GetScrollRange
SetScrollRange
SetMenu
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMonitorInfoW
MonitorFromWindow
GetMessagePos
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
SetActiveWindow
GetForegroundWindow
RemovePropW
GetPropW
SetPropW
GetClassLongW
GetCapture
IsChild
WinHelpW
SendDlgItemMessageA
CheckMenuItem
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
InflateRect
IntersectRect
GetMenuItemInfoW
DestroyMenu
RedrawWindow
GetMenuDefaultItem
CreatePopupMenu
IsRectEmpty
SetRectEmpty
MapVirtualKeyW
InvalidateRect
SetCapture
GetAsyncKeyState
ReleaseCapture
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
GetNextDlgTabItem
OffsetRect
GetIconInfo
CopyImage
LoadImageW
SetTimer
KillTimer
GetNextDlgGroupItem
DrawIconEx
CreateDialogIndirectParamW
EnumDisplayMonitors
SetLayeredWindowAttributes
ShowOwnedPopups
DeleteMenu
GetKeyNameTextW
DrawStateW
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadMenuW
IsCharLowerW
DialogBoxParamW
GetKeyboardLayout
DrawEdge
DrawFrameControl
SetWindowRgn
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
TranslateAcceleratorW
BringWindowToTop
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
WindowFromPoint
WaitMessage
SetParent
DestroyAcceleratorTable
CopyAcceleratorTableW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
SetRect
SetCursorPos
LockWindowUpdate
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
RegisterClipboardFormatW
FrameRect
CharUpperBuffW
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CreateMenu
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
MapDialogRect
DestroyCursor
DrawIcon
GetWindowRgn
PostThreadMessageW
TranslateMessage
GetMessageW
MoveWindow
SetWindowTextW
EnableMenuItem
GetClientRect
GetSystemMenu
SendMessageW
MessageBoxW
EnumChildWindows
EndDialog
GetDlgItem
LoadIconW
RegisterClassExW
MessageBeep

gdi32

GetTextColor
CreatePolygonRgn
CreateEllipticRgn
CreateDIBSection
SetPixel
StretchBlt
SetDIBColorTable
GetTextCharsetInfo
EnumFontFamiliesW
CreateCompatibleBitmap
CreateDIBitmap
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetBkColor
GetTextMetricsW
GetTextExtentPoint32W
GetStockObject
GetDeviceCaps
DPtoLP
PatBlt
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateFontIndirectW
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
SelectPalette
CreateCompatibleDC
CreateBitmap
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
Polyline
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetObjectW
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
DeleteObject
CreateDCW
CopyMetaFileW
Ellipse
Polygon
Rectangle
OffsetRgn
GetRgnBox
EnumFontFamiliesExW
CreateRoundRectRgn
PtInRegion
FrameRgn
GetTextFaceW
SetPixelV
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
FillRgn
GetBoundsRect
SetWindowExtEx

wininet

InternetCheckConnectionW
InternetGetConnectedState

ole32

ReleaseStgMedium
OleRun
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleInitialize
CoInitialize
CoUninitialize
CoTaskMemFree
OleGetClipboard
CoTaskMemAlloc
OleDuplicateData
CoInitializeEx
CreateStreamOnHGlobal
DoDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop

oleaut32

SysAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromDate
VariantChangeType
SysAllocString
SysStringLen
VariantClear
VariantCopy
VariantInit
SysFreeString
GetErrorInfo

kernel32

SetEnvironmentVariableA
GetProcessHeap
CreateFileA
GetDriveTypeW
WriteConsoleW
GetTempPathW
GetFileSize
CreateMutexW
FindFirstFileW
CreateProcessW
GetCurrentProcess
WaitForSingleObject
SetEvent
GetModuleHandleW
WriteFile
WideCharToMultiByte
Sleep
GetVersionExW
ReadFile
GetModuleFileNameW
CreateFileW
MultiByteToWideChar
FlushFileBuffers
GetLastError
SetLastError
GetProcAddress
FindClose
LocalAlloc
CreateEventW
RemoveDirectoryW
FindNextFileW
GetUserDefaultUILanguage
ReleaseMutex
CloseHandle
DeleteFileW
LocalFree
SetFileAttributesW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateThread
GetCurrentThreadId
GetCommandLineW
ConnectNamedPipe
CreateNamedPipeW
WaitNamedPipeW
DisconnectNamedPipe
ExitProcess
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualProtectEx
SetCurrentDirectoryW
DuplicateHandle
WriteProcessMemory
ResumeThread
FreeLibrary
GetUserDefaultLangID
LoadLibraryW
lstrlenA
InterlockedIncrement
InterlockedDecrement
ReleaseSemaphore
CreateSemaphoreW
OpenSemaphoreW
GetCurrentProcessId
GetDateFormatW
CreateDirectoryW
GetTimeFormatW
GetLocalTime
SetFilePointer
GetFileSizeEx
OpenMutexW
MulDiv
lstrlenW
SizeofResource
LockResource
LoadResource
FindResourceW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
CopyFileW
GlobalFree
FileTimeToSystemTime
FileTimeToLocalFileTime
GlobalGetAtomNameW
lstrcmpA
DeactivateActCtx
ActivateActCtx
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
ReleaseActCtx
CompareStringW
lstrcmpW
GlobalFlags
SetThreadPriority
GlobalAddAtomW
lstrcmpiW
MoveFileW
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationW
GetFullPathNameW
GlobalDeleteAtom
GlobalFindAtomW
FreeResource
InterlockedExchange
GetLocaleInfoW
GetFileAttributesExW
GetFileAttributesW
GetFileTime
GetWindowsDirectoryW
GetNumberFormatW
lstrcpyW
GetCurrentDirectoryW
InitializeCriticalSectionAndSpinCount
GetTempFileNameW
GetTickCount
GetProfileIntW
SearchPathW
VirtualProtect
GetUserDefaultLCID
FindResourceExW
InterlockedCompareExchange
GetStringTypeW
EncodePointer
DecodePointer
HeapSetInformation
GetStartupInfoW
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
HeapReAlloc
RtlUnwind
RaiseException
HeapQueryInformation
HeapSize
ExitThread
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
LCMapStringW
GetCPInfo
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsDBCSLeadByteEx

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
GetUserNameW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW

shell32

SHAppBarMessage
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoW
CommandLineToArgvW
SHGetSpecialFolderPathW
ShellExecuteW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW

shlwapi

PathFileExistsW
PathRemoveFileSpecW
PathIsDirectoryW
PathSearchAndQualifyW
PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathRenameExtensionW
PathAppendW
PathAddExtensionW
PathIsFileSpecW
PathRemoveExtensionW
StrRChrW
PathRemoveBackslashW

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

comctl32

ImageList_GetIconSize

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipFree
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipAlloc

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 319KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RemoveAAM.bin
.exe windows:5 windows x86 arch:x86

b288e4070ba48f3cc0004ecdd817b536

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

96:90:6a:76:5c:15:6f:32:78:6c:e8:ce:94:38:82:d0:de:a1:a8:0c
Signer

Actual PE Digest

96:90:6a:76:5c:15:6f:32:78:6c:e8:ce:94:38:82:d0:de:a1:a8:0c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

none

Imports

kernel32

ReleaseMutex
CloseHandle
GetCurrentProcessId
GetDateFormatW
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLocalTime
FreeLibrary
LoadLibraryW
GetModuleFileNameW
GetProcAddress
ExitProcess
GetThreadContext
CreateSemaphoreW
CreateProcessW
GetCurrentProcess
FlushInstructionCache
GetCurrentDirectoryW
VirtualProtectEx
DuplicateHandle
DeleteFileW
WriteProcessMemory
ResumeThread
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetFilePointer
GetFileSizeEx
GetCurrentThreadId
WideCharToMultiByte
OpenMutexW
CompareStringW
GetProcessHeap
GetLastError
ReleaseSemaphore
Sleep
WaitForSingleObject
SetThreadContext
CreateMutexW
SetEndOfFile
CreateFileA
WriteConsoleW
SetStdHandle
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
SetEnvironmentVariableA
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineW
HeapSetInformation
MoveFileW
GetTimeZoneInformation
RaiseException
GetCPInfo
RtlUnwind
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
GetLocaleInfoW
HeapCreate
GetModuleHandleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
QueryPerformanceCounter
GetTickCount
HeapSize
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetACP
GetOEMCP
IsValidCodePage

shell32

SHCreateDirectoryExW

shlwapi

PathIsDirectoryW
PathAddExtensionW
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
PathRemoveExtensionW
PathIsFileSpecW
PathRenameExtensionW

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WebKit.dll
.dll windows:5 windows x86 arch:x86

206c25a211dd5cd38cac65bb90bae21c

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e3:67:0e:19:75:f3:0f:aa:a1:ab:10:d9:6c:8e:18:9f:f1:59:f0:0a
Signer

Actual PE Digest

e3:67:0e:19:75:f3:0f:aa:a1:ab:10:d9:6c:8e:18:9f:f1:59:f0:0a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

WebKit.pdb

Imports

kernel32

TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
HeapSize
ExitProcess
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
GetModuleHandleW
GetConsoleCP
GetConsoleMode
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryA
GetFullPathNameW
FlushFileBuffers
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
CompareStringA
SetEnvironmentVariableA
GetModuleFileNameA
GetStdHandle
GetFileType
SetStdHandle
CreateDirectoryA
FindFirstFileW
GetDriveTypeW
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
GetDateFormatA
GetTimeFormatA
LoadLibraryA
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
GetTimeZoneInformation
HeapReAlloc
HeapFree
HeapAlloc
GetCommandLineA
GetCurrentThreadId
GetSystemTimeAsFileTime
LoadLibraryW
FormatMessageW
LocalFree
GetFileAttributesA
GetVersionExW
GetLocaleInfoW
MultiByteToWideChar
GetLastError
GetCurrentDirectoryW
SetCurrentDirectoryW
LoadLibraryExW
FreeLibrary
LCMapStringW
GetFileAttributesExW
GetModuleHandleA
GetProcAddress
VirtualProtect
CreateFileW
GetFileSize
ReadFile
FoldStringW
InterlockedIncrement
GetCurrentThread
GetThreadTimes
GetSystemInfo
QueryPerformanceFrequency
QueryPerformanceCounter
DeleteFileA
CreateFileA
SetFilePointer
WriteFile
CloseHandle
VirtualAlloc
VirtualFree
InterlockedDecrement
GetTickCount
IsValidCodePage
CompareStringW

user32

GetFocus
IsChild
GetWindowLongW
SetWindowLongW
GetKeyboardState
SetKeyboardState
ReleaseCapture
SetCapture
CallWindowProcW
SetParent
CreateWindowExW
DefWindowProcA
SetWindowLongA
SetPropW
DestroyWindow
GetWindowRect
SystemParametersInfoW
SetWindowRgn
MoveWindow
UpdateWindow
ShowWindow
SetFocus
GetUpdateRect
IntersectRect
EqualRect
GetWindowRgn
DefWindowProcW
LoadCursorW
RegisterClassExW
GetLastInputInfo
ReleaseDC
GetDC
InvalidateRect
GetPropW
GetClientRect
FillRect
ClientToScreen
PostMessageW

gdi32

DeleteDC
GetDeviceCaps
GetFontData
GetGlyphIndicesW
AddFontMemResourceEx
GetCharWidthI
GetTextMetricsW
GetOutlineTextMetricsW
GetGlyphOutlineW
CreateEnhMetaFileW
CloseEnhMetaFile
EnumEnhMetaFile
DeleteEnhMetaFile
GetFontUnicodeRanges
EnumFontFamiliesExW
SelectObject
GetTextFaceW
CreateFontIndirectW
RemoveFontMemResourceEx
IntersectClipRect
ModifyWorldTransform
RestoreDC
SaveDC
GetObjectW
SetGraphicsMode
GetWorldTransform
SetWorldTransform
GetClipBox
CreateRectRgn
GetRgnBox
DeleteObject
BitBlt
GdiFlush
SetStretchBltMode
StretchDIBits
PatBlt
SetBrushOrgEx
CreatePatternBrush
CreateSolidBrush
ExtTextOutW
SetBkMode
SetTextAlign
SetTextColor
GetClipRgn
GetGraphicsMode
SelectClipRgn
ExtSelectClipRgn
ExtCreateRegion
CreateCompatibleBitmap
GetStockObject
SetMapMode
GetCharWidth32W
ExtEscape
SelectClipPath
EndPath
CloseFigure
MoveToEx
BeginPath
LineTo
PolyBezierTo
SetPolyFillMode
WidenPath
StrokePath
ExtCreatePen
SetMiterLimit
FillPath
StretchBlt
CreateCompatibleDC
CreateDIBSection

usp10

ScriptStringFree
ScriptStringOut
ScriptStringAnalyse
ScriptShape
ScriptXtoCP
ScriptPlace
ScriptItemize
ScriptFreeCache

urlmon

FindMimeFromData

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

msimg32

GradientFill

winmm

timeEndPeriod
timeBeginPeriod

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

ole32

CoCreateInstance
CoTaskMemFree
CoCreateGuid

oleaut32

SysAllocStringLen
SysFreeString

Exports

Exports

WebKitGetAPI
cairo_append_path
cairo_arc
cairo_arc_negative
cairo_clip
cairo_clip_extents
cairo_clip_preserve
cairo_close_path
cairo_copy_clip_rectangle_list
cairo_copy_page
cairo_copy_path
cairo_copy_path_flat
cairo_create
cairo_curve_to
cairo_destroy
cairo_device_to_user
cairo_device_to_user_distance
cairo_fill
cairo_fill_extents
cairo_fill_preserve
cairo_font_extents
cairo_font_face_destroy
cairo_font_face_get_reference_count
cairo_font_face_get_type
cairo_font_face_get_user_data
cairo_font_face_reference
cairo_font_face_set_user_data
cairo_font_face_status
cairo_font_options_copy
cairo_font_options_create
cairo_font_options_destroy
cairo_font_options_equal
cairo_font_options_get_antialias
cairo_font_options_get_hint_metrics
cairo_font_options_get_hint_style
cairo_font_options_get_subpixel_order
cairo_font_options_hash
cairo_font_options_merge
cairo_font_options_set_antialias
cairo_font_options_set_hint_metrics
cairo_font_options_set_hint_style
cairo_font_options_set_subpixel_order
cairo_font_options_status
cairo_format_stride_for_width
cairo_get_antialias
cairo_get_current_point
cairo_get_dash
cairo_get_dash_count
cairo_get_fill_rule
cairo_get_font_face
cairo_get_font_matrix
cairo_get_font_options
cairo_get_group_target
cairo_get_line_cap
cairo_get_line_join
cairo_get_line_width
cairo_get_matrix
cairo_get_miter_limit
cairo_get_operator
cairo_get_reference_count
cairo_get_scaled_font
cairo_get_source
cairo_get_target
cairo_get_tolerance
cairo_get_user_data
cairo_glyph_allocate
cairo_glyph_extents
cairo_glyph_free
cairo_glyph_path
cairo_has_current_point
cairo_identity_matrix
cairo_image_surface_create
cairo_image_surface_create_for_data
cairo_image_surface_create_from_png
cairo_image_surface_create_from_png_stream
cairo_image_surface_get_data
cairo_image_surface_get_format
cairo_image_surface_get_height
cairo_image_surface_get_stride
cairo_image_surface_get_width
cairo_in_fill
cairo_in_stroke
cairo_line_to
cairo_mask
cairo_mask_surface
cairo_matrix_init
cairo_matrix_init_identity
cairo_matrix_init_rotate
cairo_matrix_init_scale
cairo_matrix_init_translate
cairo_matrix_invert
cairo_matrix_multiply
cairo_matrix_rotate
cairo_matrix_scale
cairo_matrix_transform_distance
cairo_matrix_transform_point
cairo_matrix_translate
cairo_move_to
cairo_new_path
cairo_new_sub_path
cairo_paint
cairo_paint_with_alpha
cairo_path_destroy
cairo_path_extents
cairo_pattern_add_color_stop_rgb
cairo_pattern_add_color_stop_rgba
cairo_pattern_create_for_surface
cairo_pattern_create_linear
cairo_pattern_create_radial
cairo_pattern_create_rgb
cairo_pattern_create_rgba
cairo_pattern_destroy
cairo_pattern_get_color_stop_count
cairo_pattern_get_color_stop_rgba
cairo_pattern_get_extend
cairo_pattern_get_filter
cairo_pattern_get_linear_points
cairo_pattern_get_matrix
cairo_pattern_get_radial_circles
cairo_pattern_get_reference_count
cairo_pattern_get_rgba
cairo_pattern_get_surface
cairo_pattern_get_type
cairo_pattern_get_user_data
cairo_pattern_reference
cairo_pattern_set_extend
cairo_pattern_set_filter
cairo_pattern_set_matrix
cairo_pattern_set_user_data
cairo_pattern_status
cairo_pop_group
cairo_pop_group_to_source
cairo_push_group
cairo_push_group_with_content
cairo_rectangle
cairo_rectangle_list_destroy
cairo_reference
cairo_rel_curve_to
cairo_rel_line_to
cairo_rel_move_to
cairo_reset_clip
cairo_restore
cairo_rotate
cairo_save
cairo_scale
cairo_scaled_font_create
cairo_scaled_font_destroy
cairo_scaled_font_extents
cairo_scaled_font_get_ctm
cairo_scaled_font_get_font_face
cairo_scaled_font_get_font_matrix
cairo_scaled_font_get_font_options
cairo_scaled_font_get_reference_count
cairo_scaled_font_get_scale_matrix
cairo_scaled_font_get_type
cairo_scaled_font_get_user_data
cairo_scaled_font_glyph_extents
cairo_scaled_font_reference
cairo_scaled_font_set_user_data
cairo_scaled_font_status
cairo_scaled_font_text_extents
cairo_scaled_font_text_to_glyphs
cairo_select_font_face
cairo_set_antialias
cairo_set_dash
cairo_set_fill_rule
cairo_set_font_face
cairo_set_font_matrix
cairo_set_font_options
cairo_set_font_size
cairo_set_line_cap
cairo_set_line_join
cairo_set_line_width
cairo_set_matrix
cairo_set_miter_limit
cairo_set_operator
cairo_set_scaled_font
cairo_set_source
cairo_set_source_rgb
cairo_set_source_rgba
cairo_set_source_surface
cairo_set_tolerance
cairo_set_user_data
cairo_show_glyphs
cairo_show_page
cairo_show_text
cairo_show_text_glyphs
cairo_status
cairo_status_to_string
cairo_stroke
cairo_stroke_extents
cairo_stroke_preserve
cairo_surface_copy_page
cairo_surface_create_similar
cairo_surface_destroy
cairo_surface_finish
cairo_surface_flush
cairo_surface_get_content
cairo_surface_get_device_offset
cairo_surface_get_fallback_resolution
cairo_surface_get_font_options
cairo_surface_get_reference_count
cairo_surface_get_type
cairo_surface_get_user_data
cairo_surface_has_show_text_glyphs
cairo_surface_mark_dirty
cairo_surface_mark_dirty_rectangle
cairo_surface_reference
cairo_surface_set_device_offset
cairo_surface_set_fallback_resolution
cairo_surface_set_user_data
cairo_surface_show_page
cairo_surface_status
cairo_surface_write_to_png
cairo_surface_write_to_png_stream
cairo_text_cluster_allocate
cairo_text_cluster_free
cairo_text_extents
cairo_text_path
cairo_toy_font_face_create
cairo_toy_font_face_get_family
cairo_toy_font_face_get_slant
cairo_toy_font_face_get_weight
cairo_transform
cairo_translate
cairo_user_font_face_create
cairo_user_font_face_get_init_func
cairo_user_font_face_get_render_glyph_func
cairo_user_font_face_get_text_to_glyphs_func
cairo_user_font_face_get_unicode_to_glyph_func
cairo_user_font_face_set_init_func
cairo_user_font_face_set_render_glyph_func
cairo_user_font_face_set_text_to_glyphs_func
cairo_user_font_face_set_unicode_to_glyph_func
cairo_user_to_device
cairo_user_to_device_distance
cairo_version
cairo_version_string
cairo_win32_font_face_create_for_hfont
cairo_win32_font_face_create_for_logfontw
cairo_win32_font_face_create_for_logfontw_hfont
cairo_win32_printing_surface_create
cairo_win32_scaled_font_done_font
cairo_win32_scaled_font_get_device_to_logical
cairo_win32_scaled_font_get_logical_to_device
cairo_win32_scaled_font_get_metrics_factor
cairo_win32_scaled_font_select_font
cairo_win32_surface_create
cairo_win32_surface_create_with_ddb
cairo_win32_surface_create_with_dib
cairo_win32_surface_get_dc
cairo_win32_surface_get_image

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 675KB - Virtual size: 674KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unwante
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ZStringResources/cs_CZ/stringtable.xml
.vbs .xml polyglot
ZStringResources/da_DK/stringtable.xml
.vbs .xml polyglot
ZStringResources/de_DE/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_AE/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_GB/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_IL/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_US/stringtable.xml
.vbs .xml polyglot
ZStringResources/en_XM/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_ES/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_LA/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_MX/stringtable.xml
.vbs .xml polyglot
ZStringResources/es_NA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fi_FI/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_CA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_FR/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_MA/stringtable.xml
.vbs .xml polyglot
ZStringResources/fr_XM/stringtable.xml
.vbs .xml polyglot
ZStringResources/hu_HU/stringtable.xml
.vbs .xml polyglot
ZStringResources/it_IT/stringtable.xml
.vbs .xml polyglot
ZStringResources/ja_JP/stringtable.xml
.vbs .xml polyglot
ZStringResources/ko_KR/stringtable.xml
.vbs .xml polyglot
ZStringResources/nb_NO/stringtable.xml
.vbs .xml polyglot
ZStringResources/nl_NL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pl_PL/stringtable.xml
.vbs .xml polyglot
ZStringResources/pt_BR/stringtable.xml
.vbs .xml polyglot
ZStringResources/ro_RO/stringtable.xml
.vbs .xml polyglot
ZStringResources/ru_RU/stringtable.xml
.vbs .xml polyglot
ZStringResources/sv_SE/stringtable.xml
.vbs .xml polyglot
ZStringResources/tr_TR/stringtable.xml
.vbs .xml polyglot
ZStringResources/uk_UA/stringtable.xml
.vbs .xml polyglot
ZStringResources/zh_CN/stringtable.xml
.vbs .xml polyglot
ZStringResources/zh_TW/stringtable.xml
.vbs .xml polyglot
adbeape.dll
.dll windows:5 windows x86 arch:x86

ed704381e719a67092c3315a8f25cb3c

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c0:83:43:2a:8f:c6:e0:a4:2f:5f:87:b9:3f:d7:ec:70:7a:30:ef:37
Signer

Actual PE Digest

c0:83:43:2a:8f:c6:e0:a4:2f:5f:87:b9:3f:d7:ec:70:7a:30:ef:37

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

adbeape.pdb

Imports

kernel32

GetProcAddress
LoadLibraryW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

shell32

SHGetFolderPathW

msvcr90

__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
??2@YAPAXI@Z
memset
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
memmove_s
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBDH@Z
strlen

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

Exports

Exports

APEAtomCoerce
APEAtomFromBool
APEAtomFromDouble
APEAtomFromHostObject
APEAtomFromInt32
APEAtomFromUTF16
APEAtomFromUTF8
APEAtomGetCanonical
APEAtomGetKind
APEAtomIsNull
APEAtomToBool
APEAtomToDouble
APEAtomToHostObject
APEAtomToInt32
APEAtomToUTF16
APEAtomToUTF8
APEAtomWatch
APEByteArrayCreate
APEByteArrayGetBuffer
APEChangeLogLevel
APEGetBuildBranch
APEGetBuildDate
APEGetBuildVersion
APEGetLogLevel
APEGetVersion
APEInitialize
APEObjectAddEventListener
APEObjectCreate
APEObjectDeleteProperty
APEObjectDisconnect
APEObjectEnumerate
APEObjectGetClassName
APEObjectGetClassObject
APEObjectGetProperty
APEObjectGetPropertyFlags
APEObjectGetRoot
APEObjectInvokeMethod
APEObjectLock
APEObjectPutProperty
APEObjectRemoveEventListener
APEPlayerAddPluginObjectModel
APEPlayerCallExternalInterface
APEPlayerChangeAttributes
APEPlayerDisconnectObjectModelExtension
APEPlayerExtendObjectModel
APEPlayerFromStageHWND
APEPlayerGetAttributes
APEPlayerInstallComponent
APEPlayerLoadComponent
APEPlayerLoadContent
APEPlayerLoadSWF
APEPlayerRetrieveException
APEPlayerSetException
APEPlayerSetStandardException
APEPlayerSuspendResumeAtomCacheFlushing
APERegisterMemoryStatusCallback
APEStreamClose
APEStreamWrite
APETerminate
APEUnregisterMemoryStatusCallback
APEYieldToRuntime

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
adbeapecore.dll
.dll windows:5 windows x86 arch:x86

bf5478708c7bfbe7f773b159b1fee879

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

76:b9:2c:20:1a:f8:0e:f4:ae:af:ae:bb:3b:cc:90:85:9a:82:32:8b
Signer

Actual PE Digest

76:b9:2c:20:1a:f8:0e:f4:ae:af:ae:bb:3b:cc:90:85:9a:82:32:8b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

adbeapecore.pdb

Imports

gdiplus

GdipGraphicsClear
GdipDeleteGraphics
GdipCreateFromHDC

kernel32

GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
VerSetConditionMask
VerifyVersionInfoW
GetLastError
GetModuleHandleW
LoadLibraryW
GetSystemDirectoryW
GetProcAddress
GetCurrentThreadId
GetCurrentProcessId
SetLastError
GlobalLock
GlobalUnlock
GetModuleFileNameW
lstrlenW
FreeLibrary
TerminateProcess
InterlockedCompareExchange
Sleep
RaiseException
LoadLibraryA
InterlockedExchange
LocalAlloc
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
UnhandledExceptionFilter

user32

TranslateMessage
DispatchMessageW
GetKeyState
DestroyWindow
RegisterWindowMessageW
DeleteMenu
GetSystemMenu
LoadCursorW
FlashWindowEx
IsIconic
IsZoomed
IsWindowVisible
GetActiveWindow
SetWindowTextW
GetWindowTextW
MoveWindow
WindowFromPoint
TrackMouseEvent
SetRectEmpty
InvalidateRect
SetCapture
GetMessageTime
ReleaseDC
GetDC
ReleaseCapture
UnregisterClassW
RegisterClassExW
GetClassInfoExW
IsRectEmpty
EndPaint
BeginPaint
RegisterClipboardFormatW
RemovePropA
SetPropA
SetWindowPos
GetAncestor
GetCapture
ShowWindow
GetCursorPos
GetWindowThreadProcessId
CallWindowProcW
GetClientRect
ScreenToClient
ClientToScreen
PostMessageW
GetParent
SetFocus
GetFocus
SetWindowLongW
GetWindowRect
SendMessageW
GetWindowLongW
GetPropA
SetTimer
KillTimer
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW

gdi32

DeleteObject
GetStockObject
SetICMMode
CreateDIBSection

ole32

ReleaseStgMedium
OleInitialize
OleUninitialize
CoCreateInstance
RevokeDragDrop
RegisterDragDrop
DoDragDrop

msvcp90

?allocate@?$allocator@G@std@@QAEPAGI@Z
?deallocate@?$allocator@G@std@@QAEXPAGI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z

msvcr90

??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBDH@Z
wcslen
??0exception@std@@QAE@XZ
_purecall
memset
memcmp
??2@YAPAXI@Z
??0exception@std@@QAE@ABQBD@Z
wcscmp
floor
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
ceil
wcscpy_s
??_V@YAXPAX@Z
__RTDynamicCast
??8type_info@@QBE_NABV0@@Z
malloc
free
strcpy_s
strlen
memcpy
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
__CxxFrameHandler3
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_CxxThrowException
memmove_s

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z
APEAtomCoerce
APEAtomFromBool
APEAtomFromDouble
APEAtomFromHostObject
APEAtomFromInt32
APEAtomFromUTF16
APEAtomFromUTF8
APEAtomGetCanonical
APEAtomGetKind
APEAtomIsNull
APEAtomToBool
APEAtomToDouble
APEAtomToHostObject
APEAtomToInt32
APEAtomToUTF16
APEAtomToUTF8
APEAtomWatch
APEByteArrayCreate
APEByteArrayGetBuffer
APEChangeLogLevel
APEGetBuildBranch
APEGetBuildDate
APEGetBuildVersion
APEGetLogLevel
APEGetVersion
APEInitialize
APEObjectAddEventListener
APEObjectCreate
APEObjectDeleteProperty
APEObjectDisconnect
APEObjectEnumerate
APEObjectGetClassName
APEObjectGetClassObject
APEObjectGetProperty
APEObjectGetPropertyFlags
APEObjectGetRoot
APEObjectInvokeMethod
APEObjectLock
APEObjectPutProperty
APEObjectRemoveEventListener
APEPlayerAddPluginObjectModel
APEPlayerCallExternalInterface
APEPlayerChangeAttributes
APEPlayerDisconnectObjectModelExtension
APEPlayerExtendObjectModel
APEPlayerFromStageHWND
APEPlayerGetAttributes
APEPlayerInstallComponent
APEPlayerLoadComponent
APEPlayerLoadContent
APEPlayerLoadSWF
APEPlayerRetrieveException
APEPlayerSetException
APEPlayerSetStandardException
APEPlayerSuspendResumeAtomCacheFlushing
APERegisterMemoryStatusCallback
APEStreamClose
APEStreamWrite
APETerminate
APEUnregisterMemoryStatusCallback
APEYieldToRuntime
_DllMain@12

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
adbeapeengine.dll
.dll regsvr32 windows:5 windows x86 arch:x86

5b0d2beb36df955f9267173534edeb7a

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ce:ed:c3:aa:d8:cb:5c:e5:82:f4:9d:cd:a6:19:53:cb:c4:e5:6a:80
Signer

Actual PE Digest

ce:ed:c3:aa:d8:cb:5c:e5:82:f4:9d:cd:a6:19:53:cb:c4:e5:6a:80

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

adbeapeengine.pdb

Imports

kernel32

FormatMessageA
CreateEventA
ConnectNamedPipe
CreateNamedPipeA
FlushFileBuffers
AreFileApisANSI
UnlockFile
LockFile
LockFileEx
GetFullPathNameA
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetNumberFormatW
GetCurrencyFormatW
GetDateFormatW
GetTimeFormatW
SizeofResource
CreateWaitableTimerA
SetWaitableTimer
CancelWaitableTimer
InterlockedExchangeAdd
GetVersionExA
GetVersion
SwitchToThread
SetNamedPipeHandleState
FileTimeToSystemTime
SetStdHandle
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
PeekNamedPipe
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetThreadAffinityMask
CreateFileMappingA
MapViewOfFile
ReleaseMutex
UnmapViewOfFile
CreateProcessW
GetModuleHandleA
SetHandleInformation
GetExitCodeProcess
GenerateConsoleCtrlEvent
GetProcessHeap
GetOverlappedResult
CancelIo
CreateNamedPipeW
DebugBreak
GetLocalTime
CreateSemaphoreW
ReleaseSemaphore
LocalFree
WaitForMultipleObjects
GetDriveTypeW
SetThreadPriority
ResetEvent
lstrlenA
lstrcpyA
GetSystemDirectoryA
CreateEventW
SetEvent
GetProcessTimes
TerminateThread
GetSystemTime
CompareFileTime
SetEndOfFile
GetFileSizeEx
SetFilePointerEx
CreateDirectoryW
GetTempPathA
GetTempFileNameA
OutputDebugStringA
DeviceIoControl
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
GetFullPathNameW
GetTempFileNameW
GetLongPathNameW
RemoveDirectoryW
GetFileInformationByHandle
GetFileAttributesExW
GetVolumeInformationW
GetLogicalDriveStringsW
CreateMutexA
FormatMessageW
VirtualProtect
DeleteFileA
Sleep
CreateDirectoryA
GetFileAttributesA
lstrlenW
FlushInstructionCache
GetSystemDirectoryW
SleepEx
GetCurrentDirectoryW
SetCurrentDirectoryW
OpenThread
QueueUserAPC
GlobalSize
QueryPerformanceFrequency
GlobalLock
GlobalUnlock
IsDBCSLeadByte
GlobalAlloc
FindResourceExW
FindResourceExA
LoadResource
LockResource
CreateProcessA
VerSetConditionMask
VerifyVersionInfoW
CreateFileA
GetFileSize
ReadFile
SetFilePointer
GetUserDefaultUILanguage
GetUserDefaultLangID
ExitThread
CreateThread
WaitForSingleObject
VirtualQuery
MoveFileExW
LoadLibraryW
FindFirstFileW
FindNextFileW
FindClose
DeleteFileW
CreateFileW
GetTempPathW
CloseHandle
GetVersionExW
GetSystemInfo
InitializeCriticalSection
RaiseException
GlobalFree
GetFileAttributesW
SystemTimeToFileTime
GetModuleFileNameW
IsProcessorFeaturePresent
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
GetLocaleInfoW
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
LoadLibraryA
FreeLibrary
WriteFile
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
HeapFree
GetCurrentThread
InterlockedDecrement
GetLastError
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleW
GetCommandLineA
GetCurrentThreadId
InterlockedExchange
InterlockedCompareExchange
EnumSystemLocalesW

oleaut32

UnRegisterTypeLi
LoadRegTypeLi
SysStringLen
SysAllocString
LoadTypeLi
RegisterTypeLi
SysFreeString

ole32

OleUninitialize
CoUninitialize
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
PropVariantClear
OleFlushClipboard
ReleaseStgMedium
CoGetInterfaceAndReleaseStream
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
OleInitialize
CreateBindCtx
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize

oleacc

AccessibleObjectFromWindow

shell32

SHGetFolderPathA
SHGetSpecialFolderLocation
SHGetFolderPathW
SHFileOperationW
SHBrowseForFolderW
ord4
ord2
ShellExecuteExW
SHGetFileInfoW
SHGetPathFromIDListW
SHAppBarMessage
SHGetDiskFreeSpaceExW

user32

CreateCaret
ShowCaret
GetCursorPos
BeginPaint
EndPaint
DestroyCaret
DrawMenuBar
CreatePopupMenu
TrackPopupMenu
DestroyMenu
GetMenuInfo
CreateMenu
SetMenuInfo
EmptyClipboard
SetClipboardData
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
RegisterClipboardFormatW
DdeInitializeW
DdeCreateStringHandleA
DdeConnect
DdeClientTransaction
DdeDisconnect
DdeFreeStringHandle
DdeUninitialize
GetWindowTextLengthW
CreateIconIndirect
FillRect
DialogBoxParamW
GetDlgItemTextW
SetDlgItemTextW
GetClientRect
MoveWindow
DialogBoxIndirectParamW
EndDialog
GetWindowRect
GetDesktopWindow
SetWindowPos
EnumDisplaySettingsW
EnumDisplayMonitors
GetKeyboardLayout
RegisterClipboardFormatA
GetClipboardFormatNameA
SetCaretPos
GetClassInfoExW
LoadIconW
GetDlgItem
SetWindowTextW
SetFocus
GetParent
SendMessageTimeoutW
DestroyIcon
GetPropW
SetPropW
ClientToScreen
MonitorFromWindow
GetMonitorInfoW
SendInput
PostQuitMessage
CallWindowProcW
RegisterClassExW
DispatchMessageW
MessageBoxW
PostThreadMessageW
SystemParametersInfoW
ScreenToClient
GetQueueStatus
SetTimer
InvalidateRect
CreateWindowExW
DefWindowProcW
SetRectEmpty
GetDC
ReleaseDC
LoadStringA
MessageBoxA
LoadStringW
LoadCursorW
SetCursor
GetWindowLongW
SetWindowLongW
SendMessageW
PostMessageW
PeekMessageW
PtInRect
GetDoubleClickTime
SetRect
GetSystemMetrics
InflateRect
GetKeyState
IsWindow
DestroyWindow
GetFocus
KillTimer
CopyRect
GetWindowInfo
GetWindowTextW
GetForegroundWindow
WaitForInputIdle
SetWindowRgn
MapVirtualKeyW
InsertMenuItemW
SetMenuItemInfoW
RemoveMenu
GetMenuItemInfoW
UpdateLayeredWindow
GetWindowThreadProcessId
GetLastInputInfo
TranslateMessage
GetAsyncKeyState
PostMessageA
RegisterWindowMessageA
MsgWaitForMultipleObjects
GetCursor
UnregisterClassA

gdi32

GetTextCharacterExtra
GetTextExtentPoint32A
CreatePen
GetWorldTransform
SetGraphicsMode
SetWorldTransform
EnumFontFamiliesW
GetBkColor
GetCurrentObject
GetTextExtentPoint32W
DPtoLP
SetTextCharacterExtra
SetDIBitsToDevice
GetBkMode
GetTextAlign
CreateRectRgn
GetClipRgn
CreateFontIndirectA
SetTextColor
ExtTextOutA
SelectClipRgn
EnumFontFamiliesA
GetTextMetricsW
GetStretchBltMode
SetStretchBltMode
StretchBlt
SetBkColor
ExtTextOutW
GetFontData
EnumFontFamiliesExW
GetTextColor
CreateCompatibleBitmap
GetDIBits
CreateRectRgnIndirect
GetSystemPaletteEntries
GetDeviceCaps
RealizePalette
SelectPalette
DeleteDC
GetICMProfileA
CreateDCA
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
GetObjectW
GetStockObject
CreateFontIndirectW
SetPixel
CreateBitmap
CreateDIBSection
CreatePalette
GetClipBox
GdiFlush
StartPage
EndPage
BeginPath
EndPath
SetPolyFillMode
MoveToEx
LineTo
PolyBezierTo
SelectClipPath
SaveDC
RestoreDC
CreateDCW
ResetDCW
CreateICW
EndDoc
CreateSolidBrush
StrokePath
ExtCreatePen
FillPath
AbortDoc
LPtoDP
StartDocW
StretchDIBits
SetBkMode
SetTextAlign
IntersectClipRect

advapi32

RegOpenKeyExW
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
OpenProcessToken
SetEntriesInAclW
GetTokenInformation
MakeSelfRelativeSD
SetSecurityDescriptorControl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
SetSecurityInfo
RegEnumKeyExW
CryptGenRandom
CryptAcquireContextW
CryptReleaseContext
RegOpenKeyA
CryptDestroyHash
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyKey
RegQueryValueExW

shlwapi

StrDupW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
PrintDlgW
PageSetupDlgW

winmm

timeGetTime
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutGetDevCapsW
waveInGetDevCapsW
waveOutGetNumDevs
waveInGetNumDevs
waveInClose
waveInUnprepareHeader
waveInReset
waveInStop
waveOutOpen
waveOutReset
waveOutClose
waveInStart
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeSetEvent
timeKillEvent
waveOutWrite
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveOutGetPosition
mixerGetID
waveInGetDevCapsA
waveOutGetDevCapsA
waveOutMessage
waveInMessage
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerGetControlDetailsA
waveOutRestart
waveOutPause
waveInGetPosition
mixerSetControlDetails

msimg32

AlphaBlend

ws2_32

send
WSAStartup
select
ioctlsocket
inet_addr
gethostbyname
inet_ntoa
htonl
getservbyname
htons
WSACleanup
closesocket
WSAGetLastError
WSAIoctl
WSAAsyncSelect
socket
accept
listen
ntohl
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
WSAAddressToStringA
bind
sendto
recvfrom
getpeername
connect
WSACloseEvent
getsockname
WSASocketW
recv
setsockopt
gethostname
WSASetLastError
getservbyport
ntohs
gethostbyaddr

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

crypt32

CryptFindLocalizedName
CertOpenStore
CertGetEnhancedKeyUsage
CertFreeCertificateContext
CertVerifySubjectCertificateContext
CertAddEncodedCertificateToStore
CertDuplicateCertificateContext
CryptImportPublicKeyInfo
CertFindCertificateInStore
CertCreateCertificateContext
CryptProtectData
CertCloseStore
CryptUnprotectData
CertGetCertificateChain
CertFreeCertificateChain
CryptVerifyMessageSignature
CryptGetMessageCertificates

wininet

InternetGetCookieW
InternetSetCookieW
InternetErrorDlg

rpcrt4

UuidToStringA
RpcStringFreeA

msi

ord70

urlmon

CopyStgMedium

comctl32

ImageList_Draw
ImageList_GetIconSize

mscms

CreateColorTransformW
CloseColorProfile
TranslateBitmapBits
DeleteColorTransform
OpenColorProfileW

dsound

ord8

iphlpapi

GetAdaptersAddresses

dnsapi

DnsRecordListFree
DnsQuery_UTF8

winspool.drv

EnumPrintersW
OpenPrinterW
GetPrinterW
ClosePrinter

Exports

Exports

APXGetHostAPI
DllRegisterServer
DllUnregisterServer
SWFLPlayer_Initialize

Sections

.text
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 247KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/Dictionary/cs_CZ/stringTable.zdct
resources/Dictionary/da_DK/stringTable.zdct
resources/Dictionary/de_DE/stringTable.zdct
resources/Dictionary/en_AE/stringTable.zdct
resources/Dictionary/en_IL/stringTable.zdct
resources/Dictionary/en_US/stringTable.zdct
resources/Dictionary/es_ES/stringTable.zdct
resources/Dictionary/es_LA/stringTable.zdct
resources/Dictionary/es_MX/stringTable.zdct
resources/Dictionary/es_NA/stringTable.zdct
resources/Dictionary/fi_FI/stringTable.zdct
resources/Dictionary/fr_CA/stringTable.zdct
resources/Dictionary/fr_FR/stringTable.zdct
resources/Dictionary/fr_MA/stringTable.zdct
resources/Dictionary/fr_XM/stringTable.zdct
resources/Dictionary/hu_HU/stringTable.zdct
resources/Dictionary/it_IT/stringTable.zdct
resources/Dictionary/ja_JP/stringTable.zdct
resources/Dictionary/ko_KR/stringTable.zdct
resources/Dictionary/nb_NO/stringTable.zdct
resources/Dictionary/nl_NL/stringTable.zdct
resources/Dictionary/pl_PL/stringTable.zdct
resources/Dictionary/pt_BR/stringTable.zdct
resources/Dictionary/ro_RO/stringTable.zdct
resources/Dictionary/ru_RU/stringTable.zdct
resources/Dictionary/sv_SE/stringTable.zdct
resources/Dictionary/tr_TR/stringTable.zdct
resources/Dictionary/uk_UA/stringTable.zdct
resources/Dictionary/zh_CN/stringTable.zdct
resources/Dictionary/zh_TW/stringTable.zdct
resources/contents/General.utxt
switcher/DWA_UI.dll
.dll windows:5 windows x86 arch:x86

2e168f9fee36c65804acc85d4752ed9f

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8b:f3:15:86:7b:44:ae:57:a1:e6:75:8b:b7:45:47:eb:7c:61:97:c1
Signer

Actual PE Digest

8b:f3:15:86:7b:44:ae:57:a1:e6:75:8b:b7:45:47:eb:7c:61:97:c1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\DWA_UI.pdb

Imports

kernel32

GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetLastError
InterlockedDecrement
GetProcAddress
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
WriteFile
GetModuleFileNameW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
IsProcessorFeaturePresent

Exports

Exports

aam_switchAppletVersion

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
switcher/LWA_UI.dll
.dll windows:5 windows x86 arch:x86

2aa53b04962126b2336e58fea26f47b6

Code Sign

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/09/2012, 00:00

Not After

19/09/2013, 23:59

Subject

CN=Adobe Systems Incorporated,OU=CS Production+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1e:3d:bf:86:68:31:7d:a4:52:da:8b:5d:7c:cf:77:b9:d7:ac:d4:b0
Signer

Actual PE Digest

1e:3d:bf:86:68:31:7d:a4:52:da:8b:5d:7c:cf:77:b9:d7:ac:d4:b0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\LWA_UI.pdb

Imports

kernel32

WriteFile
WideCharToMultiByte
Sleep
ReadFile
GetModuleFileNameW
CreateFileW
MultiByteToWideChar
FlushFileBuffers
GetTempPathW
GetLastError
SetLastError
GetProcAddress
ReleaseMutex
CloseHandle
GetModuleHandleW
LocalFree
InterlockedIncrement
InterlockedDecrement
ReleaseSemaphore
CreateSemaphoreW
GetCurrentProcessId
GetDateFormatW
CreateDirectoryW
GetTimeFormatW
GetLocalTime
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetFilePointer
GetFileSizeEx
GetCurrentThreadId
OpenMutexW
GetModuleFileNameA
GetStartupInfoW
WaitForSingleObject
GetCurrentProcess
CreateMutexW
SetEnvironmentVariableA
CompareStringW
GetProcessHeap
SetEndOfFile
CreateFileA
WriteConsoleW
SetStdHandle
LoadLibraryW
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetFileType
SetHandleCount
HeapSize
GetLocaleInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStdHandle
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
GetConsoleMode
GetConsoleCP
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
InterlockedCompareExchange
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
MoveFileW
GetTimeZoneInformation
RaiseException
GetCPInfo
RtlUnwind
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
ExitProcess
FreeEnvironmentStringsW

user32

wsprintfW

shell32

SHCreateDirectoryExW

ole32

CoUninitialize
CoInitialize
CoCreateInstance
OleRun

oleaut32

SysFreeString
VariantClear
SysAllocString
GetErrorInfo

shlwapi

PathFileExistsW
PathRemoveExtensionW
PathIsDirectoryW
PathIsFileSpecW
PathAddExtensionW
PathAppendW
PathRenameExtensionW
PathRemoveFileSpecW

Exports

Exports

aam_switchAppletVersion

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/core/PDApp.pimx
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/core/PDApp.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/packages/setup.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePDFSettings11-ja_JP/AdobePDFSettings11-ja_JP.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePDFSettings11-ja_JP/AdobePDFSettings11-ja_JP.msi
.msi
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePDFSettings11-ja_JP/AdobePDFSettings11-ja_JP.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePDFSettings11-ja_JP/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePDFSettings11-ja_JP/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePDFSettings11-mul/AdobePDFSettings11-mul.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePDFSettings11-mul/AdobePDFSettings11-mul.msi
.msi
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePDFSettings11-mul/AdobePDFSettings11-mul.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePDFSettings11-mul/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePDFSettings11-mul/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core-080113170114/AdobePhotoshop13-Core-080113170114.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core-080113170114/AdobePhotoshop13-Core-080113170114.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core-080113170114/Assets1_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core-080113170114/Assets1_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core-080113170114/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core-080113170114/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core-080113170114/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core-080113170114/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core/AdobePhotoshop13-Core.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core/AdobePhotoshop13-Core.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core/Assets1_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core/Assets1_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core/Assets2_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core/Assets2_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64-080113170649/AdobePhotoshop13-Core_x64-080113170649.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64-080113170649/AdobePhotoshop13-Core_x64-080113170649.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64-080113170649/Assets1_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64-080113170649/Assets1_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64-080113170649/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64-080113170649/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64-080113170649/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64-080113170649/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64/AdobePhotoshop13-Core_x64.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64/AdobePhotoshop13-Core_x64.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64/Assets1_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64/Assets1_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64/Assets2_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64/Assets2_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Core_x64/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Driver/AdobePhotoshop13-Driver.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Driver/AdobePhotoshop13-Driver.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Driver/Assets1_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Driver/Assets1_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Driver/Assets2_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Driver/Assets2_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Driver/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Driver/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Driver/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Driver/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support-080113171918/AdobePhotoshop13-Support-080113171918.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support-080113171918/AdobePhotoshop13-Support-080113171918.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support-080113171918/Assets1_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support-080113171918/Assets1_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support-080113171918/Assets2_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support-080113171918/Assets2_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support-080113171918/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support-080113171918/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support-080113171918/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support-080113171918/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support/AdobePhotoshop13-Support.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support/AdobePhotoshop13-Support.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support/Assets2_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support/Assets2_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-Support/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US/AdobePhotoshop13-en_US.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US/AdobePhotoshop13-en_US.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US/Assets1_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US/Assets1_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US_x64/AdobePhotoshop13-en_US_x64.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US_x64/AdobePhotoshop13-en_US_x64.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US_x64/Assets1_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US_x64/Assets1_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US_x64/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US_x64/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US_x64/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-en_US_x64/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU-080113164423/AdobePhotoshop13-ru_RU-080113164423.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU-080113164423/AdobePhotoshop13-ru_RU-080113164423.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU-080113164423/Assets1_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU-080113164423/Assets1_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU-080113164423/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU-080113164423/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU-080113164423/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU-080113164423/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU/AdobePhotoshop13-ru_RU.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU/AdobePhotoshop13-ru_RU.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU/Assets1_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU/Assets1_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64-080113164545/AdobePhotoshop13-ru_RU_x64-080113164545.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64-080113164545/AdobePhotoshop13-ru_RU_x64-080113164545.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64-080113164545/Assets1_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64-080113164545/Assets1_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64-080113164545/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64-080113164545/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64-080113164545/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64-080113164545/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64/AdobePhotoshop13-ru_RU_x64.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64/AdobePhotoshop13-ru_RU_x64.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64/Assets1_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64/Assets1_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobePhotoshop13-ru_RU_x64/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeSuiteSharedConfiguration3-mul/AdobeSuiteSharedConfiguration3-mul.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeSuiteSharedConfiguration3-mul/AdobeSuiteSharedConfiguration3-mul.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeSuiteSharedConfiguration3-mul/Assets2_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeSuiteSharedConfiguration3-mul/Assets2_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeSuiteSharedConfiguration3-mul/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeSuiteSharedConfiguration3-mul/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeSuiteSharedConfiguration3-mul/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeSuiteSharedConfiguration3-mul/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeSuiteSharedConfiguration3-mul/version.txt
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11-mul/AdobeTypeSupport11-mul.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11-mul/AdobeTypeSupport11-mul.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11-mul/Assets2_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11-mul/Assets2_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11-mul/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11-mul/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11-mul/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11-mul/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11_x64-mul/AdobeTypeSupport11_x64-mul.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11_x64-mul/AdobeTypeSupport11_x64-mul.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11_x64-mul/Assets2_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11_x64-mul/Assets2_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11_x64-mul/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11_x64-mul/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11_x64-mul/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeTypeSupport11_x64-mul/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeVideoProfilesCS4_0-mul/AdobeVideoProfilesCS4_0-mul.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeVideoProfilesCS4_0-mul/AdobeVideoProfilesCS4_0-mul.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeVideoProfilesCS4_0-mul/Assets2_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeVideoProfilesCS4_0-mul/Assets2_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeVideoProfilesCS4_0-mul/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeVideoProfilesCS4_0-mul/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeVideoProfilesCS4_0-mul/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeVideoProfilesCS4_0-mul/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll/AdobeWinSoftLinguisticsPluginAll.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll/AdobeWinSoftLinguisticsPluginAll.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll/Assets2_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll/Assets2_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll_x64/AdobeWinSoftLinguisticsPluginAll_x64.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll_x64/AdobeWinSoftLinguisticsPluginAll_x64.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll_x64/Assets2_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll_x64/Assets2_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll_x64/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll_x64/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll_x64/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeWinSoftLinguisticsPluginAll_x64/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeXMPPanelsAll/AdobeXMPPanelsAll.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeXMPPanelsAll/AdobeXMPPanelsAll.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeXMPPanelsAll/Assets2_1.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeXMPPanelsAll/Assets2_1.zip
.zip
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeXMPPanelsAll/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeXMPPanelsAll/Install.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeXMPPanelsAll/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/AdobeXMPPanelsAll/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Media_db.sig
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2005 Redist (x64)/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2005 Redist (x64)/Microsoft VC 2005 Redist (x64).proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2005 Redist (x64)/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2005 Redist (x64)/vcredist_x64.EXE
.exe windows:5 windows x86 arch:x86

0ebb3c09b06b1666d307952e824c8697

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

72:eb:ec:84:ec:eb:2c:99:f6:93:1a:22:55:c2:43:bc:37:c7:56:59
Signer

Actual PE Digest

72:eb:ec:84:ec:eb:2c:99:f6:93:1a:22:55:c2:43:bc:37:c7:56:59

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
lstrlenA
GetModuleFileNameA
GetSystemDirectoryA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
FreeResource
GetProcAddress
LoadResource
SizeofResource
FindResourceA
lstrcatA
CloseHandle
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ReadFile
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
LockResource

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2005 Redist (x86)/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2005 Redist (x86)/Microsoft VC 2005 Redist (x86).proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2005 Redist (x86)/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2005 Redist (x86)/vcredist_x86.exe
.exe windows:5 windows x86 arch:x86

0ebb3c09b06b1666d307952e824c8697

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5d:9a:9e:30:e8:b4:79:bd:b9:25:8e:b1:69:72:67:0f:90:ec:0f:7f
Signer

Actual PE Digest

5d:9a:9e:30:e8:b4:79:bd:b9:25:8e:b1:69:72:67:0f:90:ec:0f:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
lstrlenA
GetModuleFileNameA
GetSystemDirectoryA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
FreeResource
GetProcAddress
LoadResource
SizeofResource
FindResourceA
lstrcatA
CloseHandle
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ReadFile
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
LockResource

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2008 Redist (x64)/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2008 Redist (x64)/Microsoft VC 2008 Redist (x64).proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2008 Redist (x64)/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2008 Redist (x64)/vcredist_x64.exe
.exe windows:5 windows x86 arch:x86

092eb6daba2f17cbda102fd1a32acd00

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:27:81:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/10/2008, 21:24

Not After

22/01/2010, 21:34

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e9:f6:4c:1d:8c:8b:9f:64:ca:36:6a:9f:8f:23:5d:79:f5:45:3a:b9
Signer

Actual PE Digest

e9:f6:4c:1d:8c:8b:9f:64:ca:36:6a:9f:8f:23:5d:79:f5:45:3a:b9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
GetVersionExA
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
CreateFileA
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
FindClose
ReadFile

msvcrt

strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_snprintf
sprintf

advapi32

AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken

user32

ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
LoadStringA
EndDialog
SetParent
MessageBoxA

ntdll

NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.9MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2008 Redist (x86)/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2008 Redist (x86)/Microsoft VC 2008 Redist (x86).proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2008 Redist (x86)/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2008 Redist (x86)/vcredist_x86.exe
.exe windows:5 windows x86 arch:x86

092eb6daba2f17cbda102fd1a32acd00

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:27:81:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/10/2008, 21:24

Not After

22/01/2010, 21:34

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f1:2d:63:c7:cd:39:0d:61:df:59:dc:c5:fc:33:da:17:e2:2a:bf:18
Signer

Actual PE Digest

f1:2d:63:c7:cd:39:0d:61:df:59:dc:c5:fc:33:da:17:e2:2a:bf:18

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
GetVersionExA
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
CreateFileA
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
FindClose
ReadFile

msvcrt

strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_snprintf
sprintf

advapi32

AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken

user32

ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
LoadStringA
EndDialog
SetParent
MessageBoxA

ntdll

NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2010 Redist (x64)/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2010 Redist (x64)/Microsoft VC 2010 Redist (x64).proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2010 Redist (x64)/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2010 Redist (x64)/vcredist_x64.exe
.exe windows:5 windows x86 arch:x86

a1f6f100bff4507a3332f3f0cdfc24f5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7e:e6:b3:26:a0:5b:83:d2:4a:74:47:94:80:1b:e6:8c:ef:59:05:96
Signer

Actual PE Digest

7e:e6:b3:26:a0:5b:83:d2:4a:74:47:94:80:1b:e6:8c:ef:59:05:96

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Imports

msvcrt

__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf

advapi32

InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor

kernel32

CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime

user32

SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow

ntdll

NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.4MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2010 Redist (x86)/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2010 Redist (x86)/Microsoft VC 2010 Redist (x86).proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2010 Redist (x86)/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft VC 2010 Redist (x86)/vcredist_x86.exe
.exe windows:4 windows x86 arch:x86

1d1577d864d2da06952f7affd8635371

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

shell32

SHGetSpecialFolderPathW
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteExW

gdi32

CreateCompatibleDC
CreateFontIndirectW
DeleteObject
DeleteDC
GetCurrentObject
StretchBlt
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
SetStretchBltMode
GetObjectW

advapi32

FreeSid
AllocateAndInitializeSid
CheckTokenMembership

user32

GetMenu
SetWindowPos
GetWindowDC
ReleaseDC
CopyImage
GetKeyState
GetWindowRect
ScreenToClient
GetWindowLongW
SetTimer
GetMessageW
DispatchMessageW
KillTimer
DestroyWindow
EndDialog
SendMessageW
wsprintfW
GetClassNameA
GetWindowTextW
GetWindowTextLengthW
GetSysColor
wsprintfA
SetWindowTextW
CreateWindowExW
GetDlgItem
GetClientRect
SetWindowLongW
UnhookWindowsHookEx
SetFocus
GetSystemMetrics
SystemParametersInfoW
ShowWindow
DrawTextW
GetDC
ClientToScreen
GetWindow
DialogBoxIndirectParamW
DrawIconEx
CallWindowProcW
DefWindowProcW
CallNextHookEx
PtInRect
SetWindowsHookExW
LoadImageW
LoadIconW
MessageBeep
EnableWindow
IsWindow
EnableMenuItem
GetSystemMenu
wvsprintfW
CharUpperW
MessageBoxA
GetParent

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoInitialize

oleaut32

SysAllocString
VariantClear
OleLoadPicture

kernel32

SetFileTime
SetEndOfFile
EnterCriticalSection
DeleteCriticalSection
GetModuleHandleA
LeaveCriticalSection
WaitForMultipleObjects
ReadFile
SetFilePointer
GetFileSize
FormatMessageW
lstrcpyW
LocalFree
IsBadReadPtr
GetSystemDirectoryW
GetCurrentThreadId
SuspendThread
TerminateThread
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventW
GetVersionExW
GetModuleFileNameW
GetCurrentProcess
SetProcessWorkingSetSize
SetCurrentDirectoryW
GetDriveTypeW
CreateFileW
GetCommandLineW
GetStartupInfoW
CreateProcessW
CreateJobObjectW
ResumeThread
AssignProcessToJobObject
CreateIoCompletionPort
SetInformationJobObject
GetQueuedCompletionStatus
GetExitCodeProcess
CloseHandle
SetEnvironmentVariableW
GetTempPathW
GetSystemTimeAsFileTime
lstrlenW
CompareFileTime
SetThreadLocale
FindFirstFileW
DeleteFileW
FindNextFileW
FindClose
RemoveDirectoryW
ExpandEnvironmentStringsW
WideCharToMultiByte
VirtualAlloc
GlobalMemoryStatusEx
lstrcmpW
GetEnvironmentVariableW
lstrcmpiW
lstrlenA
GetLocaleInfoW
MultiByteToWideChar
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetSystemDefaultLCID
lstrcmpiA
GlobalAlloc
GlobalFree
MulDiv
FindResourceExA
SizeofResource
LoadResource
LockResource
LoadLibraryA
ExitProcess
lstrcatW
GetDiskFreeSpaceExW
SetFileAttributesW
SetLastError
Sleep
GetExitCodeThread
WaitForSingleObject
CreateThread
GetLastError
SystemTimeToFileTime
GetLocalTime
GetFileAttributesW
CreateDirectoryW
WriteFile
GetStdHandle
VirtualFree
GetModuleHandleW
GetProcAddress
GetStartupInfoA

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
free
memcpy
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_CxxThrowException
_beginthreadex
_EH_prolog
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
memset
_wcsnicmp
strncmp
wcsncmp
malloc
memmove
_wtol
_purecall

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft_VC80_CRT_x86/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft_VC80_CRT_x86/Microsoft_VC80_CRT_x86.msi
.msi
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft_VC80_CRT_x86/Microsoft_VC80_CRT_x86.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft_VC80_CRT_x86/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft_VC90_CRT_x86/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft_VC90_CRT_x86/Microsoft_VC90_CRT_x86.msi
.msi
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft_VC90_CRT_x86/Microsoft_VC90_CRT_x86.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/Microsoft_VC90_CRT_x86/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/SwitchBoard2.0All/Assets1_1.zip
.jar
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/SwitchBoard2.0All/Assets2_1.zip
.jar
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/SwitchBoard2.0All/Install.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/SwitchBoard2.0All/Media_db.db
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/SwitchBoard2.0All/SwitchBoard2.0All.boot.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/SwitchBoard2.0All/SwitchBoard2.0All.proxy.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/SwitchBoard2.0All/media.sql
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/payloads/setup.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/AdobePIM.dll
.dll windows:5 windows x86 arch:x86

5147f1d95538d71670cacbd3d2fef4e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\oobe\7.0\dev\aamcore\target\win\Release\resources\AdobePIM.pdb

Imports

msi

ord147
ord74
ord145

kernel32

InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetDateFormatW
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
GetTempPathW
GetLocalTime
OpenProcess
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
FindFirstFileW
CreateProcessW
MoveFileExW
SetEvent
CopyFileW
GetVersionExW
GetModuleFileNameW
FindClose
ResetEvent
CreateEventW
RemoveDirectoryW
lstrcmpiW
FindNextFileW
GetDiskFreeSpaceExW
DeleteFileW
SetFileAttributesW
GetFileSize
GetCurrentProcess
GetModuleHandleW
GetExitCodeProcess
ReadFile
FlushFileBuffers
SetLastError
GetProcAddress
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetFilePointer
SetEndOfFile
FreeLibrary
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LoadLibraryW
LeaveCriticalSection
GetFileAttributesA
GetFileAttributesW
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
InterlockedIncrement
GetSystemTime
AreFileApisANSI
DeleteFileA
lstrlenW
GetACP
GetFileSizeEx
lstrlenA
DosDateTimeToFileTime
SetFileTime
lstrcatW
GetFileTime
LocalFileTimeToFileTime
OpenMutexW
CompareStringW
GetProcessHeap
LocalFree
GetCurrentProcessId
CloseHandle
ReleaseMutex
OpenSemaphoreW
LocalAlloc
CreateSemaphoreW
RaiseException
GetLastError
ReleaseSemaphore
Sleep
WaitForSingleObject
CreateMutexW
SetEnvironmentVariableA
RtlUnwind
WriteConsoleW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetConsoleMode
GetConsoleCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetCommandLineA
HeapReAlloc
MoveFileA
MoveFileW
HeapFree
HeapAlloc
DecodePointer
EncodePointer
GetStringTypeW
InterlockedExchange
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
HeapSize
HeapDestroy
HeapCreate
ExitProcess
GetLocaleInfoW
GetStdHandle
IsProcessorFeaturePresent
GetTimeZoneInformation
GetTempPathA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCPInfo
InterlockedCompareExchange
LCMapStringW

user32

wsprintfW

advapi32

CreateWellKnownSid
SetSecurityDescriptorDacl
GetNamedSecurityInfoW
SetNamedSecurityInfoW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
InitializeSecurityDescriptor

shell32

SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
SHGetSpecialFolderPathW
SHCreateDirectoryExW

ole32

CoCreateInstance
OleRun
CoUninitialize
CoInitialize
StringFromGUID2
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantClear
SysStringLen
SysAllocString
GetErrorInfo

shlwapi

PathRemoveExtensionW
PathAppendW
PathIsFileSpecW
PathStripPathW
PathRenameExtensionW
PathRemoveFileSpecW
PathFindFileNameW
PathIsDirectoryW
PathFileExistsW
PathAddExtensionW
PathRemoveBackslashW

Exports

Exports

AAMIU_Uninstall
AAMIU_getDeploymentValidationStatus
AAMIU_preInstallPropertySet
pim_copyPkgsFromACFToCFPath
pim_createLibraryRef
pim_createLibraryRefWithType
pim_createOrUpdateAAMInventory
pim_executeInstallModifersForInstalledPackages
pim_freeLiraryRef
pim_getAppletRegistrationInfo
pim_getCurrentPIMCFPath
pim_getCurrentPackagesVersion
pim_getCurrentPathType
pim_getInstalledPackagesInfo
pim_getPathOfType
pim_getStandardACFPath
pim_getStandardUSFPath
pim_getStandardUSFTempPath
pim_getUpdateStatusAtPath
pim_getUpdateStatusAtPathCInterface
pim_haveEnoughDiskSpaceIfACFLatest
pim_haveEnoughDiskSpaceToInstallPackages
pim_haveEnoughDiskSpaceToInstallPackagesCInterface
pim_installAdobeApplicationManager
pim_installPackage
pim_postInstallPackages
pim_registerProgressTicksCallback
pim_syncFromPathToACF
pim_syncFromPathToPath
pim_syncUSFToACF
pim_uninstallAAMFromAAMCleanerTool
pim_uninstallAAMUsingAAMCleanerTool

Sections

.text
Size: 914KB - Virtual size: 914KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/cs_CZ/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/da_DK/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/de_DE/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/en_AE/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/en_GB/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/en_IL/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/en_US/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/en_XM/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/es_ES/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/es_LA/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/es_MX/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/es_NA/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/fi_FI/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/fr_CA/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/fr_FR/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/fr_MA/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/fr_XM/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/hu_HU/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/it_IT/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/ja_JP/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/ko_KR/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/nb_NO/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/nl_NL/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/pl_PL/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/pt_BR/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/ru_RU/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/sv_SE/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/tr_TR/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/uk_UA/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/zh_CN/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/Dictionary/zh_TW/stringTable.zdct
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/setup.xml
.xml
Adobe.Photoshop.CS6.u3.(RU-EN)/Adobe CS6/resources/updaterinventory.dll
.dll windows:5 windows x86 arch:x86

079a2edd5203032eaaf2a5a3d981baa2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\updater7.0\build-rel\build\build\updaterinventory\vc10\outdir-Release\updaterinventory.pdb

Imports

kernel32

DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
RaiseException
HeapCreate
HeapDestroy
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
WideCharToMultiByte
GetTimeZoneInformation
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
EncodePointer
InterlockedExchange
LoadLibraryW
RtlUnwind
LCMapStringW
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
CreateFileW
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA
GetLongPathNameW
GetTempPathW
DeleteFileW
CopyFileW
MoveFileW
SetFileAttributesW
RemoveDirectoryW
GetVersionExW
CreateDirectoryW
InitializeCriticalSection
ReadFile
MultiByteToWideChar
LocalFree
LocalAlloc
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
CreateThread
GetExitCodeThread
TerminateThread
WaitForSingleObject
InterlockedDecrement
CloseHandle
FindNextFileW
FindClose
GetCurrentProcess
FindFirstFileW
SetEndOfFile

advapi32

SetNamedSecurityInfoW
CreateWellKnownSid
GetSecurityDescriptorDacl
RegOpenKeyExW
RegSetKeySecurity
SetEntriesInAclW
RegDeleteValueW
RegGetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHGetMalloc
SHGetPathFromIDListW

ole32

CoInitialize
CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitializeEx

oleaut32

VariantInit
SysFreeString
SysAllocString
VariantClear

shlwapi

PathIsDirectoryW
PathFileExistsW
PathIsFileSpecW
PathRemoveFileSpecW

Exports

Exports

UpdaterInventoryAddToMCL
UpdaterInventoryAddToMCLWithIcon
UpdaterInventoryGetLibVersion
UpdaterInventoryIsHigherUpdatePresent
UpdaterInventoryRelease
UpdaterInventoryRemoveFromMCL
UpdaterInventorySuppressUpdates

Sections

.text
Size: 275KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/langdata/en_US/lang.dat
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/langdata/ru_RU/lang.dat
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/main.ini
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/Autoplay.ico
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/PS_autoplay_bg.bmp
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_blank_N.bmp
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_blank_R.bmp
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_blank_S.bmp
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_disc_N.ico
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_disc_R.ico
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_disc_S.ico
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_generic_extras_N.ico
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_generic_extras_R.ico
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_generic_extras_S.ico
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_readme_N.ico
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_readme_R.ico
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_readme_S.ico
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_secondary-content_N.ico
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_secondary-content_R.ico
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_secondary-content_S.ico
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_secondarylink_rollover_LG_N.bmp
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_secondarylink_rollover_LG_R.bmp
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_secondarylink_rollover_LG_S.bmp
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_secondarylink_rollover_N.bmp
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_secondarylink_rollover_R.bmp
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/autoplay_secondarylink_rollover_S.bmp
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/button_M_N.bmp
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/button_M_R.bmp
Adobe.Photoshop.CS6.u3.(RU-EN)/Autoplay/resdata/button_M_S.bmp
Adobe.Photoshop.CS6.u3.(RU-EN)/Crack/1_Check_Disable.cmd
Adobe.Photoshop.CS6.u3.(RU-EN)/Crack/2_Serial_Keygen.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.Inc
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Inc
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Inc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Adobe.Photoshop.CS6.u3.(RU-EN)/Crack/3_Activation_Keygen.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 556KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Adobe.Photoshop.CS6.u3.(RU-EN)/Crack/Alternative/Patch.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 687KB - Virtual size: 688KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Adobe.Photoshop.CS6.u3.(RU-EN)/Crack/Alternative/iOTA.nfo
Adobe.Photoshop.CS6.u3.(RU-EN)/Crack/embrace.nfo
Adobe.Photoshop.CS6.u3.(RU-EN)/Crack/readme.txt
Adobe.Photoshop.CS6.u3.(RU-EN)/Crack/x-force.nfo
Adobe.Photoshop.CS6.u3.(RU-EN)/Installation Instructions.pdf
.pdf
Adobe.Photoshop.CS6.u3.(RU-EN)/Switch_Lang/AddLng_for_Photoshop_CS6.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/User Guide.pdf
.pdf
Adobe.Photoshop.CS6.u3.(RU-EN)/autoplay.exe
.exe windows:4 windows x86 arch:x86

ec7603dfc11290c5ea59ede1b41eac50

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4b:ea:81:7c:ba:c7:c3:8a:ba:72:e7:be:6f:00:de:6d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

07/11/2007, 00:00

Not After

10/12/2008, 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

55:7e:59:12:c0:ed:63:3a:cb:5b:e7:da:2f:6c:23:99:5e:d6:5d:d2
Signer

Actual PE Digest

55:7e:59:12:c0:ed:63:3a:cb:5b:e7:da:2f:6c:23:99:5e:d6:5d:d2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
ord17

msvfw32

MCIWndCreateW
MCIWndCreateA

winmm

waveOutSetVolume
waveOutGetVolume
PlaySoundA
waveOutGetNumDevs

shlwapi

PathRemoveFileSpecW

kernel32

InterlockedExchange
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
SetLastError
GetOEMCP
GetACP
SetEndOfFile
CreateFileA
FlushFileBuffers
SetStdHandle
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
IsBadCodePtr
IsBadReadPtr
SetFilePointer
GetStringTypeA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetCommandLineW
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
CompareStringA
WaitForSingleObject
CloseHandle
DeviceIoControl
MulDiv
FreeLibrary
Sleep
ReleaseMutex
GetLastError
GetUserDefaultLCID
GetUserDefaultUILanguage
GetSystemDefaultLangID
WriteFile
ReadFile
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
SetEnvironmentVariableA
HeapSize
HeapReAlloc
RtlUnwind
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
GetVersionExA
HeapAlloc
HeapFree
LCMapStringA

user32

DestroyIcon
GetSystemMetrics
SetFocus
BeginPaint
FillRect
DrawEdge
keybd_event
SetForegroundWindow
UpdateWindow
TranslateMessage
ReleaseDC
GetAsyncKeyState
SetCursor
EndPaint
RedrawWindow
MoveWindow
GetIconInfo
CreateIconIndirect
GetClientRect
InvalidateRect
ShowWindow
PostQuitMessage
DrawIconEx
SetRect
GetDC
GetWindowRect

gdi32

CreateSolidBrush
GetStockObject
PatBlt
CreateCompatibleBitmap
CreateCompatibleDC
SetTextAlign
SetLayout
LineTo
SetBkMode
StretchBlt
BitBlt
SetTextColor
CreatePenIndirect
SelectObject
MoveToEx
Polyline
DeleteObject
DeleteDC

advapi32

RegQueryValueA
RegCloseKey

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 538KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/autorun.inf
Adobe.Photoshop.CS6.u3.(RU-EN)/m0nkrus.nfo
Adobe.Photoshop.CS6.u3.(RU-EN)/unicows.dll
.dll windows:6 windows x86 arch:x86

785d5607ed2f18f4ea0be5809350b169

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:07:11:43:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/05/2002, 00:55

Not After

25/11/2003, 01:05

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

unicows.pdb

Imports

kernel32

GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDriveTypeA
GetDriveTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
FindClose
IsDBCSLeadByte
GetFullPathNameA
GetFullPathNameW
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetNamedPipeHandleStateA
GetNamedPipeHandleStateW
GetNumberFormatA
GetNumberFormatW
GetPrivateProfileIntA
GetPrivateProfileIntW
GetPrivateProfileSectionA
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionNamesW
GetPrivateProfileStringA
GetPrivateProfileStringW
GetPrivateProfileStructA
GetPrivateProfileStructW
GetProfileIntA
GetProfileIntW
GetProfileSectionA
GetProfileSectionW
GetProfileStringA
GetProfileStringW
GetShortPathNameA
GetShortPathNameW
GetStartupInfoA
GetStartupInfoW
GetStringTypeExA
GetStringTypeExW
GetSystemDirectoryA
GetSystemDirectoryW
GetTempFileNameW
GetTempPathW
GetTimeFormatA
GetTimeFormatW
GetVersionExA
GetVersionExW
GetVolumeInformationA
GetVolumeInformationW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAddAtomW
GlobalFindAtomA
GlobalFindAtomW
GlobalGetAtomNameA
GlobalGetAtomNameW
IsBadStringPtrW
IsValidCodePage
LCMapStringA
LCMapStringW
LoadLibraryW
LoadLibraryExW
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
MoveFileW
OpenEventA
OpenEventW
GetDefaultCommConfigW
OpenFileMappingW
OpenMutexA
OpenMutexW
OpenSemaphoreA
OpenSemaphoreW
OutputDebugStringA
OutputDebugStringW
PeekConsoleInputA
PeekConsoleInputW
QueryDosDeviceA
QueryDosDeviceW
ReadConsoleA
ReadConsoleW
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleOutputA
ReadConsoleOutputW
ReadConsoleOutputCharacterA
ReadConsoleOutputCharacterW
RemoveDirectoryA
RemoveDirectoryW
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SearchPathA
SearchPathW
SetComputerNameA
SetComputerNameW
SetConsoleTitleA
SetConsoleTitleW
SetCurrentDirectoryA
SetCurrentDirectoryW
SetDefaultCommConfigA
SetDefaultCommConfigW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetFileAttributesA
SetFileAttributesW
SetLocaleInfoA
SetLocaleInfoW
SetVolumeLabelA
SetVolumeLabelW
VerLanguageNameA
VerLanguageNameW
WaitNamedPipeA
WaitNamedPipeW
WriteConsoleA
WriteConsoleW
WriteConsoleInputA
WriteConsoleInputW
WriteConsoleOutputA
WriteConsoleOutputW
WriteConsoleOutputCharacterA
WriteConsoleOutputCharacterW
WritePrivateProfileSectionA
WritePrivateProfileSectionW
WritePrivateProfileStringA
WritePrivateProfileStringW
WritePrivateProfileStructA
WritePrivateProfileStructW
WriteProfileSectionA
WriteProfileSectionW
WriteProfileStringA
WriteProfileStringW
FindResourceA
lstrcpyA
IsBadWritePtr
SetErrorMode
GetStringTypeW
FindResourceW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetDefaultCommConfigA
GetDateFormatW
GetDateFormatA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrencyFormatW
GetCurrencyFormatA
GetConsoleTitleW
GetConsoleTitleA
GetComputerNameW
GetComputerNameA
GetAtomNameW
GetAtomNameA
FormatMessageW
FormatMessageA
LocalFree
HeapReAlloc
LocalAlloc
FreeEnvironmentStringsW
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindFirstChangeNotificationW
FindFirstChangeNotificationA
FindAtomW
FindAtomA
FillConsoleOutputCharacterW
FillConsoleOutputCharacterA
FatalAppExitW
FatalAppExitA
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
EnumTimeFormatsW
EnumTimeFormatsA
EnumSystemLocalesW
EnumSystemLocalesA
EnumSystemCodePagesW
EnumDateFormatsW
EnumDateFormatsA
EnumCalendarInfoW
EnumCalendarInfoA
DeleteFileW
CreateSemaphoreW
CreateSemaphoreA
CreateProcessW
CreateProcessA
CreateNamedPipeW
CreateNamedPipeA
CreateMutexW
CreateMutexA
CreateMailslotW
CreateMailslotA
CreateFileMappingW
CreateFileMappingA
CreateFileW
CreateEventW
CreateEventA
CreateDirectoryExW
CreateDirectoryExA
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
CompareStringW
CommConfigDialogW
CommConfigDialogA
CallNamedPipeW
CallNamedPipeA
BuildCommDCBAndTimeoutsW
BuildCommDCBAndTimeoutsA
BuildCommDCBW
BuildCommDCBA
AddAtomW
AddAtomA
InitializeCriticalSection
GetACP
GetOEMCP
DeleteCriticalSection
GetFileAttributesA
LoadLibraryExA
EnumResourceTypesW
EnumResourceNamesW
EnumResourceLanguagesW
lstrlenW
FindResourceExW
SizeofResource
LoadResource
LockResource
FreeResource
GetTempFileNameA
GetTempPathA
DeleteFileA
MoveFileA
_lclose
_lread
_lwrite
_llseek
VirtualQuery
GetSystemInfo
VirtualFree
VirtualAlloc
VirtualProtect
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
CompareStringA
GlobalAddAtomA
AreFileApisANSI
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
GetCurrentThreadId
lstrcmpA
WideCharToMultiByte
lstrcmpiA
GetLocaleInfoA
CreateFileA
GetFileSize
CloseHandle
IsDBCSLeadByteEx
LoadLibraryA
InterlockedExchange
FreeLibrary
GetModuleHandleA
GetProcAddress
GetCPInfo
GetVersion
GetFileAttributesW
GetLastError
lstrlenA
GetProcessHeap
HeapAlloc
SetLastError
MultiByteToWideChar
OpenFileMappingA
HeapFree
RtlUnwind

user32

SystemParametersInfoW
TranslateAcceleratorW
TabbedTextOutA
TabbedTextOutW
UnregisterClassA
UnregisterClassW
VkKeyScanExA
VkKeyScanExW
WinHelpA
WinHelpW
wvsprintfW
EnumClipboardFormats
GetClipboardData
VkKeyScanW
wsprintfW
IsCharLowerW
IsCharAlphaNumericW
IsCharAlphaW
InsertMenuItemW
InsertMenuItemA
InsertMenuW
InsertMenuA
GrayStringW
GrayStringA
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowTextW
GetWindowTextA
GetWindowLongW
GetTabbedTextExtentW
GetTabbedTextExtentA
GetPropW
GetMessageW
GetMenuStringW
GetMenuStringA
GetMenuItemInfoW
GetMenuItemInfoA
GetKeyNameTextW
GetKeyboardLayout
GetKeyNameTextA
GetKeyboardLayoutNameW
GetKeyboardLayoutNameA
GetDlgItemTextW
GetDlgItemTextA
GetClipboardFormatNameW
GetClipboardFormatNameA
GetClassNameW
GetClassLongW
GetClassLongA
GetClassInfoExW
GetClassInfoExA
GetClassInfoW
GetClassInfoA
FindWindowExW
FindWindowExA
FindWindowW
FindWindowA
EnableWindow
EnumPropsExW
EnumPropsExA
EnumPropsW
EnumPropsA
EnumDisplaySettingsW
EnumDisplaySettingsA
DrawTextExW
DrawTextExA
DrawTextW
DrawTextA
DrawStateW
DrawStateA
DlgDirSelectExW
DlgDirSelectExA
DlgDirSelectComboBoxExW
DlgDirSelectComboBoxExA
DlgDirListComboBoxW
DlgDirListComboBoxA
DlgDirListW
SystemParametersInfoA
DispatchMessageW
DialogBoxParamW
DialogBoxParamA
DialogBoxIndirectParamW
DialogBoxIndirectParamA
DefMDIChildProcW
DefFrameProcW
DefDlgProcW
DdeQueryStringW
DdeQueryStringA
DdeQueryConvInfo
DdeInitializeW
DdeInitializeA
DdeCreateStringHandleW
DdeCreateStringHandleA
DdeConnectList
DdeConnect
CharUpperBuffW
CharUpperW
CharToOemBuffW
CharToOemW
CharPrevW
CharNextW
CharLowerBuffW
CharLowerW
ChangeMenuW
SetWindowTextW
SetWindowTextA
SetWindowsHookExW
SetWindowsHookW
SetWindowsHookA
SetWindowLongW
SetPropW
SetMenuItemInfoW
SetMenuItemInfoA
SetDlgItemTextW
SetDlgItemTextA
SetClassLongW
SetClassLongA
SendNotifyMessageW
SendMessageTimeoutW
SendMessageCallbackW
SendMessageW
SendDlgItemMessageW
RemovePropW
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClipboardFormatA
RegisterClassExW
RegisterClassExA
RegisterClassW
RegisterClassA
PostThreadMessageW
PostMessageW
PeekMessageW
OemToCharBuffW
OemToCharW
ModifyMenuW
ModifyMenuA
MessageBoxIndirectW
MessageBoxIndirectA
MessageBoxExW
MessageBoxW
MapVirtualKeyExW
MapVirtualKeyExA
ChangeMenuA
ChangeDisplaySettingsW
ChangeDisplaySettingsA
CreateWindowExW
CreateWindowExA
CreateMDIWindowW
CreateMDIWindowA
CreateDialogParamW
CreateDialogParamA
CreateDialogIndirectParamW
CreateDialogIndirectParamA
CreateAcceleratorTableW
CreateAcceleratorTableA
CopyAcceleratorTableW
CopyAcceleratorTableA
CallWindowProcW
CallMsgFilterW
CallMsgFilterA
AppendMenuW
AppendMenuA
GetWindowThreadProcessId
SetWindowLongA
TranslateAcceleratorA
IsDialogMessageA
DispatchMessageA
PeekMessageA
GetMessageA
PostThreadMessageA
PostMessageA
SendNotifyMessageA
SendMessageTimeoutA
SendMessageCallbackA
SendMessageA
DefWindowProcA
CallWindowProcA
DefMDIChildProcA
DefFrameProcA
DefDlgProcA
GetWindowLongA
GetParent
GetDlgItem
SetPropA
RemovePropA
GetPropA
IsDlgButtonChecked
GetClassNameA
CharLowerA
CharUpperA
UnhookWindowsHookEx
SetWindowsHookExA
MapVirtualKeyW
CallNextHookEx
MapVirtualKeyA
LoadStringW
LoadMenuIndirectW
LoadMenuIndirectA
EnumChildWindows
RegisterWindowMessageA
LoadMenuW
LoadMenuA
LoadKeyboardLayoutW
LoadKeyboardLayoutA
LoadImageW
LoadImageA
LoadIconW
LoadIconA
LoadCursorFromFileW
LoadCursorFromFileA
LoadCursorW
LoadCursorA
LoadBitmapW
LoadBitmapA
LoadAcceleratorsW
LoadAcceleratorsA
IsWindowUnicode
IsWindow
IsDialogMessageW
DlgDirListA
IsClipboardFormatAvailable
IsCharUpperW

gdi32

GetEnhMetaFileDescriptionW
GetGlyphOutlineA
GetGlyphOutlineW
GetICMProfileA
GetICMProfileW
GetKerningPairsA
GetKerningPairsW
GetLogColorSpaceA
GetLogColorSpaceW
GetMetaFileA
GetMetaFileW
GetObjectA
GetObjectType
GetObjectW
GetOutlineTextMetricsA
GetOutlineTextMetricsW
GetTextExtentExPointA
GetTextExtentExPointW
GetTextExtentPointA
GetEnhMetaFileDescriptionA
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceA
GetTextFaceW
GetTextMetricsA
GetTextMetricsW
PolyTextOutA
PolyTextOutW
RemoveFontResourceA
RemoveFontResourceW
ResetDCA
ResetDCW
SetICMProfileA
SetICMProfileW
StartDocA
StartDocW
TextOutW
UpdateICMRegKeyA
UpdateICMRegKeyW
GetEnhMetaFileW
GetEnhMetaFileA
GetCharacterPlacementW
GetCharacterPlacementA
GetCharWidthFloatW
GetCharWidthFloatA
GetCharWidth32W
GetCharWidthW
GetCharWidthA
GetCharABCWidthsFloatW
GetCharABCWidthsFloatA
GetCharABCWidthsW
GetCharABCWidthsA
ExtTextOutW
ExtTextOutA
EnumICMProfilesW
EnumICMProfilesA
EnumFontsW
EnumFontsA
EnumFontFamiliesExW
EnumFontFamiliesExA
EnumFontFamiliesW
EnumFontFamiliesA
CreateScalableFontResourceW
CreateScalableFontResourceA
CreateMetaFileW
CreateMetaFileA
CreateICW
CreateICA
CreateFontIndirectW
CreateFontIndirectA
CreateFontW
CreateFontA
CreateEnhMetaFileW
CreateEnhMetaFileA
CreateDCW
CreateDCA
CreateColorSpaceW
CreateColorSpaceA
CopyMetaFileW
CopyMetaFileA
CopyEnhMetaFileW
CopyEnhMetaFileA
AddFontResourceW
AddFontResourceA
GetFontData
GetTextExtentPointW
TranslateCharsetInfo
GetTextCharset

mpr

WNetGetUniversalNameW
MultinetGetConnectionPerformanceW
WNetAddConnectionA
WNetAddConnectionW
WNetAddConnection2A
WNetAddConnection2W
WNetAddConnection3A
WNetAddConnection3W
WNetCancelConnectionA
WNetCancelConnectionW
WNetCancelConnection2A
WNetCancelConnection2W
WNetConnectionDialog1A
WNetConnectionDialog1W
WNetDisconnectDialog1A
WNetDisconnectDialog1W
WNetEnumResourceA
WNetEnumResourceW
WNetGetConnectionA
WNetGetConnectionW
WNetGetLastErrorA
WNetGetLastErrorW
WNetGetNetworkInformationA
WNetGetNetworkInformationW
WNetGetProviderNameA
WNetUseConnectionW
WNetUseConnectionA
WNetOpenEnumW
WNetOpenEnumA
WNetGetUserW
WNetGetUserA
MultinetGetConnectionPerformanceA
WNetGetUniversalNameA
WNetGetResourceParentW
WNetGetResourceParentA
WNetGetResourceInformationW
WNetGetResourceInformationA
WNetGetProviderNameW

advapi32

RegOpenKeyA
RegEnumValueA
RegUnLoadKeyW
RegUnLoadKeyA
RegSetValueExW
RegSetValueExA
RegSetValueW
RegSetValueA
RegSaveKeyW
RegSaveKeyA
RegReplaceKeyW
RegReplaceKeyA
RegQueryValueExW
RegQueryValueExA
RegQueryValueW
RegQueryValueA
RegQueryMultipleValuesW
RegQueryMultipleValuesA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyW
RegCloseKey
RegLoadKeyW
RegLoadKeyA
RegEnumValueW
RegEnumKeyExW
RegEnumKeyExA
RegEnumKeyW
RegEnumKeyA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCreateKeyW
RegCreateKeyA
RegConnectRegistryW
RegConnectRegistryA
IsTextUnicode
GetUserNameW
GetUserNameA
RegOpenKeyExA

comdlg32

GetOpenFileNameW
GetFileTitleW
GetFileTitleA
FindTextW
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA
ReplaceTextW
FindTextA
ReplaceTextA
GetOpenFileNameA
GetSaveFileNameA
PageSetupDlgA
PageSetupDlgW
PrintDlgA
PrintDlgW
GetSaveFileNameW

version

VerQueryValueW
VerQueryValueA
VerInstallFileW
VerInstallFileA
VerFindFileW
VerFindFileA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA

shell32

SHGetPathFromIDListA
ord180
ord179
SHGetFileInfoA
SHFileOperationA
SHChangeNotify
SHBrowseForFolderA
Shell_NotifyIconA
ShellExecuteExA
ShellExecuteW
ShellExecuteA
ShellAboutW
ShellAboutA
FindExecutableW
FindExecutableA
ExtractIconExA
DragQueryFileA
DragQueryFileW
ExtractIconW
ExtractIconA

winspool.drv

GetPrinterW
GetPrinterDataW
GetPrinterDriverW
GetPrinterDriverDirectoryA
GetPrinterDriverDirectoryW
GetPrintProcessorDirectoryA
GetPrintProcessorDirectoryW
GetJobW
OpenPrinterW
ResetPrinterA
ResetPrinterW
SetJobA
SetJobW
SetPrinterA
SetPrinterW
SetPrinterDataA
SetPrinterDataW
StartDocPrinterA
EnumPrintProcessorsW
EnumPrintProcessorDatatypesW
EnumPrintersW
EnumPrinterDriversW
EnumPortsW
EnumMonitorsW
DocumentPropertiesW
DocumentPropertiesA
DeviceCapabilitiesW
DeviceCapabilitiesA
DeletePrintProvidorW
DeletePrintProvidorA
DeletePrintProcessorW
DeletePrintProcessorA
DeletePrinterDriverW
DeletePrinterDriverA
DeletePortW
DeletePortA
DeleteMonitorW
DeleteMonitorA
ConfigurePortW
ConfigurePortA
AdvancedDocumentPropertiesW
AdvancedDocumentPropertiesA
AddPrintProvidorW
AddPrintProvidorA
AddPrintProcessorW
AddPrintProcessorA
AddPrinterDriverW
AddPrinterDriverA
AddPrinterW
AddPrinterA
AddPortW
AddPortA
AddMonitorW
AddMonitorA
AddJobW
AddJobA
OpenPrinterA
StartDocPrinterW

oledlg

OleUIUpdateLinksW
OleUIPromptUserW
OleUIPasteSpecialW
OleUIObjectPropertiesW
OleUIInsertObjectW
OleUIEditLinksW
OleUIConvertW
OleUIChangeSourceW
OleUIChangeIconW
OleUIBusyW
ord8
OleUIAddVerbMenuW
ord1
ord6

winmm

waveOutGetErrorTextW
waveOutGetErrorTextA
waveOutGetDevCapsW
waveOutGetDevCapsA
waveInGetErrorTextW
mixerGetControlDetailsW
midiOutGetErrorTextW
midiOutGetErrorTextA
midiOutGetDevCapsW
midiOutGetDevCapsA
midiInGetErrorTextW
midiInGetDevCapsW
midiInGetDevCapsA
mciSendStringW
mciSendStringA
mciSendCommandW
mciGetErrorStringW
mciGetErrorStringA
midiInGetErrorTextA
mciGetDeviceIDW
mciGetDeviceIDA
joyGetDevCapsW
joyGetDevCapsA
auxGetDevCapsW
auxGetDevCapsA
PlaySoundW
PlaySoundA
mixerGetDevCapsW
mixerGetLineControlsW
mixerGetLineInfoW
mmioInstallIOProcW
mmioOpenA
mmioOpenW
mmioRenameA
mmioRenameW
mmioStringToFOURCCA
mmioStringToFOURCCW
sndPlaySoundA
sndPlaySoundW
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetErrorTextA
mixerGetDevCapsA

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

msvfw32

MCIWndCreateW
MCIWndCreateA
GetSaveFileNamePreviewW
GetOpenFileNamePreviewW

imm32

ImmReleaseContext
ImmGetCompositionStringA
ImmGetContext
ImmGetCompositionStringW

Exports

Exports

AcquireCredentialsHandleW
AddAtomW
AddFontResourceW
AddJobW
AddMonitorW
AddPortW
AddPrintProcessorW
AddPrintProvidorW
AddPrinterDriverW
AddPrinterW
AdvancedDocumentPropertiesW
AppendMenuW
BeginUpdateResourceA
BeginUpdateResourceW
BroadcastSystemMessageW
BuildCommDCBAndTimeoutsW
BuildCommDCBW
CallMsgFilterW
CallNamedPipeW
CallWindowProcA
CallWindowProcW
ChangeDisplaySettingsExW
ChangeDisplaySettingsW
ChangeMenuW
CharLowerBuffW
CharLowerW
CharNextW
CharPrevW
CharToOemBuffW
CharToOemW
CharUpperBuffW
CharUpperW
ChooseColorW
ChooseFontW
CommConfigDialogW
CompareStringW
ConfigurePortW
CopyAcceleratorTableW
CopyEnhMetaFileW
CopyFileExW
CopyFileW
CopyMetaFileW
CreateAcceleratorTableW
CreateColorSpaceW
CreateDCW
CreateDialogIndirectParamW
CreateDialogParamW
CreateDirectoryExW
CreateDirectoryW
CreateEnhMetaFileW
CreateEventW
CreateFileMappingW
CreateFileW
CreateFontIndirectW
CreateFontW
CreateICW
CreateMDIWindowW
CreateMailslotW
CreateMetaFileW
CreateMutexW
CreateNamedPipeW
CreateProcessW
CreateScalableFontResourceW
CreateSemaphoreW
CreateStdAccessibleProxyW
CreateWaitableTimerW
CreateWindowExW
CryptAcquireContextW
CryptEnumProviderTypesW
CryptEnumProvidersW
CryptGetDefaultProviderW
CryptSetProviderExW
CryptSetProviderW
CryptSignHashW
CryptVerifySignatureW
DdeConnect
DdeConnectList
DdeCreateStringHandleW
DdeInitializeW
DdeQueryConvInfo
DdeQueryStringW
DefDlgProcW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DeleteFileW
DeleteMonitorW
DeletePortW
DeletePrintProcessorW
DeletePrintProvidorW
DeletePrinterDriverW
DeviceCapabilitiesW
DialogBoxIndirectParamW
DialogBoxParamW
DispatchMessageW
DlgDirListComboBoxW
DlgDirListW
DlgDirSelectComboBoxExW
DlgDirSelectExW
DocumentPropertiesW
DragQueryFileW
DrawStateW
DrawTextExW
DrawTextW
EnableWindow
EndUpdateResourceA
EndUpdateResourceW
EnumCalendarInfoExW
EnumCalendarInfoW
EnumClipboardFormats
EnumDateFormatsExW
EnumDateFormatsW
EnumDisplayDevicesW
EnumDisplaySettingsExW
EnumDisplaySettingsW
EnumFontFamiliesExW
EnumFontFamiliesW
EnumFontsW
EnumICMProfilesW
EnumMonitorsW
EnumPortsW
EnumPrintProcessorDatatypesW
EnumPrintProcessorsW
EnumPrinterDriversW
EnumPrintersW
EnumPropsA
EnumPropsExA
EnumPropsExW
EnumPropsW
EnumSystemCodePagesW
EnumSystemLocalesW
EnumTimeFormatsW
EnumerateSecurityPackagesW
ExpandEnvironmentStringsW
ExtTextOutW
ExtractIconExW
ExtractIconW
FatalAppExitW
FillConsoleOutputCharacterW
FindAtomW
FindExecutableW
FindFirstChangeNotificationW
FindFirstFileW
FindNextFileW
FindResourceExW
FindResourceW
FindTextW
FindWindowExW
FindWindowW
FormatMessageW
FreeContextBuffer
FreeEnvironmentStringsW
GetAltTabInfoW
GetAtomNameW
GetCPInfo
GetCPInfoExW
GetCalendarInfoW
GetCharABCWidthsFloatW
GetCharABCWidthsW
GetCharWidth32W
GetCharWidthFloatW
GetCharWidthW
GetCharacterPlacementW
GetClassInfoExW
GetClassInfoW
GetClassLongW
GetClassNameW
GetClipboardData
GetClipboardFormatNameW
GetComputerNameW
GetConsoleTitleW
GetCurrencyFormatW
GetCurrentDirectoryW
GetCurrentHwProfileW
GetDateFormatW
GetDefaultCommConfigW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDlgItemTextW
GetDriveTypeW
GetEnhMetaFileDescriptionW
GetEnhMetaFileW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesExW
GetFileAttributesW
GetFileTitleW
GetFileVersionInfoSizeW
GetFileVersionInfoW
GetFullPathNameW
GetGlyphOutlineW
GetICMProfileW
GetJobW
GetKerningPairsW
GetKeyNameTextW
GetKeyboardLayoutNameW
GetLocaleInfoW
GetLogColorSpaceW
GetLogicalDriveStringsW
GetLongPathNameW
GetMenuItemInfoW
GetMenuStringW
GetMessageW
GetMetaFileW
GetModuleFileNameW
GetModuleHandleW
GetMonitorInfoW
GetNamedPipeHandleStateW
GetNumberFormatW
GetObjectW
GetOpenFileNamePreviewW
GetOpenFileNameW
GetOutlineTextMetricsW
GetPrintProcessorDirectoryW
GetPrinterDataW
GetPrinterDriverDirectoryW
GetPrinterDriverW
GetPrinterW
GetPrivateProfileIntW
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetPrivateProfileStructW
GetProcAddress
GetProfileIntW
GetProfileSectionW
GetProfileStringW
GetPropA
GetPropW
GetRoleTextW
GetSaveFileNamePreviewW
GetSaveFileNameW
GetShortPathNameW
GetStartupInfoW
GetStateTextW
GetStringTypeExW
GetStringTypeW
GetSystemDirectoryW
GetSystemWindowsDirectoryW
GetTabbedTextExtentW
GetTempFileNameW
GetTempPathW
GetTextExtentExPointW
GetTextExtentPoint32W
GetTextExtentPointW
GetTextFaceW
GetTextMetricsW
GetTimeFormatW
GetUserNameW
GetVersionExW
GetVolumeInformationW
GetWindowLongA
GetWindowLongW
GetWindowModuleFileNameW
GetWindowTextLengthW
GetWindowTextW
GetWindowsDirectoryW
GlobalAddAtomW
GlobalFindAtomW
GlobalGetAtomNameW
GrayStringW
InitSecurityInterfaceW
InitializeSecurityContextW
InsertMenuItemW
InsertMenuW
IsBadStringPtrW
IsCharAlphaNumericW
IsCharAlphaW
IsCharLowerW
IsCharUpperW
IsClipboardFormatAvailable
IsDestinationReachableW
IsDialogMessageW
IsTextUnicode
IsValidCodePage
IsWindowUnicode
LCMapStringW
LoadAcceleratorsW
LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
LoadKeyboardLayoutW
LoadLibraryExW
LoadLibraryW
LoadMenuIndirectW
LoadMenuW
LoadStringW
MCIWndCreateW
MapVirtualKeyExW
MapVirtualKeyW
MessageBoxExW
MessageBoxIndirectW
MessageBoxW
ModifyMenuW
MoveFileW
MultiByteToWideChar
MultinetGetConnectionPerformanceW
OemToCharBuffW
OemToCharW
OleUIAddVerbMenuW
OleUIBusyW
OleUIChangeIconW
OleUIChangeSourceW
OleUIConvertW
OleUIEditLinksW
OleUIInsertObjectW
OleUIObjectPropertiesW
OleUIPasteSpecialW
OleUIPromptUserW
OleUIUpdateLinksW
OpenEventW
OpenFileMappingW
OpenMutexW
OpenPrinterW
OpenSemaphoreW
OpenWaitableTimerW
OutputDebugStringW
PageSetupDlgW
PeekConsoleInputW
PeekMessageW
PlaySoundW
PolyTextOutW
PostMessageW
PostThreadMessageW
PrintDlgW
QueryContextAttributesW
QueryCredentialsAttributesW
QueryDosDeviceW
QuerySecurityPackageInfoW
RasConnectionNotificationW
RasCreatePhonebookEntryW
RasDeleteEntryW
RasDeleteSubEntryW
RasDialW
RasEditPhonebookEntryW
RasEnumConnectionsW
RasEnumDevicesW
RasEnumEntriesW
RasGetConnectStatusW
RasGetEntryDialParamsW
RasGetEntryPropertiesW
RasGetErrorStringW
RasGetProjectionInfoW
RasHangUpW
RasRenameEntryW
RasSetEntryDialParamsW
RasSetEntryPropertiesW
RasSetSubEntryPropertiesW
RasValidateEntryNameW
ReadConsoleInputW
ReadConsoleOutputCharacterW
ReadConsoleOutputW
ReadConsoleW
RegConnectRegistryW
RegCreateKeyExW
RegCreateKeyW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegEnumValueW
RegLoadKeyW
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryMultipleValuesW
RegQueryValueExW
RegQueryValueW
RegReplaceKeyW
RegSaveKeyW
RegSetValueExW
RegSetValueW
RegUnLoadKeyW
RegisterClassExW
RegisterClassW
RegisterClipboardFormatW
RegisterDeviceNotificationW
RegisterWindowMessageW
RemoveDirectoryW
RemoveFontResourceW
RemovePropA
RemovePropW
ReplaceTextW
ResetDCW
ResetPrinterW
SHBrowseForFolderW
SHChangeNotify
SHFileOperationW
SHGetFileInfoW
SHGetNewLinkInfoW
SHGetPathFromIDListW
ScrollConsoleScreenBufferW
SearchPathW
SendDlgItemMessageW
SendMessageCallbackW
SendMessageTimeoutW
SendMessageW
SendNotifyMessageW
SetCalendarInfoW
SetClassLongW
SetComputerNameW
SetConsoleTitleW
SetCurrentDirectoryW
SetDefaultCommConfigW
SetDlgItemTextW
SetEnvironmentVariableW
SetFileAttributesW
SetICMProfileW
SetJobW
SetLocaleInfoW
SetMenuItemInfoW
SetPrinterDataW
SetPrinterW
SetPropA
SetPropW
SetVolumeLabelW
SetWindowLongA
SetWindowLongW
SetWindowTextW
SetWindowsHookExW
SetWindowsHookW
ShellAboutW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
StartDocPrinterW
StartDocW
SystemParametersInfoW
TabbedTextOutW
TextOutW
TranslateAcceleratorW
UnregisterClassW
UpdateICMRegKeyW
UpdateResourceA
UpdateResourceW
VerFindFileW
VerInstallFileW
VerLanguageNameW
VerQueryValueW
VkKeyScanExW
VkKeyScanW
WNetAddConnection2W
WNetAddConnection3W
WNetAddConnectionW
WNetCancelConnection2W
WNetCancelConnectionW
WNetConnectionDialog1W
WNetDisconnectDialog1W
WNetEnumResourceW
WNetGetConnectionW
WNetGetLastErrorW
WNetGetNetworkInformationW
WNetGetProviderNameW
WNetGetResourceInformationW
WNetGetResourceParentW
WNetGetUniversalNameW
WNetGetUserW
WNetOpenEnumW
WNetUseConnectionW
WaitNamedPipeW
WideCharToMultiByte
WinHelpW
WriteConsoleInputW
WriteConsoleOutputCharacterW
WriteConsoleOutputW
WriteConsoleW
WritePrivateProfileSectionW
WritePrivateProfileStringW
WritePrivateProfileStructW
WriteProfileSectionW
WriteProfileStringW
__FreeAllLibrariesInMsluDll
auxGetDevCapsW
capCreateCaptureWindowW
capGetDriverDescriptionW
joyGetDevCapsW
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
mciGetDeviceIDW
mciGetErrorStringW
mciSendCommandW
mciSendStringW
midiInGetDevCapsW
midiInGetErrorTextW
midiOutGetDevCapsW
midiOutGetErrorTextW
mixerGetControlDetailsW
mixerGetDevCapsW
mixerGetLineControlsW
mixerGetLineInfoW
mmioInstallIOProcW
mmioOpenW
mmioRenameW
mmioStringToFOURCCW

Sections

.text
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe.Photoshop.CS6.u3.(RU-EN)/Инструкции по установке.pdf
.pdf
Adobe.Photoshop.CS6.u3.(RU-EN)/Руководство пользователя.pdf
.pdf

Sharing

General

Malware Config

Signatures

Files

59177801543f310d6d745297c6d1219d

Code Sign

02:3a:64Certificate

Extended Key Usages

Key Usages

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:baCertificate

Extended Key Usages

Key Usages

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fdCertificate

Extended Key Usages

Key Usages

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2bCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

02:0e:6d:11:17:db:f1:5b:3d:9a:2c:d0:4a:ed:ab:45:5f:4b:24:c5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

kernel32

user32

advapi32

ole32

shell32

oleaut32

shlwapi

gdi32

msimg32

comdlg32

winspool.drv

oledlg

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 327KB - Virtual size: 326KB

.data Size: 28KB - Virtual size: 58KB

.rsrc Size: 53KB - Virtual size: 52KB

.reloc Size: 177KB - Virtual size: 176KB

df98a66831cae0ae4638a5db5fc98a1f

Code Sign

02:3a:64Certificate

Extended Key Usages

Key Usages

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:baCertificate

Extended Key Usages

Key Usages

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fdCertificate

Extended Key Usages

Key Usages

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2bCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

45:25:ea:a0:97:ff:09:fc:99:f8:43:a4:e0:54:62:0d:aa:17:f3:7bSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shell32

shlwapi

winhttp

advapi32

user32

ole32

02:3a:64
Certificate

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

02:0e:6d:11:17:db:f1:5b:3d:9a:2c:d0:4a:ed:ab:45:5f:4b:24:c5
Signer

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 327KB - Virtual size: 326KB

.data
Size: 28KB - Virtual size: 58KB

.rsrc
Size: 53KB - Virtual size: 52KB

.reloc
Size: 177KB - Virtual size: 176KB

02:3a:64
Certificate

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

45:25:ea:a0:97:ff:09:fc:99:f8:43:a4:e0:54:62:0d:aa:17:f3:7b
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 264KB - Virtual size: 264KB

.data
Size: 23KB - Virtual size: 38KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 98KB - Virtual size: 98KB

02:3a:64
Certificate

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

d7:34:9d:1f:29:64:bb:29:82:20:11:61:5d:cb:c2:04:43:4c:2d:25
Signer

.text
Size: 216KB - Virtual size: 216KB

.rdata
Size: 57KB - Virtual size: 57KB

.data
Size: 8KB - Virtual size: 20KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 64KB - Virtual size: 63KB

02:3a:64
Certificate

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

68:0f:63:2d:f0:9c:0a:79:d1:0c:fb:c3:66:04:cd:2b
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

83:10:c8:28:48:0a:f5:04:e6:15:4e:f2:c2:80:1b:75:72:48:98:55
Signer