IDAXInstall 5[.]3[.]47[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

IDAXInstall 5.3.47.exe
Size

59.2MB
MD5

a06b5e6e9a0be7d13be32cbb276d6a03
SHA1

33fd8bee9f6f4ffd257d2140306786aae7acccfe
SHA256

03dbcdf2dcd2052996eeb014a81765500252d63e63d442f558cef8327f7efd92
SHA512

b282af17d24b811da1e4e3ff60c869aa0c092230fee09ba4efb928a217639d485634cb2d050233fb24939357c5ee0727f0a9d3a739cb1d62bd4547d35e52f2f5
SSDEEP

1572864:5ZHQpdNa30a1v0FwN01eWhCYHusl6lP/tpzhiMjr7fN2ad:5tp00MwN01eiHuZzAMjr7Aad

Score

3^/10

Malware Config

Signatures

Unsigned PE 41 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/Dialer.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/Internet.dll
unpack001/$PLUGINSDIR/Registry.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UserInfo.dll
unpack001/Drivers/USBDriverUpdate.exe
unpack001/EasyModbus.dll
unpack001/Gettext.Cs.dll
unpack001/Graph.dll
unpack001/GraphClr.dll
unpack001/HtmlHelp.dll
unpack001/HtmlHelpViewer.dll
unpack001/Idax.Communication.dll
unpack001/Idax.Controls.dll
unpack001/Idax.Math.dll
unpack001/Idax.Oscilloscope.dll
unpack001/Idax.Parser.dll
unpack001/Idax.Popup.dll
unpack001/Idax300.DataTypes.dll
unpack001/IdaxMaintenance.exe
unpack001/IdaxMeasure.dll
unpack001/InputSimulator.dll
unpack001/Ionic.Zip.Reduced.dll
unpack001/MODSClr.dll
unpack001/MODSLibrary.dll
unpack001/Microsoft.Deployment.Compression.Cab.dll
unpack001/Microsoft.Deployment.Compression.dll
unpack001/MixCommon.dll
unpack001/MixFirmware.dll
unpack001/MixHardware.dll
unpack001/NetSparkle.dll
unpack001/Newtonsoft.Json.dll
unpack001/Pax.Settings.dll
unpack001/ReportGen.dll
unpack001/ReportGenerator.dll
unpack001/SourceGrid.dll
unpack001/TestObjectDesigner.exe
unpack001/TuesPechkin.dll
unpack001/WinSparkle.dll
unpack001/wkhtmltox.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

IDAXInstall 5.3.47.exe
.exe windows:4 windows x86 arch:x86

e9c0657252137ac61c1eeeba4c021000

Code Sign

69:46:b6:da:b1:23:70:d9:ed:ce:80:15:7f:b1:94:34
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

09/09/2022, 00:00

Not After

08/09/2025, 23:59

Subject

SERIALNUMBER=556195-1368,CN=Megger Sweden AB,O=Megger Sweden AB,ST=Stockholms län,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c5:c9:8b:f4:65:5f:28:ab:98:f7:60:fa:96:1c:a1:99:48:9b:ba:01:dc:ff:e8:f5:ea:0a:96:0f:cc:20:7a:2b
Signer

Actual PE Digest

c5:c9:8b:f4:65:5f:28:ab:98:f7:60:fa:96:1c:a1:99:48:9b:ba:01:dc:ff:e8:f5:ea:0a:96:0f:cc:20:7a:2b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetEnvironmentVariableA
Sleep
GetTickCount
GetCommandLineA
lstrlenA
GetVersion
SetErrorMode
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GetWindowsDirectoryA
SetFileAttributesA
GetLastError
CreateDirectoryA
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
ReadFile
WriteFile
lstrcpyA
MoveFileExA
lstrcatA
GetSystemDirectoryA
GetProcAddress
GetExitCodeProcess
WaitForSingleObject
CompareFileTime
SetFileTime
GetFileAttributesA
SetCurrentDirectoryA
MoveFileA
GetFullPathNameA
GetShortPathNameA
SearchPathA
CloseHandle
lstrcmpiA
CreateThread
GlobalLock
lstrcmpA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
SetFilePointer
GetPrivateProfileStringA
WritePrivateProfileStringA
MulDiv
MultiByteToWideChar
FreeLibrary
LoadLibraryExA
GetModuleHandleA
GlobalAlloc
GlobalFree
ExpandEnvironmentStringsA

user32

GetSystemMenu
SetClassLongA
EnableMenuItem
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetWindowRect
GetDlgItem
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
EndDialog
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
LoadImageA
CreateDialogParamA
SetTimer
SetWindowTextA
SetForegroundWindow
ShowWindow
SetWindowLongA
SendMessageTimeoutA
FindWindowExA
IsWindow
AppendMenuA
TrackPopupMenu
CreatePopupMenu
DrawTextA
EndPaint
DestroyWindow
wsprintfA
PostQuitMessage

gdi32

SelectObject
SetTextColor
SetBkMode
CreateFontIndirectA
CreateBrushIndirect
DeleteObject
GetDeviceCaps
SetBkColor

shell32

SHGetSpecialFolderLocation
ShellExecuteExA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHFileOperationA

advapi32

AdjustTokenPrivileges
RegCreateKeyExA
RegOpenKeyExA
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueA
RegEnumValueA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegEnumKeyA

comctl32

ImageList_Create
ImageList_AddMasked
ord17
ImageList_Destroy

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/IDAX5/Megger Training room T1 2012-12-21 12.02.idax
.xml
$PLUGINSDIR/50or60Hz.ini
$PLUGINSDIR/Dialer.dll
.dll windows:4 windows x86 arch:x86

1f1fddd20def884fc86e064d8f2333ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GetSystemDirectoryA
GetProcAddress
lstrcpynA
LoadLibraryA

user32

wsprintfA

Exports

Exports

AttemptConnect
AutodialHangup
AutodialOnline
AutodialUnattended
GetConnectedState

Sections

.text
Size: 1024B - Virtual size: 625B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 439B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

610235b90207a63ccf481f0d4375d329

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileStringA
SetCurrentDirectoryA
GetModuleHandleA
lstrcmpiA
WritePrivateProfileStringA
lstrcatA
lstrcpynA
GlobalFree
lstrlenA
lstrcpyA
GlobalUnlock
GlobalAlloc
GlobalLock

user32

MapWindowPoints
PtInRect
CloseClipboard
LoadCursorA
GetDlgCtrlID
OpenClipboard
GetClientRect
SetWindowRgn
DrawFocusRect
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
DrawTextA
SetCursor
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
CallWindowProcA
PostMessageA
MessageBoxA
GetSysColor
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetWindowLongA
EnableMenuItem
GetSystemMenu
GetClipboardData
LoadIconA

gdi32

DeleteObject
CombineRgn
SetTextColor
GetDIBits
SelectObject
CreateRectRgn
GetObjectA
CreateCompatibleDC

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
SHGetDesktopFolder

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/Internet.dll
.dll windows:4 windows x86 arch:x86

04281f88c3d826e409dc7c24629e7efc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
GlobalFree

user32

wsprintfA

wsock32

inet_addr
gethostname
gethostbyname
WSACleanup
WSAStartup

wininet

InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA

Exports

Exports

GetLocalHostIP
GetLocalHostName
GetUrlCode
Ver

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/Registry.dll
.dll windows:4 windows x86 arch:x86

421a02aae559045e04759aae146087eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateProcessA
CreateProcessW
GlobalAlloc
SearchPathA
SearchPathW
GetFileAttributesA
GetFileAttributesW
CreateFileA
CreateFileW
WriteFile
WideCharToMultiByte
GetWindowsDirectoryW
lstrlenA
lstrlenW
MultiByteToWideChar
GlobalFree

user32

FindWindowExA
SetWindowTextA
SetWindowTextW
MessageBoxW
GetDlgItem

advapi32

RegQueryValueExA
RegQueryValueExW
RegOpenKeyExA
RegOpenKeyExW
RegCreateKeyExA
RegCreateKeyExW
RegEnumValueA
RegEnumValueW
RegEnumKeyExA
RegEnumKeyExW
RegCloseKey
RegSetValueExA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegSetValueExW

Exports

Exports

_Close
_CopyKey
_CopyValue
_CreateKey
_DeleteKey
_DeleteKeyEmpty
_DeleteValue
_Find
_HexToStrA
_HexToStrW
_KeyExists
_MoveKey
_MoveValue
_Open
_Read
_ReadExtra
_RestoreKey
_SaveKey
_StrToHexA
_StrToHexW
_Unload
_Write
_WriteExtra

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

8c8a576201f68de1a3f26fc723b9f30f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
GlobalFree
GlobalSize
lstrcpynA
lstrcpyA
GetProcAddress
VirtualFree
FreeLibrary
lstrlenA
LoadLibraryA
GetModuleHandleA
GlobalAlloc
WideCharToMultiByte
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/UserInfo.dll
.dll windows:4 windows x86 arch:x86

cce05dea98cbac3a9d486b233588f528

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersion
GetCurrentProcess
GlobalAlloc
GetCurrentThread
GetModuleHandleA
GetProcAddress
GetLastError
GlobalFree
CloseHandle
lstrcpynA

advapi32

OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
GetUserNameA

Exports

Exports

GetAccountType
GetName
GetOriginalAccountType

Sections

.text
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 705B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/demo.bmp
$PLUGINSDIR/dual.bmp
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/language.ini
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/shortcuts.ini
$PLUGINSDIR/single.bmp
$PLUGINSDIR/testLeads.ini
$R0/firmware.bin
.zip
0.xml
.xml
idax.txt
index.xml
system.exo
$TEMP/dotNetFx40_Full_setup.exe
.exe windows:5 windows x86 arch:x86

02483cd76378259a50b7b66146b45f06

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d6:d5:21:44:87:a4:87:f6:84:c8:27:2e:90:f4:8d:98:d2:12:c9:41
Signer

Actual PE Digest

d6:d5:21:44:87:a4:87:f6:84:c8:27:2e:90:f4:8d:98:d2:12:c9:41

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

boxstub.pdb

Imports

advapi32

CryptGenRandom
CryptReleaseContext
DecryptFileW
CryptAcquireContextA

kernel32

Sleep
WaitForSingleObject
GetExitCodeProcess
CloseHandle
SetFileAttributesW
InitializeCriticalSection
CreateEventA
CreateThread
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetCommandLineW
CreateProcessW
CompareStringW
LocalFree
QueryDosDeviceW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
GetDriveTypeW
CreateFileW
DeviceIoControl
SetErrorMode
CreateDirectoryW
RemoveDirectoryW
MoveFileExW
LoadLibraryW
GetProcAddress
GetSystemDirectoryW
GetVersion
GetLastError
SetEnvironmentVariableW
ExitThread
GetTickCount
GetEnvironmentVariableW
GetModuleHandleW
lstrlenW
WaitForMultipleObjects
ResetEvent
GetSystemInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetEndOfFile
DuplicateHandle
ReadFile
SetFilePointerEx
GlobalFree
GlobalAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
LCMapStringW
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetStringTypeW
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileA
GetLocalTime
GetComputerNameW
lstrlenA
FormatMessageW
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
DeleteFileW
GetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentDirectoryW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
GetProcessHeap
RaiseException

comctl32

ord17

rpcrt4

UuidToStringW
RpcStringFreeW
UuidCreate

shell32

CommandLineToArgvW
SHBrowseForFolderW
SHGetPathFromIDListW

shlwapi

PathRemoveExtensionW

user32

MessageBoxW
GetTopWindow
GetWindowThreadProcessId
GetWindow
SendMessageA
PostMessageW
SendMessageW
DialogBoxParamA
GetDlgItem
SetWindowTextW
EndDialog
PostQuitMessage
DialogBoxParamW
SetWindowLongW
GetWindowLongW
LoadStringW
CharUpperW

cabinet

ord22
ord23
ord20

oleaut32

SysAllocString
VariantClear

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Exports

Exports

?dwPlaceholder@@3PAEA
_DecodePointerInternal@4
_EncodePointerInternal@4

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boxld01
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Cellulose.mpf
ConvertRules.xml
.xml
Coolant1s.xml
.xml
Coolants.xml
.xml
Drivers/DPInst32.exe
.exe windows:6 windows x86 arch:x86

0bbb04de18f86a2d1ac8d1d580c5be48

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

11/10/2005, 21:55

Not After

26/04/2010, 07:00

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:10:c3:52:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/10/2005, 23:24

Not After

11/01/2007, 23:34

Subject

CN=Microsoft Windows Component Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b5:3c:25:6a:47:ff:f8:34:a3:0f:d0:7e:68:b8:45:4a:55:63:bd:08
Signer

Actual PE Digest

b5:3c:25:6a:47:ff:f8:34:a3:0f:d0:7e:68:b8:45:4a:55:63:bd:08

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DpInst.pdb

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
IsTextUnicode
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetEntriesInAclW
DeleteService
StartServiceW
ControlService
OpenSCManagerW
CloseServiceHandle
OpenServiceW
QueryServiceStatus
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
CheckTokenMembership

kernel32

DeleteFileW
ReleaseMutex
SetFilePointer
HeapFree
GetProcessHeap
HeapAlloc
CreateMutexW
FreeLibrary
FreeConsole
SetConsoleCursorPosition
GetFileAttributesW
ReadConsoleOutputW
UnmapViewOfFile
SetConsoleMode
GetConsoleMode
GetStdHandle
GetProcAddress
LoadLibraryW
WriteConsoleOutputW
WriteConsoleW
IsValidLocale
lstrcmpW
lstrlenW
lstrcmpiW
GetTempFileNameW
FindFirstFileW
FindNextFileW
FindClose
CopyFileW
SetFileAttributesW
FormatMessageW
RaiseException
GetFileSize
CreateFileMappingW
FillConsoleOutputCharacterW
MapViewOfFile
CreateThread
Sleep
InterlockedDecrement
InterlockedIncrement
WriteFile
CreateFileW
GetConsoleScreenBufferInfo
WaitForMultipleObjects
InterlockedCompareExchange
SetEvent
CreateEventW
LocalReAlloc
DeviceIoControl
GetExitCodeProcess
VerSetConditionMask
VerifyVersionInfoW
CreateDirectoryW
RemoveDirectoryW
GetCurrentDirectoryW
GetShortPathNameW
GetFullPathNameW
GetSystemWindowsDirectoryW
MoveFileExW
SearchPathW
GetSystemDefaultUILanguage
LoadLibraryExW
CreateFileA
GetLocaleInfoW
SetEndOfFile
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetConsoleCP
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
ReadFile
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetThreadLocale
SetThreadLocale
GetUserDefaultUILanguage
GetVersionExW
GetLocalTime
GetWindowsDirectoryW
SetCurrentDirectoryW
GetStringTypeA
WaitForSingleObject
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
OutputDebugStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameW
GetModuleFileNameA
ExitProcess
GetModuleHandleA
SetUnhandledExceptionFilter
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualAlloc
VirtualProtect
GetStartupInfoW
GetEnvironmentVariableW
CompareStringW
WideCharToMultiByte
InterlockedExchange
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCommandLineW
LocalAlloc
GlobalFree
LocalFree
MultiByteToWideChar
GetCurrentProcess
GetLastError
CloseHandle
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
EnumResourceLanguagesW
GetSystemDirectoryW

gdi32

SetLayout
DeleteDC
GetObjectW
CreateCompatibleBitmap
CreateBitmap
SelectObject
StartPage
EndPage
StartDocW
EndDoc
GetTextMetricsW
GetDeviceCaps
CreateFontIndirectW
DeleteObject
CreateCompatibleDC

user32

AllowSetForegroundWindow
ShowWindow
CreateWindowExW
DefWindowProcW
PostQuitMessage
GetUserObjectInformationW
GetProcessWindowStation
GetIconInfo
DrawIconEx
CreateIconIndirect
LoadIconW
LoadBitmapW
DrawTextExW
LoadImageW
GetSystemMetrics
GetSysColor
DestroyWindow
GetWindowLongW
SendDlgItemMessageW
InvalidateRect
SetWindowTextW
SystemParametersInfoW
GetDC
ReleaseDC
SetWindowLongW
SetDlgItemTextW
GetParent
PostMessageW
IsDlgButtonChecked
CheckDlgButton
SetFocus
CallWindowProcW
DestroyIcon
DialogBoxParamW
GetDlgItem
SendMessageW
MessageBoxW
RegisterClassExW
UnregisterClassA
CharLowerW
CharPrevW
EndDialog

ntdll

NtOpenProcessToken
RtlNtStatusToDosError
NtQueryInformationToken
RtlUnwind
NtClose
NtOpenThreadToken

shell32

SHGetFolderPathW
ShellExecuteExW
ord59
CommandLineToArgvW

setupapi

SetupDiOpenClassRegKey
SetupInstallFilesFromInfSectionW
SetupPromptReboot
SetupInstallFromInfSectionW
SetupInstallServicesFromInfSectionW
SetupDiGetActualSectionToInstallW
SetupFindNextLine
SetupFindNextMatchLineW
SetupOpenInfFileW
SetupGetLineCountW
SetupCloseInfFile
SetupFindFirstLineW
SetupGetStringFieldW
pSetupSetGlobalFlags
pSetupGetGlobalFlags
SetupGetFieldCount
SetupGetIntField
SetupOpenAppendInfFileW
SetupDiSetClassInstallParamsW
SetupDiGetClassDevsW
SetupDiGetSelectedDriverW
SetupDiGetDriverInfoDetailW
SetupDiCreateDeviceInfoList
SetupDiClassNameFromGuidW
SetupDiGetDeviceInstanceIdW
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
SetupDiSetDeviceRegistryPropertyW
SetupDiOpenDeviceInfoW
SetupDiSetSelectedDevice
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiGetDeviceRegistryPropertyW
SetupGetTargetPathW
SetupQueueCopyIndirectW
SetupQueueCopyW
SetupOpenFileQueue
SetupInitDefaultQueueCallbackEx
SetupDefaultQueueCallbackW
SetupCommitFileQueueW
SetupTermDefaultQueueCallback
SetupCloseFileQueue
SetupCopyOEMInfW
CM_Enumerate_Classes
CM_Locate_DevNodeW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
CM_Get_Device_IDW
CMP_WaitNoPendingInstallEvents
CM_Setup_DevNode
SetupDiDestroyDeviceInfoList
CM_Query_And_Remove_SubTreeW

wintrust

CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust

ole32

CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
StringFromCLSID

oleaut32

VariantInit
VariantClear
VariantChangeType
SysAllocString
SysFreeString

comctl32

ImageList_ReplaceIcon
CreatePropertySheetPageW
ImageList_Create
ImageList_SetBkColor
PropertySheetW

comdlg32

GetSaveFileNameW
PrintDlgExW

crypt32

CertGetCTLContextProperty
CertFreeCTLContext
CryptQueryObject
CertFreeCertificateContext

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 391KB - Virtual size: 390KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/DPInst64.exe
.exe windows:6 windows x64 arch:x64

4584aed10fdc1d558a53d7cc2371df14

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

11/10/2005, 21:55

Not After

26/04/2010, 07:00

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:10:c3:52:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/10/2005, 23:24

Not After

11/01/2007, 23:34

Subject

CN=Microsoft Windows Component Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

89:33:8d:36:ef:11:03:b8:62:ee:1a:e6:a7:80:0b:58:5e:c0:9f:ca
Signer

Actual PE Digest

89:33:8d:36:ef:11:03:b8:62:ee:1a:e6:a7:80:0b:58:5e:c0:9f:ca

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

DpInst.pdb

Imports

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
IsTextUnicode
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetEntriesInAclW
OpenServiceW
OpenSCManagerW
QueryServiceStatus
DeleteService
CloseServiceHandle
ControlService
StartServiceW
RegDeleteValueW
CheckTokenMembership
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW

kernel32

SetFilePointer
HeapAlloc
GetProcessHeap
HeapFree
CreateMutexW
GetConsoleMode
SetConsoleMode
GetConsoleScreenBufferInfo
ReadConsoleOutputW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
ReleaseMutex
FreeLibrary
WriteConsoleOutputW
WriteConsoleW
LoadLibraryW
GetProcAddress
GetStdHandle
IsValidLocale
VirtualProtect
Sleep
GetFileAttributesW
DeleteFileW
FindClose
FindNextFileW
RaiseException
lstrcmpiW
lstrcmpW
FindFirstFileW
CopyFileW
lstrlenW
SetFileAttributesW
FormatMessageW
GetTempFileNameW
MapViewOfFile
FreeConsole
CreateFileMappingW
GetFileSize
WaitForMultipleObjects
CreateEventW
SetEvent
SetEndOfFile
LocalReAlloc
DeviceIoControl
GetSystemDirectoryW
VerifyVersionInfoW
VerSetConditionMask
GetShortPathNameW
RemoveDirectoryW
MoveFileExW
CreateDirectoryW
GetModuleFileNameW
GetFullPathNameW
GetCurrentDirectoryW
GetSystemWindowsDirectoryW
GetSystemDefaultUILanguage
SearchPathW
SetLastError
GetLocaleInfoW
LoadLibraryExW
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
OutputDebugStringA
GetStartupInfoW
GetEnvironmentVariableW
CompareStringW
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapSize
HeapReAlloc
HeapDestroy
CreateThread
SetThreadLocale
GetThreadLocale
WriteFile
CreateFileW
LocalFree
FindResourceW
GlobalFree
SetCurrentDirectoryW
LocalAlloc
GetUserDefaultUILanguage
EnumResourceLanguagesW
GetCurrentProcess
GetLastError
MultiByteToWideChar
GetVersionExW
GetCommandLineW
CloseHandle
GetLocalTime
FindResourceExW
GetExitCodeProcess
WaitForSingleObject
LoadResource
LockResource
SizeofResource
GetWindowsDirectoryW
UnmapViewOfFile

gdi32

SelectObject
CreateBitmap
CreateCompatibleBitmap
GetObjectW
DeleteDC
SetLayout
CreateCompatibleDC
EndPage
StartPage
EndDoc
StartDocW
GetTextMetricsW
CreateFontIndirectW
DeleteObject
GetDeviceCaps

user32

MessageBoxW
CreateIconIndirect
DrawIconEx
GetIconInfo
LoadIconW
LoadBitmapW
PostQuitMessage
SendMessageW
CharPrevW
CharLowerW
UnregisterClassA
DefWindowProcW
EndDialog
RegisterClassExW
CreateWindowExW
ShowWindow
AllowSetForegroundWindow
DialogBoxParamW
GetProcessWindowStation
GetUserObjectInformationW
GetDlgItem
DestroyIcon
ReleaseDC
InvalidateRect
SetWindowTextW
SetDlgItemTextW
PostMessageW
GetParent
GetSystemMetrics
GetSysColor
IsDlgButtonChecked
CheckDlgButton
SetFocus
CallWindowProcW
DestroyWindow
GetWindowLongPtrW
SetWindowLongW
SetWindowLongPtrW
SystemParametersInfoW
SendDlgItemMessageW
LoadImageW
GetDC
DrawTextExW

msvcrt

_resetstkoflw
__C_specific_handler
memset
_wcsupr
_wcslwr
_errno
__CxxFrameHandler
fread
feof
realloc
fclose
_wfopen
??2@YAPEAX_K@Z
wcsstr
_wcsicmp
_wtol
_vscwprintf
free
malloc
??_V@YAXPEAX@Z
??3@YAXPEAX@Z
__wgetmainargs
_XcptFilter
_exit
_cexit
exit
_wcmdln
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UEAA@XZ
memcpy
memmove
_CxxThrowException
mbtowc
__mb_cur_max
isleadbyte
_iob
_snprintf
ferror
__badioinfo
__pioinfo
_fileno
_lseeki64
_write
_wcsnicmp
_vsnwprintf
wcsncmp
bsearch
?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
iswalpha
??_U@YAPEAX_K@Z
wcschr
wcspbrk
wcsrchr
iswdigit
_isatty
fwprintf
_itoa
memcmp

ntdll

RtlNtStatusToDosError
NtOpenProcessToken
NtClose
NtOpenThreadToken
RtlVirtualUnwind
RtlLookupFunctionEntry
NtQueryInformationToken
RtlCaptureContext

shell32

ShellExecuteExW
ord59
SHGetFolderPathW
CommandLineToArgvW

setupapi

SetupFindNextLine
pSetupSetGlobalFlags
pSetupGetGlobalFlags
SetupInstallServicesFromInfSectionW
SetupInstallFromInfSectionW
SetupGetTargetPathW
SetupDiSetSelectedDevice
SetupDiSetClassInstallParamsW
SetupDiGetDriverInfoDetailW
SetupOpenFileQueue
SetupDiGetSelectedDriverW
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
CM_Get_DevNode_Status
SetupDiOpenDevRegKey
SetupDiGetClassDevsW
SetupFindNextMatchLineW
SetupDiSetDeviceRegistryPropertyW
SetupDiCreateDeviceInfoList
SetupDiClassNameFromGuidW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetActualSectionToInstallW
SetupTermDefaultQueueCallback
SetupDefaultQueueCallbackW
SetupCommitFileQueueW
SetupInitDefaultQueueCallbackEx
CMP_WaitNoPendingInstallEvents
SetupDiOpenClassRegKey
SetupGetStringFieldW
SetupGetLineCountW
SetupOpenAppendInfFileW
SetupFindFirstLineW
SetupGetIntField
SetupGetFieldCount
SetupOpenInfFileW
SetupCloseInfFile
SetupDiDestroyDeviceInfoList
SetupInstallFilesFromInfSectionW
SetupPromptReboot
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Locate_DevNodeW
CM_Query_And_Remove_SubTreeW
CM_Setup_DevNode
CM_Get_Device_IDW
CM_Enumerate_Classes
SetupCopyOEMInfW
SetupQueueCopyW
SetupCloseFileQueue

wintrust

CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust

ole32

StringFromCLSID
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

VariantChangeType
VariantInit
VariantClear
SysAllocString
SysFreeString

comctl32

ImageList_SetBkColor
PropertySheetW
ImageList_Create
CreatePropertySheetPageW
ImageList_ReplaceIcon

comdlg32

PrintDlgExW
GetSaveFileNameW

crypt32

CertFreeCTLContext
CertGetCTLContextProperty
CryptQueryObject
CertFreeCertificateContext

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 517KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 348KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/USBDriverUpdate.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Develop\Idax5Control\Installer\Drivers\source\USBDriverInstaller\obj\x86\Release\USBDriverUpdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/amd64/ftbusui.dll
.dll windows:5 windows x64 arch:x64

49299666a985df832b91ed2d8a7f089e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

54:2d:62:7b:fe:fd:45:62:44:88:7f:54:df:8f:18:fd:e2:2c:54:02
Signer

Actual PE Digest

54:2d:62:7b:fe:fd:45:62:44:88:7f:54:df:8f:18:fd:e2:2c:54:02

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\Users\andy.miller\Desktop\Windows Driver Development\v2.08.28\FTBUSUI\x64\Release\FTBUSUI.pdb

Imports

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList

kernel32

DecodePointer
CompareStringW
CompareStringA
GetTimeZoneInformation
GetLocaleInfoW
HeapSize
LCMapStringW
LocalFree
LoadLibraryW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
GetProcAddress
GetLastError
SetLastError
GetModuleFileNameW
GetModuleHandleExW
OutputDebugStringA
GetSystemDirectoryA
LocalAlloc
CloseHandle
DeviceIoControl
CreateFileA
FreeLibrary
LoadLibraryA
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeFormatA
GetDateFormatA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
WriteFile
HeapReAlloc
HeapAlloc
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
SetEnvironmentVariableA
TlsAlloc
FlsGetValue
FlsFree
GetCurrentThread
FlsAlloc
HeapFree
Sleep
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage

user32

SetCursor
SetWindowLongPtrA
LoadCursorA
CheckDlgButton
GetDlgItem
EnableWindow
CreateWindowExA
SendMessageA
IsDlgButtonChecked
GetWindowLongPtrA
wsprintfA
SetDlgItemTextW

shell32

ExtractIconA

Exports

Exports

DllMain
FTBUSUIPropPageProvider

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 718B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/amd64/ftcserco.dll
.dll windows:6 windows x64 arch:x64

012bca0efbe90a581f55de6318cb6327

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

21:3f:22:33:25:5f:23:00:a0:a3:59:33:2e:b4:22:72:6c:39:18:23
Signer

Actual PE Digest

21:3f:22:33:25:5f:23:00:a0:a3:59:33:2e:b4:22:72:6c:39:18:23

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\users\andy~1.mil\desktop\window~1\v208~1.28\coinst\ftcserco\objfre_wnet_amd64\amd64\ftcserco.pdb

Imports

setupapi

SetupDiOpenDeviceInfoW
SetupDiGetActualSectionToInstallW
SetupDiGetSelectedDriverW
CM_Get_Parent
CM_Get_Sibling
CM_Get_Child
SetupInstallServicesFromInfSectionW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupCloseInfFile
SetupDiCreateDeviceInfoList
SetupDiGetDriverInfoDetailW
SetupInstallFromInfSectionW
SetupOpenInfFileW
SetupDiCreateDevRegKeyW
CM_Get_Device_IDW

kernel32

LoadLibraryExW
VirtualProtect
RtlUnwindEx
VirtualQuery
GetSystemInfo
SetThreadStackGuarantee
OutputDebugStringW
lstrlenW
GetLastError
LocalAlloc
LocalFree
WideCharToMultiByte
MultiByteToWideChar
FlsSetValue
GetCommandLineA
GetVersionExW
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
EncodePointer
DecodePointer
FlsFree
SetLastError
FlsGetValue
GetCurrentThreadId
FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
OutputDebugStringA
WriteFile
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
Sleep
GetStringTypeW
VirtualAlloc

advapi32

RegOpenKeyW
RegCloseKey
RegSetValueExW
RegQueryValueExW

user32

wsprintfW

msports

ComDBClaimPort
ComDBGetCurrentPortUsage
ComDBOpen
ComDBClose

Exports

Exports

FTCSERCoInstaller

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/amd64/ftd2xx.lib
Drivers/amd64/ftd2xx64.dll
.dll windows:5 windows x64 arch:x64

de9c6034a3b5364b2d0f0d69b9f7e42d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f6:28:47:09:16:de:8b:70:49:6d:bf:14:3a:fb:bd:c3:45:52:4c:aa
Signer

Actual PE Digest

f6:28:47:09:16:de:8b:70:49:6d:bf:14:3a:fb:bd:c3:45:52:4c:aa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\Users\andy.miller\Desktop\Windows Driver Development\v2.08.28\d2xxdll\x64\Release\FTD2XX64.pdb

Imports

setupapi

SetupDiSetClassInstallParamsA
SetupDiDestroyDeviceInfoList
CM_Get_Device_ID_ExA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiClassNameFromGuidExA
SetupDiGetClassDescriptionExA
CM_Locate_DevNode_ExA
CM_Reenumerate_DevNode_Ex
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiGetDeviceInstallParamsA
SetupDiClassGuidsFromNameExA
SetupDiCreateDeviceInfoListExA
SetupDiGetClassDevsExA
SetupDiOpenDeviceInfoA
SetupDiGetDeviceInfoListDetailA
SetupDiEnumDeviceInfo

kernel32

WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
SetStdHandle
HeapSize
FlushFileBuffers
LoadLibraryA
FreeLibrary
SetConsoleCtrlHandler
HeapReAlloc
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
LocalFree
FormatMessageA
CloseHandle
GetLocaleInfoW
GetLastError
lstrlenA
lstrcpyA
DeviceIoControl
ReleaseMutex
WaitForSingleObject
ReadFile
WriteFile
GetOverlappedResult
CancelIo
lstrcmpiA
lstrcpynA
CreateMutexA
CreateFileA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeFormatA
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
GetCurrentProcess
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
TlsAlloc
FlsGetValue
FlsFree
SetLastError
SetEnvironmentVariableA
FlsAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
RtlUnwindEx
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
Sleep
GetModuleHandleW
GetProcAddress
ExitProcess
FatalAppExitA
RaiseException
RtlPcToFileHeader
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetModuleFileNameA
HeapSetInformation
HeapCreate
HeapDestroy
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetDateFormatA

user32

CharNextA
CharPrevA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitiateSystemShutdownExA
RegQueryValueExA

Exports

Exports

FT_Close
FT_ClrDtr
FT_ClrRts
FT_CreateDeviceInfoList
FT_CyclePort
FT_EEPROM_Program
FT_EEPROM_Read
FT_EE_Program
FT_EE_ProgramEx
FT_EE_Read
FT_EE_ReadConfig
FT_EE_ReadECC
FT_EE_ReadEx
FT_EE_UARead
FT_EE_UASize
FT_EE_UAWrite
FT_EE_WriteConfig
FT_EraseEE
FT_GetBitMode
FT_GetComPortNumber
FT_GetDeviceInfo
FT_GetDeviceInfoDetail
FT_GetDeviceInfoList
FT_GetDriverVersion
FT_GetEventStatus
FT_GetLatencyTimer
FT_GetLibraryVersion
FT_GetModemStatus
FT_GetQueueStatus
FT_GetQueueStatusEx
FT_GetStatus
FT_IoCtl
FT_ListDevices
FT_Open
FT_OpenEx
FT_Purge
FT_Read
FT_ReadEE
FT_Reload
FT_Rescan
FT_ResetDevice
FT_ResetPort
FT_RestartInTask
FT_SetBaudRate
FT_SetBitMode
FT_SetBreakOff
FT_SetBreakOn
FT_SetChars
FT_SetDataCharacteristics
FT_SetDeadmanTimeout
FT_SetDivisor
FT_SetDtr
FT_SetEventNotification
FT_SetFlowControl
FT_SetLatencyTimer
FT_SetResetPipeRetryCount
FT_SetRts
FT_SetTimeouts
FT_SetUSBParameters
FT_SetWaitMask
FT_StopInTask
FT_W32_CancelIo
FT_W32_ClearCommBreak
FT_W32_ClearCommError
FT_W32_CloseHandle
FT_W32_CreateFile
FT_W32_EscapeCommFunction
FT_W32_GetCommMask
FT_W32_GetCommModemStatus
FT_W32_GetCommState
FT_W32_GetCommTimeouts
FT_W32_GetLastError
FT_W32_GetOverlappedResult
FT_W32_PurgeComm
FT_W32_ReadFile
FT_W32_SetCommBreak
FT_W32_SetCommMask
FT_W32_SetCommState
FT_W32_SetCommTimeouts
FT_W32_SetupComm
FT_W32_WaitCommEvent
FT_W32_WriteFile
FT_WaitOnMask
FT_Write
FT_WriteEE

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/amd64/ftdibus.sys
.sys windows:6 windows x64 arch:x64

39629ef9d97b3050ebe24335f6e4b716

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

92:c4:70:38:51:dc:94:3f:64:cf:65:0f:50:ed:47:f7:58:8b:fc:a8
Signer

Actual PE Digest

92:c4:70:38:51:dc:94:3f:64:cf:65:0f:50:ed:47:f7:58:8b:fc:a8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\users\andy~1.mil\desktop\window~1\v208~1.28\d2xx\d2xx\objfre_wnet_amd64\amd64\FTDIBUS.pdb

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
IoBuildDeviceIoControlRequest
KeInitializeMutex
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
IoDeleteDevice
KeSetEvent
KeInitializeEvent
RtlQueryRegistryValues
KeInitializeDpc
KeReleaseSpinLock
KeInitializeTimer
PoSetPowerState
RtlFreeUnicodeString
ExFreePool
IofCompleteRequest
KeWaitForSingleObject
RtlWriteRegistryValue
IoAttachDeviceToDeviceStack
IoCreateDevice
IofCallDriver
KeAcquireSpinLockRaiseToDpc
ExReleaseFastMutex
ExAcquireFastMutex
RtlInitUnicodeString
IoDetachDevice
KeReleaseMutex
ObfReferenceObject
ObfDereferenceObject
KeCancelTimer
IoGetDeviceProperty
KeClearEvent
IoFreeWorkItem
PoRequestPowerIrp
IoCancelIrp
IoAllocateWorkItem
PoStartNextPowerIrp
PoCallDriver
IoQueueWorkItem
IoReleaseCancelSpinLock
ExEventObjectType
ObReferenceObjectByHandle
IoFreeIrp
IoAllocateIrp
MmUnmapLockedPages
IoBuildPartialMdl
IoFreeMdl
MmMapLockedPagesSpecifyCache
KeSetTimer
IoAllocateMdl
KeSetPriorityThread
PsCreateSystemThread
PsTerminateSystemThread
ZwClose
KeWaitForMultipleObjects
KeReleaseSpinLockFromDpcLevel
KeAcquireSpinLockAtDpcLevel
RtlCompareUnicodeString
RtlUnicodeStringToInteger
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
IoGetDeviceObjectPointer
RtlAppendUnicodeStringToString
IoGetDeviceInterfaces
RtlCompareMemory
IoOpenDeviceRegistryKey
ObReferenceObjectByPointer
RtlUnicodeStringToAnsiString
ZwQueryValueKey
RtlFreeAnsiString
ZwEnumerateKey
ZwQueryKey
ZwOpenKey
ZwSetValueKey
IoInvalidateDeviceRelations
ZwEnumerateValueKey
swprintf
KeBugCheckEx
PsGetVersion
MmGetSystemRoutineAddress

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_GetUSBDIVersion
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 896B - Virtual size: 836B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 896B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/amd64/ftlang.dll
.dll windows:5 windows x64 arch:x64

5281c413ef52bf132c360d2f044a764f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

55:22:4a:2b:7d:a4:22:2d:18:f0:17:33:aa:a9:aa:c6:0f:b3:09:d7
Signer

Actual PE Digest

55:22:4a:2b:7d:a4:22:2d:18:f0:17:33:aa:a9:aa:c6:0f:b3:09:d7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\Users\andy.miller\Desktop\Windows Driver Development\v2.08.28\FTLang\x64\Release\FTLang.pdb

Imports

kernel32

LoadResource
FindResourceExW
GetUserDefaultUILanguage
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetLastError
HeapFree
HeapAlloc
RaiseException
RtlPcToFileHeader
EncodePointer
DecodePointer
TlsAlloc
FlsGetValue
FlsFree
SetLastError
GetCurrentThread
FlsAlloc
Sleep
GetModuleHandleW
GetProcAddress
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
WriteFile
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetDateFormatA
GetTimeFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetLocaleInfoW
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

??0CFTLang@@QEAA@XZ
??4CFTLang@@QEAAAEAV0@AEBV0@@Z
FTGetText
nFTLang

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/amd64/ftser2k.sys
.sys windows:6 windows x64 arch:x64

d614642d06360a918bb472fef009ad25

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

98:bc:8c:9b:75:b1:7b:21:c0:f4:58:13:26:00:bc:14:b9:7e:4b:f5
Signer

Actual PE Digest

98:bc:8c:9b:75:b1:7b:21:c0:f4:58:13:26:00:bc:14:b9:7e:4b:f5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\users\andy~1.mil\desktop\window~1\v208~1.28\devices\ftser2k\objfre_wnet_amd64\amd64\ftser2k.pdb

Imports

ntoskrnl.exe

IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
KeSetEvent
MmLockPagableDataSection
ExAllocatePoolWithTag
MmUnlockPagableImageSection
ExFreePoolWithTag
KeRemoveQueueDpc
MmUnmapIoSpace
KeWaitForSingleObject
PoSetPowerState
IoWMIRegistrationControl
KeDelayExecutionThread
IoDetachDevice
IoDeleteDevice
IoCancelIrp
KeInitializeTimer
KeInitializeDpc
ExAllocatePoolWithQuotaTag
IofCallDriver
ExAcquireFastMutex
ExReleaseFastMutex
MmQuerySystemSize
MmLockPagableSectionByHandle
KeWaitForMultipleObjects
IoOpenDeviceRegistryKey
ZwClose
KeInsertQueueDpc
KeSetTimer
KeCancelTimer
PoCallDriver
IoAllocateErrorLogEntry
KeReleaseSpinLock
KeAcquireSpinLockAtDpcLevel
KeReleaseSpinLockFromDpcLevel
RtlAppendUnicodeToString
RtlInitUnicodeString
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
IoCreateDevice
KeInitializeEvent
IoAttachDeviceToDeviceStack
IoGetConfigurationInformation
IoCreateSymbolicLink
RtlWriteRegistryValue
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
IoDeleteSymbolicLink
RtlDeleteRegistryValue
ObfDereferenceObject
RtlQueryRegistryValues
ZwQueryValueKey
PoStartNextPowerIrp
PoRequestPowerIrp
KeClearEvent
IoAllocateIrp
IoFreeIrp
PsCreateSystemThread
ObReferenceObjectByHandle
KeSetPriorityThread
PsTerminateSystemThread
KeBugCheckEx
KeAcquireSpinLockRaiseToDpc
IoWriteErrorLogEntry
IofCompleteRequest
__C_specific_handler

wmilib.sys

WmiSystemControl
WmiCompleteRequest

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGESRP0
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGESER
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/amd64/ftserui2.dll
.dll windows:6 windows x64 arch:x64

c8ae9f3f73c5d671f444c9628a9d4d04

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:c7:3a:65:e7:ab:51:43:ad:6b:c4:36:79:73:ae:34:ed:8c:4a:46
Signer

Actual PE Digest

07:c7:3a:65:e7:ab:51:43:ad:6b:c4:36:79:73:ae:34:ed:8c:4a:46

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\users\andy~1.mil\desktop\window~1\v208~1.28\pp\ftserui2\objfre_wnet_amd64\amd64\ftserui2.pdb

Imports

msvcrt

__C_specific_handler
memset
memcpy
wcscspn
wcsspn
_itoa
_wcsupr
wcsstr
wcschr

setupapi

CM_Get_Next_Res_Des
SetupDiGetDeviceInstanceIdW
SetupDiGetActualSectionToInstallW
SetupDiGetSelectedDriverW
CM_Get_First_Log_Conf
SetupDiCallClassInstaller
SetupDiOpenDevRegKey
SetupDiGetDeviceInfoListDetailW
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiSetDeviceRegistryPropertyW
SetupDiSetClassInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiGetDriverInfoDetailW
SetupInstallFromInfSectionW
CM_Free_Res_Des_Handle
SetupOpenInfFileW
SetupDiCreateDevRegKeyW
CM_Get_DevNode_Status
SetupCloseInfFile
SetupDiInstallDevice
CM_Get_Res_Des_Data
SetupDiRemoveDevice
CM_Free_Log_Conf_Handle

user32

wvsprintfW
CharNextW
CheckRadioButton
CharPrevW
MoveWindow
WinHelpW
SetWindowTextW
EnableWindow
SendMessageW
SetDlgItemTextW
SetWindowLongPtrW
LoadStringW
SendDlgItemMessageW
EndDialog
GetDlgItem
GetDC
wsprintfW
GetWindowLongPtrW
GetParent
GetFocus
GetWindowRect
GetDlgCtrlID
IsDlgButtonChecked
ShowWindow
CheckDlgButton
GetWindowTextW
DialogBoxParamW
GetWindowTextLengthW
MessageBoxW
SendMessageTimeoutW

advapi32

RegQueryValueExW
RegCloseKey
RegEnumValueW
RegOpenKeyExW
RegSetValueExW

kernel32

GetModuleHandleExW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
MultiByteToWideChar
FreeLibrary
lstrcmpiW
DisableThreadLibraryCalls
CloseHandle
QueryDosDeviceW
DefineDosDeviceW
CreateFileW
lstrcpyW
LocalFree
FindActCtxSectionStringW
OutputDebugStringA
WriteProfileStringW
lstrcatW
LocalAlloc
GetProcAddress
SetLastError
GetLastError
DeactivateActCtx
lstrlenW
lstrcmpW
GetModuleFileNameW
GetProfileStringW
LoadLibraryW
ActivateActCtx
CreateActCtxW
QueryActCtxW
GetUserDefaultLCID
GetLocaleInfoW

gdi32

GetTextExtentPoint32W

msports

ComDBReleasePort
ComDBClaimPort
ComDBGetCurrentPortUsage
ComDBOpen
ComDBClaimNextFreePort
ComDBClose

Exports

Exports

LibMain
ParallelPortPropPageProvider
PortsClassInstaller
SerialPortPropPageProvider

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/ftdibus.cat
Drivers/ftdibus.inf
Drivers/ftdiport.cat
Drivers/ftdiport.inf
Drivers/i386/ftbusui.dll
.dll windows:5 windows x86 arch:x86

2a0b3d3e2e07194392736309df4a5c4c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

dc:58:df:fb:1e:e6:fb:f6:76:10:c7:f7:18:ea:2f:a1:e8:00:41:32
Signer

Actual PE Digest

dc:58:df:fb:1e:e6:fb:f6:76:10:c7:f7:18:ea:2f:a1:e8:00:41:32

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\andy.miller\Desktop\Windows Driver Development\v2.08.28\FTBUSUI\Release\FTBUSUI.pdb

Imports

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList

kernel32

InterlockedDecrement
CompareStringW
CompareStringA
GetTimeZoneInformation
GetLocaleInfoW
HeapSize
LCMapStringW
LocalFree
LoadLibraryA
GetModuleHandleA
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
GetSystemDirectoryA
LocalAlloc
CloseHandle
DeviceIoControl
CreateFileA
FreeLibrary
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
SetConsoleCtrlHandler
WriteFile
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetEnvironmentVariableA
GetCurrentThread
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc

user32

SetCursor
SetWindowLongA
LoadCursorA
CheckDlgButton
GetDlgItem
EnableWindow
CreateWindowExA
SendMessageA
IsDlgButtonChecked
GetWindowLongA
wsprintfA
SetDlgItemTextW

shell32

ExtractIconA

Exports

Exports

DllMain
FTBUSUIPropPageProvider

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/i386/ftcserco.dll
.dll windows:6 windows x86 arch:x86

db81bbc65091a3b52914dd7b558d6236

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

fa:82:95:d9:0a:a0:e0:32:fc:70:9c:e5:94:36:ed:9e:d6:c4:13:40
Signer

Actual PE Digest

fa:82:95:d9:0a:a0:e0:32:fc:70:9c:e5:94:36:ed:9e:d6:c4:13:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\users\andy~1.mil\desktop\window~1\v208~1.28\coinst\ftcserco\objfre_wnet_x86\i386\ftcserco.pdb

Imports

setupapi

CM_Get_Device_IDW
CM_Get_Parent
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
CM_Get_Child
CM_Get_Sibling
SetupDiCreateDevRegKeyW
SetupInstallFromInfSectionW
SetupDiGetSelectedDriverW
SetupInstallServicesFromInfSectionW
SetupDiGetActualSectionToInstallW
SetupOpenInfFileW
SetupDiGetDriverInfoDetailW
SetupCloseInfFile

kernel32

GetCurrentProcessId
GetLocaleInfoA
VirtualQuery
GetSystemInfo
OutputDebugStringW
GetLastError
lstrlenW
LocalFree
LocalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetCPInfo
GetACP
GetOEMCP
OutputDebugStringA
LCMapStringA
LCMapStringW
LoadLibraryExA
InitializeCriticalSection
Sleep
RtlUnwind
GetStringTypeA
GetStringTypeW
VirtualProtect

advapi32

RegQueryValueExW
RegSetValueExW
RegOpenKeyW
RegCloseKey

user32

wsprintfW

msports

ComDBClaimPort
ComDBGetCurrentPortUsage
ComDBOpen
ComDBClose

Exports

Exports

FTCSERCoInstaller

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/i386/ftd2xx.dll
.dll windows:5 windows x86 arch:x86

20e898b7ba9b5d4dbaf372fb9180c6d7

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

85:a9:9a:a4:87:8b:c5:8c:04:49:6e:f8:2d:62:23:a6:01:af:e3:93
Signer

Actual PE Digest

85:a9:9a:a4:87:8b:c5:8c:04:49:6e:f8:2d:62:23:a6:01:af:e3:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\andy.miller\Desktop\Windows Driver Development\v2.08.28\d2xxdll\Release\FTD2XX.pdb

Imports

setupapi

SetupDiSetClassInstallParamsA
SetupDiDestroyDeviceInfoList
CM_Get_Device_ID_ExA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiClassNameFromGuidExA
SetupDiGetClassDescriptionExA
CM_Locate_DevNode_ExA
CM_Reenumerate_DevNode_Ex
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiGetDeviceInstallParamsA
SetupDiClassGuidsFromNameExA
SetupDiCreateDeviceInfoListExA
SetupDiGetClassDevsExA
SetupDiOpenDeviceInfoA
SetupDiGetDeviceInfoListDetailA
SetupDiEnumDeviceInfo

kernel32

WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
SetStdHandle
HeapSize
FlushFileBuffers
LoadLibraryA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
LocalFree
FormatMessageA
CloseHandle
GetLocaleInfoW
GetLastError
lstrlenA
lstrcpyA
DeviceIoControl
ReleaseMutex
WaitForSingleObject
ReadFile
WriteFile
GetOverlappedResult
CancelIo
lstrcmpiA
lstrcpynA
CreateMutexA
CreateFileA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
GetCurrentProcess
TlsAlloc
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
SetEnvironmentVariableA
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
Sleep
ExitProcess
FatalAppExitA
RaiseException
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
RtlUnwind
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleFileNameA
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetTimeFormatA

user32

CharNextA
CharPrevA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitiateSystemShutdownExA
RegQueryValueExA

Exports

Exports

FT_Close
FT_ClrDtr
FT_ClrRts
FT_CreateDeviceInfoList
FT_CyclePort
FT_EEPROM_Program
FT_EEPROM_Read
FT_EE_Program
FT_EE_ProgramEx
FT_EE_Read
FT_EE_ReadConfig
FT_EE_ReadECC
FT_EE_ReadEx
FT_EE_UARead
FT_EE_UASize
FT_EE_UAWrite
FT_EE_WriteConfig
FT_EraseEE
FT_GetBitMode
FT_GetComPortNumber
FT_GetDeviceInfo
FT_GetDeviceInfoDetail
FT_GetDeviceInfoList
FT_GetDriverVersion
FT_GetEventStatus
FT_GetLatencyTimer
FT_GetLibraryVersion
FT_GetModemStatus
FT_GetQueueStatus
FT_GetQueueStatusEx
FT_GetStatus
FT_IoCtl
FT_ListDevices
FT_Open
FT_OpenEx
FT_Purge
FT_Read
FT_ReadEE
FT_Reload
FT_Rescan
FT_ResetDevice
FT_ResetPort
FT_RestartInTask
FT_SetBaudRate
FT_SetBitMode
FT_SetBreakOff
FT_SetBreakOn
FT_SetChars
FT_SetDataCharacteristics
FT_SetDeadmanTimeout
FT_SetDivisor
FT_SetDtr
FT_SetEventNotification
FT_SetFlowControl
FT_SetLatencyTimer
FT_SetResetPipeRetryCount
FT_SetRts
FT_SetTimeouts
FT_SetUSBParameters
FT_SetWaitMask
FT_StopInTask
FT_W32_CancelIo
FT_W32_ClearCommBreak
FT_W32_ClearCommError
FT_W32_CloseHandle
FT_W32_CreateFile
FT_W32_EscapeCommFunction
FT_W32_GetCommMask
FT_W32_GetCommModemStatus
FT_W32_GetCommState
FT_W32_GetCommTimeouts
FT_W32_GetLastError
FT_W32_GetOverlappedResult
FT_W32_PurgeComm
FT_W32_ReadFile
FT_W32_SetCommBreak
FT_W32_SetCommMask
FT_W32_SetCommState
FT_W32_SetCommTimeouts
FT_W32_SetupComm
FT_W32_WaitCommEvent
FT_W32_WriteFile
FT_WaitOnMask
FT_Write
FT_WriteEE

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/i386/ftd2xx.lib
Drivers/i386/ftdibus.sys
.sys windows:6 windows x86 arch:x86

6d28e297157d3aa9c43785c4a3bbcba5

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f1:65:cb:41:1f:eb:3f:ac:91:e7:2a:7a:d3:31:37:1a:e0:f2:29:3b
Signer

Actual PE Digest

f1:65:cb:41:1f:eb:3f:ac:91:e7:2a:7a:d3:31:37:1a:e0:f2:29:3b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\users\andy~1.mil\desktop\window~1\v208~1.28\d2xx\d2xx\objfre_wnet_x86\i386\FTDIBUS.pdb

Imports

ntoskrnl.exe

memcpy
KeSetEvent
InterlockedDecrement
KeInitializeSpinLock
InterlockedIncrement
RtlWriteRegistryValue
RtlQueryRegistryValues
memset
KeInitializeDpc
KeInitializeTimer
KeInitializeMutex
IoAttachDeviceToDeviceStack
RtlFreeUnicodeString
IoDeleteDevice
IoCreateDevice
IofCallDriver
IofCompleteRequest
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
ExFreePool
ExAllocatePoolWithTag
RtlInitUnicodeString
IoGetDeviceProperty
KeCancelTimer
KeReleaseMutex
ObfReferenceObject
IoDetachDevice
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
PoSetPowerState
ObfDereferenceObject
PoStartNextPowerIrp
IoFreeWorkItem
PoCallDriver
IoReleaseCancelSpinLock
PoRequestPowerIrp
InterlockedExchange
IoCancelIrp
IoQueueWorkItem
IoAllocateWorkItem
KeClearEvent
IoFreeIrp
IoAllocateIrp
ObReferenceObjectByHandle
ExEventObjectType
IoFreeMdl
IoBuildPartialMdl
MmUnmapLockedPages
KeSetTimer
IoAllocateMdl
MmMapLockedPagesSpecifyCache
PsTerminateSystemThread
KeWaitForMultipleObjects
KeSetPriorityThread
KeGetCurrentThread
ZwClose
PsCreateSystemThread
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
RtlCompareUnicodeString
RtlUnicodeStringToInteger
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
IoOpenDeviceRegistryKey
ObReferenceObjectByPointer
IoGetDeviceObjectPointer
RtlCompareMemory
IoGetDeviceInterfaces
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
ZwQueryValueKey
ZwOpenKey
ZwEnumerateKey
ZwQueryKey
ZwSetValueKey
IoInvalidateDeviceRelations
ZwEnumerateValueKey
swprintf
KeTickCount
KeBugCheckEx
KeInitializeEvent
MmGetSystemRoutineAddress
PsGetVersion

hal

ExReleaseFastMutex
KeGetCurrentIrql
ExAcquireFastMutex
KfAcquireSpinLock
KfReleaseSpinLock

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx
USBD_GetUSBDIVersion

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 640B - Virtual size: 550B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 896B - Virtual size: 831B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 768B - Virtual size: 662B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 896B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/i386/ftlang.dll
.dll windows:5 windows x86 arch:x86

f6d7794b0a8fd58d6d6d248822908cc3

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9d:78:ee:c1:19:90:40:a6:a5:9b:9b:89:e9:ab:be:c0:a1:46:c2:ea
Signer

Actual PE Digest

9d:78:ee:c1:19:90:40:a6:a5:9b:9b:89:e9:ab:be:c0:a1:46:c2:ea

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\andy.miller\Desktop\Windows Driver Development\v2.08.28\FTLang\Release\FTLang.pdb

Imports

kernel32

LoadResource
FindResourceExW
GetUserDefaultUILanguage
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
HeapAlloc
RaiseException
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetLocaleInfoW
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

??0CFTLang@@QAE@XZ
??4CFTLang@@QAEAAV0@ABV0@@Z
FTGetText
nFTLang

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/i386/ftser2k.sys
.sys windows:6 windows x86 arch:x86

845247196de05871bc3e28eebb9450a0

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:ed:86:7f:dd:b1:bb:87:2e:00:6b:09:4f:1f:69:42:63:d8:4e:75
Signer

Actual PE Digest

2e:ed:86:7f:dd:b1:bb:87:2e:00:6b:09:4f:1f:69:42:63:d8:4e:75

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\users\andy~1.mil\desktop\window~1\v208~1.28\devices\ftser2k\objfre_wnet_x86\i386\ftser2k.pdb

Imports

ntoskrnl.exe

KeWaitForSingleObject
IoWMIRegistrationControl
IoDeleteDevice
IoDetachDevice
KeDelayExecutionThread
KeInitializeDpc
KeInitializeTimer
ExAllocatePoolWithTag
memmove
memset
IofCallDriver
ExAllocatePoolWithQuotaTag
ZwClose
IoOpenDeviceRegistryKey
KeWaitForMultipleObjects
MmLockPagableSectionByHandle
MmQuerySystemSize
KeQuerySystemTime
KeInsertQueueDpc
KeSetTimer
PoCallDriver
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
memcpy
KeCancelTimer
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeInitializeEvent
PoSetPowerState
IoDeleteSymbolicLink
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
RtlWriteRegistryValue
IoCreateSymbolicLink
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
ObfDereferenceObject
IoCreateDevice
RtlIntegerToUnicodeString
RtlInitUnicodeString
IoAttachDeviceToDeviceStack
IoGetConfigurationInformation
RtlQueryRegistryValues
ZwQueryValueKey
PoRequestPowerIrp
PoStartNextPowerIrp
KeClearEvent
IoFreeIrp
IoAllocateIrp
PsTerminateSystemThread
KeSetPriorityThread
KeGetCurrentThread
ObReferenceObjectByHandle
PsCreateSystemThread
KeTickCount
KeBugCheckEx
KeRemoveQueueDpc
MmUnmapIoSpace
MmLockPagableDataSection
ExFreePoolWithTag
MmUnlockPagableImageSection
IoCancelIrp
_allmul
KeSetEvent
IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
RtlDeleteRegistryValue
IofCompleteRequest
RtlUnwind

hal

KeGetCurrentIrql
KfAcquireSpinLock
KeRaiseIrqlToDpcLevel
KfLowerIrql
KfReleaseSpinLock
ExAcquireFastMutex
ExReleaseFastMutex

wmilib.sys

WmiCompleteRequest
WmiSystemControl

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGESRP0
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGESER
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Drivers/i386/ftserui2.dll
.dll windows:6 windows x86 arch:x86

1ef34c58705906162da8ae963267da89

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:9d:12:f3:51:ea:f6:f8:c9:ba:e3:87:ba:46:05:13
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/09/2010, 00:00

Not After

28/09/2013, 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7d:d0:ea:3b:de:a0:ac:15:c9:83:7f:09:86:10:ab:dd:55:66:fb:32
Signer

Actual PE Digest

7d:d0:ea:3b:de:a0:ac:15:c9:83:7f:09:86:10:ab:dd:55:66:fb:32

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\users\andy~1.mil\desktop\window~1\v208~1.28\pp\ftserui2\objfre_wnet_x86\i386\ftserui2.pdb

Imports

msvcrt

wcscspn
wcsspn
_itoa
_wcsupr
memcpy
wcsstr
wcschr
memset

setupapi

SetupDiCallClassInstaller
SetupDiOpenDevRegKey
SetupDiGetDeviceInfoListDetailW
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiSetClassInstallParamsW
SetupInstallFromInfSectionW
SetupDiGetActualSectionToInstallW
SetupCloseInfFile
SetupDiCreateDevRegKeyW
SetupOpenInfFileW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
CM_Free_Log_Conf_Handle
CM_Free_Res_Des_Handle
CM_Get_Res_Des_Data
CM_Get_Next_Res_Des
CM_Get_First_Log_Conf
SetupDiInstallDevice
CM_Get_DevNode_Status
SetupDiRemoveDevice
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW

user32

SendMessageW
LoadStringW
GetWindowRect
WinHelpW
MoveWindow
GetDlgItem
SetDlgItemTextW
SendDlgItemMessageW
GetParent
EndDialog
GetWindowLongW
EnableWindow
SetWindowTextW
wsprintfW
SetWindowLongW
GetFocus
GetDlgCtrlID
CheckDlgButton
GetWindowTextW
GetWindowTextLengthW
IsDlgButtonChecked
DialogBoxParamW
ShowWindow
CharPrevW
MessageBoxW
wvsprintfW
SendMessageTimeoutW
CharNextW
CheckRadioButton
GetDC

advapi32

RegCloseKey
RegSetValueExW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW

kernel32

GetProfileStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
FreeLibrary
MultiByteToWideChar
DisableThreadLibraryCalls
lstrcmpiW
QueryDosDeviceW
CreateFileW
CloseHandle
DefineDosDeviceW
OutputDebugStringA
LoadLibraryA
GetLastError
lstrcatW
GetModuleFileNameW
WriteProfileStringW
lstrcmpW
lstrlenW
GetUserDefaultLCID
GetLocaleInfoW
lstrcpyW
LocalFree
LocalAlloc
SetLastError
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetModuleHandleA

gdi32

GetTextExtentPoint32W

msports

ComDBReleasePort
ComDBClose
ComDBOpen
ComDBClaimNextFreePort
ComDBGetCurrentPortUsage
ComDBClaimPort

Exports

Exports

LibMain
ParallelPortPropPageProvider
PortsClassInstaller
SerialPortPropPageProvider

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EasyModbus.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Admin\OneDrive\EasyModbus V2.9\EasyModbus\obj\Debug\EasyModbus.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtensionLayouts.xml
.xml
Geometrics.xml
.xml
Gettext.Cs.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Develop\gettext-cs-utils\Gettext.CsUtils\Core\Gettext.Cs\obj\Release\Gettext.Cs.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graph.dll
.dll windows:6 windows x86 arch:x86

5726eb2c8b22e1deb34b1e3a81c5d053

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\ExecutablesRelease\Graph.pdb

Imports

mfc140u

ord5790
ord4502
ord4988
ord4927
ord4912
ord4974
ord5019
ord4942
ord4997
ord5013
ord4954
ord4960
ord4966
ord4948
ord5003
ord4936
ord1777
ord1756
ord1770
ord1744
ord1722
ord12258
ord12262
ord13878
ord3266
ord9256
ord11002
ord9468
ord10912
ord6978
ord12220
ord8965
ord14588
ord11936
ord3833
ord3838
ord12089
ord9139
ord11726
ord11725
ord5652
ord10288
ord10284
ord10286
ord10287
ord10285
ord14785
ord1476
ord2761
ord8210
ord10255
ord3302
ord3305
ord13756
ord6220
ord7654
ord4671
ord6531
ord460
ord3164
ord3404
ord3403
ord4092
ord10472
ord11396
ord11015
ord1111
ord12172
ord9210
ord2760
ord13752
ord6218
ord12131
ord7493
ord3846
ord3816
ord3697
ord14137
ord4477
ord14507
ord6129
ord8006
ord9040
ord6549
ord1133
ord6589
ord13654
ord13656
ord8062
ord4225
ord8067
ord1180
ord9132
ord5984
ord13922
ord5422
ord7820
ord458
ord5968
ord2205
ord6973
ord14131
ord11392
ord6842
ord3260
ord3366
ord4239
ord1454
ord9138
ord9463
ord7642
ord6117
ord486
ord14405
ord14417
ord5109
ord1108
ord13289
ord13085
ord9693
ord358
ord6489
ord3957
ord1413
ord4724
ord3055
ord14590
ord929
ord6805
ord4648
ord14042
ord8365
ord8811
ord13293
ord13086
ord6795
ord4856
ord3236
ord14657
ord12405
ord14604
ord12348
ord8360
ord12921
ord14409
ord14415
ord4663
ord14364
ord12584
ord2990
ord1692
ord1689
ord290
ord6751
ord2378
ord6956
ord4834
ord8712
ord1526
ord1525
ord1046
ord310
ord266
ord265
ord8464
ord4664
ord12763
ord5921
ord1523
ord286
ord285
ord3009
ord12559
ord5117
ord2389
ord2385
ord2304
ord13070
ord4649
ord13062
ord450
ord2520
ord6812
ord6559
ord3882
ord2522
ord6566
ord1451
ord2010
ord975
ord4815
ord1045
ord280
ord296
ord2383
ord1511
ord1472
ord4589
ord995
ord1513
ord8470
ord6128
ord8386
ord12247
ord10433
ord12928
ord12865
ord8324
ord5357
ord2486
ord12542
ord12541
ord14589
ord7922
ord14595
ord9398
ord4152
ord4090
ord12947
ord7941
ord2034
ord11983
ord11982
ord14466
ord12531
ord8000
ord14667
ord6348
ord14669
ord6350
ord14668
ord6349
ord6860
ord3852
ord5918
ord12239
ord8217
ord12251
ord12219
ord5249
ord6486
ord4494
ord5549
ord5760
ord9350
ord5525
ord5763
ord5252
ord5411
ord5228
ord7722
ord7723
ord7712
ord5409
ord12642
ord7923
ord14596
ord6877
ord11717
ord14234
ord2865
ord8817
ord13703
ord5935
ord8219
ord10250
ord2682
ord12124
ord3941
ord3371
ord3372
ord3265
ord14328
ord12168
ord4886
ord1002
ord8773
ord5322
ord6865
ord8746
ord4227
ord14377
ord2526
ord3932
ord6607
ord1391
ord890
ord4196
ord2750
ord4881
ord1052
ord324
ord2008
ord2246
ord2350
ord3849
ord1514
ord325
ord1053
ord2365
ord2408
ord2411
ord2376
ord2410
ord485
ord2268
ord2374
ord2184
ord2300
ord2399
ord9209

kernel32

HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
GetThreadLocale
GetLocaleInfoW
LoadLibraryW
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
FreeLibrary
GetTempPathW
GetLongPathNameW
OutputDebugStringW
GetProcessHeap
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTickCount
GlobalAlloc
GlobalUnlock
GlobalLock
OutputDebugStringA
SetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
LocalAlloc
LocalFree
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
DeleteFileW
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead

user32

GetSysColor
UnregisterClassW
PtInRect
IsRectEmpty
InflateRect
GetClientRect
InvalidateRect
DestroyWindow
GetCapture
SetCapture
ReleaseCapture
KillTimer
EnableWindow
CreatePopupMenu
AppendMenuW
GetDC
ReleaseDC
RedrawWindow
GetWindowRect
OpenClipboard
ClientToScreen
ScreenToClient
WindowFromPoint
DrawFocusRect
FillRect
CopyRect
EqualRect
LoadCursorW
SystemParametersInfoW
SendMessageW
GetMessageW
DispatchMessageW
GetDCEx
GetCursorPos
SetRectEmpty
GetParent
SetFocus
GetFocus
SetParent
GetTopWindow
IsWindow
CloseClipboard
SetClipboardData
SetCursor
EmptyClipboard
SetTimer

gdi32

BitBlt
CombineRgn
CreateCompatibleDC
CreateFontIndirectW
CreateRectRgn
GetTextExtentPoint32W
CreateFontW
CreatePen
GetBkMode
GetTextAlign
ExtTextOutW
CreateBitmap
Ellipse
GetCurrentPositionEx
GetObjectW
Polygon
CreateCompatibleBitmap
CreateSolidBrush
DeleteDC
Rectangle

oleaut32

SystemTimeToVariantTime
VarUdateFromDate
VariantTimeToSystemTime
SysFreeString

gdiplus

GdiplusShutdown

vcruntime140

__std_terminate
_purecall
memcpy
memset
__RTDynamicCast
memmove
__CxxFrameHandler3
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
__current_exception

api-ms-win-crt-time-l1-1-0

wcsftime

api-ms-win-crt-math-l1-1-0

_libm_sse2_cos_precise
_libm_sse2_pow_precise
_libm_sse2_log10_precise
_libm_sse2_sin_precise
ceil
_except1
_finite
_fpclass
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
floor

api-ms-win-crt-stdio-l1-1-0

fwrite
fclose
_wfopen_s

api-ms-win-crt-heap-l1-1-0

_recalloc
free

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initterm
_initterm_e
_initialize_onexit_table
_register_onexit_function
_errno
_invalid_parameter_noinfo

api-ms-win-crt-string-l1-1-0

wcscpy_s

api-ms-win-crt-convert-l1-1-0

_wtoi
_wtof

Exports

Exports

CalendarDateToDoubleDate
CreateGraphControl
CreateGraphCurve
RepaintCurveGraphs
SubclassGraphControl

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GraphClr.dll
.dll windows:6 windows x86 arch:x86

98e2246160c2f4885c30ecd76ad661a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\ExecutablesRelease\GraphClr.pdb

Imports

kernel32

InitializeCriticalSectionEx
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
OutputDebugStringW
RaiseException
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
HeapDestroy
FindResourceExW
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
CreateEventW
WaitForSingleObjectEx
LoadLibraryW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
CloseHandle
FreeLibrary
Sleep

vcruntime140

__FrameUnwindFilter
__CxxFrameHandler3
_purecall
__std_exception_copy
memmove
_except_handler4_common
memset
__current_exception_context
__current_exception
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy

api-ms-win-crt-runtime-l1-1-0

_initterm
_errno
_invalid_parameter_noinfo
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_invalid_parameter_noinfo_noreturn
abort

api-ms-win-crt-heap-l1-1-0

_recalloc
malloc
free
_callnewh

user32

UnregisterClassW
MoveWindow

oleaut32

SysAllocStringByteLen
VariantCopy
SysStringByteLen

msvcp140

?__ExceptionPtrCopy@@YAXPAXPBX@Z
?_Xlength_error@std@@YAXPBD@Z
?__ExceptionPtrDestroy@@YAXPAX@Z

api-ms-win-crt-string-l1-1-0

wmemcpy_s

mscoree

_CorDllMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Help/IDAX_300_350_UG.pdf
.pdf
Help/Idax5_en.chm
.chm
HtmlHelp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\externals\HtmlHelpViewer\HtmlHelp\obj\Release\HtmlHelp.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HtmlHelpViewer.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\externals\HtmlHelpViewer\HtmlHelpViewer\obj\Release\HtmlHelpViewer.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Idax.Communication.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\externals\IdaxCommon\Idax.Communication\obj\Release\Idax.Communication.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Idax.Controls.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\externals\IdaxCommon\Idax.Controls\obj\Release\Idax.Controls.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 293KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Idax.Math.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\externals\IdaxCommon\Idax.Math\obj\Release\Idax.Math.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Idax.Oscilloscope.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\externals\IdaxCommon\Idax.Oscilloscope\obj\Release\Idax.Oscilloscope.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Idax.Parser.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\externals\IdaxCommon\Idax.Parser\obj\Release\Idax.Parser.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Idax.Popup.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\externals\IdaxCommon\Idax.Popup\obj\Release\Idax.Popup.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Idax300.DataTypes.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\externals\IdaxCommon\Idax300.DataTypes\obj\Release\Idax300.DataTypes.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IdaxControl.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

69:46:b6:da:b1:23:70:d9:ed:ce:80:15:7f:b1:94:34
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

09/09/2022, 00:00

Not After

08/09/2025, 23:59

Subject

SERIALNUMBER=556195-1368,CN=Megger Sweden AB,O=Megger Sweden AB,ST=Stockholms län,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

bf:4b:17:01:69:d0:16:c1:ad:b2:85:5a:8a:71:5d:85:57:2a:b6:f7:44:7b:ba:ca:6a:bb:0e:b9:3a:f4:77:6d
Signer

Actual PE Digest

bf:4b:17:01:69:d0:16:c1:ad:b2:85:5a:8a:71:5d:85:57:2a:b6:f7:44:7b:ba:ca:6a:bb:0e:b9:3a:f4:77:6d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\IdaxControl\obj\x86\Release\IdaxControl.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IdaxControl.exe.ini
IdaxMaintenance.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\externals\IdaxCommon\IdaxMaintenance\obj\x86\Release\IdaxMaintenance.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IdaxMeasure.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\IdaxMeasure\obj\Release\IdaxMeasure.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
InputSimulator.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Dev\Idax5Control\externals\IdaxCommon\3rdparty\InputSimulator\InputSimulator\obj\Release\InputSimulator.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Ionic.Zip.Reduced.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\v1.7.2.12\DotNetZip\Zip Reduced\obj\Debug\Ionic.Zip.Reduced.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Kraft paper #1.mpf
Languages/cs/HtmlHelpViewer.po
Languages/cs/Idax.Communication.po
Languages/cs/Idax.Controls.po
Languages/cs/Idax.ManualControl.po
Languages/cs/Idax.Math.po
Languages/de/HtmlHelpViewer.po
Languages/de/Idax.Communication.po
Languages/de/Idax.Controls.po
Languages/de/Idax.ManualControl.po
Languages/de/Idax.Math.po
Languages/es/HtmlHelpViewer.po
Languages/es/Idax.Communication.po
Languages/es/Idax.Controls.po
Languages/es/Idax.ManualControl.po
Languages/es/Idax.Math.po
Languages/fr/HtmlHelpViewer.po
Languages/fr/Idax.Communication.po
Languages/fr/Idax.Controls.po
Languages/fr/Idax.ManualControl.po
Languages/fr/Idax.Math.po
Languages/ru/HtmlHelpViewer.po
Languages/ru/Idax.Communication.po
Languages/ru/Idax.Controls.po
Languages/ru/Idax.ManualControl.po
Languages/ru/Idax.Math.po
Languages/ru/MixCommon.po
Languages/ru/MixFirmware.po
Languages/ru/MixHardware.po
Languages/sv/HtmlHelpViewer.po
Languages/sv/Idax.Communication.po
Languages/sv/Idax.Controls.po
Languages/sv/Idax.ManualControl.po
Languages/sv/Idax.Math.po
Languages/sv/MixCommon.po
Languages/sv/MixFirmware.po
Languages/sv/MixHardware.po
Languages/tr/HtmlHelpViewer.po
Languages/tr/Idax.Communication.po
Languages/tr/Idax.Controls.po
Languages/tr/Idax.ManualControl.po
Languages/tr/Idax.Math.po
Languages/tr/MixCommon.po
Languages/tr/MixFirmware.po
Languages/tr/MixHardware.po
Languages/zh-CN/HtmlHelpViewer.po
Languages/zh-CN/Idax.Communication.po
Languages/zh-CN/Idax.Controls.po
Languages/zh-CN/Idax.ManualControl.po
Languages/zh-CN/Idax.Math.po
Languages/zh-TW/HtmlHelpViewer.po
Languages/zh-TW/Idax.Communication.po
Languages/zh-TW/Idax.Controls.po
Languages/zh-TW/Idax.ManualControl.po
Languages/zh-TW/Idax.Math.po
MODSClr.dll
.dll windows:6 windows x86 arch:x86

85415670e31b3ab97e2fb6d4b7341282

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\Release\MODSClr.pdb

Imports

kernel32

InitializeCriticalSectionEx
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
OutputDebugStringW
RaiseException
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcessHeap
FreeLibrary
LoadLibraryW
HeapDestroy
FindResourceExW
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
CreateEventW
HeapAlloc
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
CloseHandle
HeapFree
HeapReAlloc
HeapSize
Sleep

vcruntime140

__CxxFrameHandler3
_CxxThrowException
__FrameUnwindFilter
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
__current_exception
memmove
_except_handler4_common
memset
__current_exception_context

api-ms-win-crt-runtime-l1-1-0

_initterm
_errno
_invalid_parameter_noinfo
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
abort

api-ms-win-crt-heap-l1-1-0

_recalloc
_callnewh
malloc
free

user32

UnregisterClassW

oleaut32

SysAllocStringByteLen
VariantCopy
SysStringByteLen

api-ms-win-crt-string-l1-1-0

wmemcpy_s

mscoree

_CorDllMain

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MODSLibrary.dll
.dll windows:6 windows x86 arch:x86

083824c0e198c0a28f8226fbdab619c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\ExecutablesRelease\MODSLibrary.pdb

Imports

mfc140u

ord6751
ord12348
ord2378
ord14604
ord12405
ord14657
ord14623
ord12367
ord5893
ord4323
ord14364
ord316
ord4856
ord2383
ord2899
ord11972
ord1449
ord973
ord3236
ord4834
ord5921
ord285
ord3009
ord1513
ord12763
ord1046
ord1697
ord1653
ord1689
ord1690
ord14411
ord14405
ord554
ord1185
ord6178
ord8508
ord1658
ord2990
ord266
ord4815
ord1523
ord3849
ord1514
ord325
ord1053
ord2365
ord2246
ord324
ord1052
ord2408
ord2411
ord2376
ord2410
ord485
ord2268
ord2374
ord2184
ord2300
ord2399
ord296
ord280
ord265
ord1045
ord1525
ord286
ord1511

kernel32

GetLastError
InitializeCriticalSectionEx
QueryPerformanceCounter
QueryPerformanceFrequency
DeleteCriticalSection
InitializeCriticalSection
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetProcAddress
LocalAlloc
LocalFree
CloseHandle
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess

vcruntime140

__std_terminate
_purecall
memset
__CxxFrameHandler3
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-string-l1-1-0

wcscpy_s

api-ms-win-crt-convert-l1-1-0

_wtof
_wtoi

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_initterm_e
_initterm
_cexit
_configure_narrow_argv
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll

api-ms-win-crt-math-l1-1-0

_CIatan2
_libm_sse2_cos_precise
_libm_sse2_exp_precise
_libm_sse2_log10_precise
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise

Exports

Exports

CreateMODSInstance
FreeMODSFile
GetFileActivationEnergy
GetFileBaseTemp
InitializeMODSCore
LoadMODSFile
SaveMODSFile
UninitializeMODSCore

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Materials.xml
.xml
Microsoft.Deployment.Compression.Cab.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\delivery\Dev\wix37_public\build\obj\ship\x86\Compression.Cab\Microsoft.Deployment.Compression.Cab.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Deployment.Compression.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\delivery\Dev\wix37_public\build\obj\ship\x86\Compression\Microsoft.Deployment.Compression.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MixCommon.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\externals\Mix\MixCommon\obj\Release\MixCommon.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MixFirmware.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\externals\Mix\MixFirmware\obj\Release\MixFirmware.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MixHardware.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\externals\Mix\MixHardware\obj\Release\MixHardware.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MoistureTables.xml
.xml
NetSparkle.dll
.dll windows:5 windows x86 arch:x86

582266470c106c9a74da7ac64fc92dca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Dev\WinSparkle\Release\NetSparkle.pdb

Imports

msvcr100

_unlock
__clean_type_info_names_internal
memmove_s
memset
_recalloc
memmove
_CxxThrowException
wmemcpy_s
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??_V@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
memcpy_s
??2@YAPAXI@Z
__CxxUnregisterExceptionObject
?what@exception@std@@UBEPBDXZ
__CxxRegisterExceptionObject
__CxxExceptionFilter
__CxxQueryExceptionSize
_cexit
__FrameUnwindFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
__dllonexit
_lock
_onexit
_except_handler4_common
__CxxDetectRethrow
_crt_debugger_hook

kernel32

HeapReAlloc
WideCharToMultiByte
FreeLibrary
LoadLibraryW
GetProcAddress
InterlockedDecrement
InterlockedIncrement
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapSize
HeapFree
HeapAlloc
HeapDestroy
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetLastError

oleaut32

SysStringByteLen
SysAllocStringByteLen
VariantCopy

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Incref@facet@locale@std@@QAEXXZ

mscoree

_CorDllMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Development\Releases\Json\Working\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pax.Settings.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Dev\Idax5Control\externals\IdaxCommon\3rdparty\Pax.Settings\Code\Pax.Settings\obj\Release\Pax.Settings.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ReportGen.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

AddParameter@8
AddParameterColor2@12
AddParameterColor2W@12
AddParameterColor@4
AddParameterColorW@4
AddParameterW@8
AddPicture2@8
AddPicture2W@8
AddPicture3@8
AddPicture3W@8
AddPicture4@8
AddPicture4W@8
AddPicture@4
AddPictureW@4
ClearLists@0
DesignNewReport@4
DesignNewReportW@4
DesignReport@4
DesignReportW@4
GenerateReport@4
GenerateReportW@4
HaveWord@4
ModifyReport@4
ModifyReportW@4
SetDebugMode@4
SetPicture4Hook@4
SetProgressHook@4

Sections

CODE
Size: 801KB - Virtual size: 801KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ReportGenerator.dll
.dll windows:6 windows x86 arch:x86

107cd88e81ddd015fad8d048f173ac09

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\Release\ReportGenerator.pdb

Imports

mfc140u

ord12348
ord2378
ord290
ord450
ord571
ord12405
ord2520
ord1663
ord1045
ord286
ord1511
ord14604
ord6751
ord14657
ord2383
ord3236
ord4856
ord3009
ord14320
ord5884
ord285
ord5921
ord12763
ord1525
ord265
ord296
ord2389
ord3954
ord2385

kernel32

OutputDebugStringA
RaiseException
GetLastError
SetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DecodePointer
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
CloseHandle
LeaveCriticalSection
EnterCriticalSection
GlobalUnlock
OutputDebugStringW
GlobalLock
InitializeCriticalSectionEx
GlobalSize
GetCurrentProcess
Sleep
GlobalAlloc
FreeLibrary

user32

UnregisterClassW
EmptyClipboard
GetClipboardData
GetClipboardFormatNameW
OpenClipboard
EnumClipboardFormats
RegisterClipboardFormatW
CloseClipboard
SetClipboardData

oleaut32

SysAllocStringByteLen
SysStringByteLen
VariantCopy
SysFreeString

vcruntime140

__std_terminate
__CxxFrameHandler3
__std_exception_destroy
_CxxThrowException
__std_exception_copy
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
memmove
__FrameUnwindFilter
memset

api-ms-win-crt-heap-l1-1-0

free
_recalloc

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_initterm
_initterm_e
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_invalid_parameter_noinfo
_errno
abort

gdi32

CreateEnhMetaFileW
CreateCompatibleDC
CloseEnhMetaFile

msvcp140

?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?_Xlength_error@std@@YAXPBD@Z

mscoree

_CorDllMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 218KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ReportTemplates/Bushing-Graph_A4.doc
.doc windows office2003
ReportTemplates/Bushing-ITC1_A4.doc
.doc windows office2003
ReportTemplates/Bushing_A4.doc
.doc windows office2003
ReportTemplates/DC_A4.doc
.doc windows office2003
ReportTemplates/DF-PF_Exc current_A4.doc
.doc windows office2003
ReportTemplates/DFR-Graph_A4.doc
.doc windows office2003
ReportTemplates/Moisture-Graph_A4.doc
.doc windows office2003
ReportTemplates/PDC_ITC1_A4.doc
.doc windows office2003
ReportTemplates/Quick moisture_A4.doc
.doc windows office2003
ReportTemplates/cs/Bushing-Graph_A4.doc
.doc windows office2003
ReportTemplates/cs/Bushing-ITC1_A4.doc
.doc windows office2003
ReportTemplates/cs/Bushing_A4.doc
.doc windows office2003
ReportTemplates/cs/DC_A4.doc
.doc windows office2003
ReportTemplates/cs/DF-PF_Exc current_A4.doc
.doc windows office2003
ReportTemplates/cs/DFR-Graph_A4.doc
.doc windows office2003
ReportTemplates/cs/Moisture-Graph_A4.doc
.doc windows office2003
ReportTemplates/cs/Quick moisture_A4.doc
.doc windows office2003
ReportTemplates/de/Bushing-Graph_A4.doc
.doc windows office2003
ReportTemplates/de/Bushing-ITC1_A4.doc
.doc windows office2003
ReportTemplates/de/Bushing_A4.doc
.doc windows office2003
ReportTemplates/de/DC_A4.doc
.doc windows office2003
ReportTemplates/de/DF-PF_Exc current_A4.doc
.doc windows office2003
ReportTemplates/de/DFR-Graph_A4.doc
.doc windows office2003
ReportTemplates/de/Moisture-Graph_A4.doc
.doc windows office2003
ReportTemplates/de/Quick moisture_A4.doc
.doc windows office2003
ReportTemplates/en-Letter/Bushing-Graph_Letter.doc
.doc windows office2003
ReportTemplates/en-Letter/Bushing_Letter.doc
.doc windows office2003
ReportTemplates/en-Letter/DC_Letter.doc
.doc windows office2003
ReportTemplates/en-Letter/DF-PF_Exc current_Letter.doc
.doc windows office2003
ReportTemplates/en-Letter/DFR-Graph_Letter.doc
.doc windows office2003
ReportTemplates/en-Letter/Moisture-Graph_Letter.doc
.doc windows office2003
ReportTemplates/en-Letter/Quick moisture_Letter.doc
.doc windows office2003
ReportTemplates/es-Letter/Bushing-Graph_Letter.doc
.doc windows office2003
ReportTemplates/es-Letter/Bushing-ITC1_A4.doc
.doc windows office2003
ReportTemplates/es-Letter/Bushing_Letter.doc
.doc windows office2003
ReportTemplates/es-Letter/DC_Letter.doc
.doc windows office2003
ReportTemplates/es-Letter/DF-PF_Exc current_Letter.doc
.doc windows office2003
ReportTemplates/es-Letter/DFR-Graph_Letter.doc
.doc windows office2003
ReportTemplates/es-Letter/Moisture-Graph_Letter.doc
.doc windows office2003
ReportTemplates/es-Letter/Quick moisture_Letter.doc
.doc windows office2003
ReportTemplates/es/Bushing-Graph_A4.doc
.doc windows office2003
ReportTemplates/es/Bushing-ITC1_A4.doc
.doc windows office2003
ReportTemplates/es/Bushing_A4.doc
.doc windows office2003
ReportTemplates/es/DC_A4.doc
.doc windows office2003
ReportTemplates/es/DF-PF_Exc current_A4.doc
.doc windows office2003
ReportTemplates/es/DFR-Graph_A4.doc
.doc windows office2003
ReportTemplates/es/Moisture-Graph_A4.doc
.doc windows office2003
ReportTemplates/es/Quick moisture_A4.doc
.doc windows office2003
ReportTemplates/ru/Bushing-Graph_A4.doc
.doc windows office2003
ReportTemplates/ru/Bushing-ITC1_A4.doc
.doc windows office2003
ReportTemplates/ru/Bushing_A4.doc
.doc windows office2003
ReportTemplates/ru/DC_A4.doc
.doc windows office2003
ReportTemplates/ru/DF-PF_Exc current_A4.doc
.doc windows office2003
ReportTemplates/ru/DFR-Graph_A4.doc
.doc windows office2003
ReportTemplates/ru/Moisture-Graph_A4.doc
.doc windows office2003
ReportTemplates/ru/Quick moisture_A4.doc
.doc windows office2003
ReportTemplates/sv/Bushing-Graph_A4.doc
.doc windows office2003
ReportTemplates/sv/Bushing-ITC1_A4.doc
.doc windows office2003
ReportTemplates/sv/Bushing_A4.doc
.doc windows office2003
ReportTemplates/sv/DC_A4.doc
.doc windows office2003
ReportTemplates/sv/DF-PF_Exc current_A4.doc
.doc windows office2003
ReportTemplates/sv/DFR-Graph_A4.doc
.doc windows office2003
ReportTemplates/sv/Moisture-Graph_A4.doc
.doc windows office2003
ReportTemplates/sv/Quick moisture_A4.doc
.doc windows office2003
ReportTemplates/tr/Bushing-Graph_A4tr.doc
.doc windows office2003
ReportTemplates/tr/Bushing-ITC1_A4tr.doc
.doc windows office2003
ReportTemplates/tr/Bushing_A4tr.doc
.doc windows office2003
ReportTemplates/tr/DC_A4tr.doc
.doc windows office2003
ReportTemplates/tr/DF-PF_Exc current_A4tr.doc
.doc windows office2003
ReportTemplates/tr/DFR-Graph_A4tr.doc
.doc windows office2003
ReportTemplates/tr/Moisture-Graph_A4tr.doc
.doc windows office2003
ReportTemplates/tr/Quick moisture_A4tr.doc
.doc windows office2003
Runtime/vcredist_x86.exe
.exe windows:5 windows x86 arch:x86

1a5cdbf711fee14b077e599d13fddab2

Code Sign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

54:9e:97:dc:85:de:d3:72:5f:d9:ec:ed:96:61:81:86:f5:68:01:7c:d7:1c:a5:f0:5f:36:a8:59:5f:4d:ce:b3
Signer

Actual PE Digest

54:9e:97:dc:85:de:d3:72:5f:d9:ec:ed:96:61:81:86:f5:68:01:7c:d7:1c:a5:f0:5f:36:a8:59:5f:4d:ce:b3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW

user32

GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

gdi32

CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW

ole32

CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SourceGrid.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 484KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Standards.xml
.xml
TemplateSelection.xml
.xml
Templates/Dual/!Test Capacitor.idax
.xml
Templates/Dual/Transformer, 2-Winding.idax
.xml
Templates/Dual/Transformer, 3-Winding.idax
.xml
Templates/Dual/Transformer, Auto w Tertiary.idax
.xml
Templates/Single/!General Specimen.idax
.xml
Templates/Single/!Test Capacitor.idax
.xml
Templates/Single/Bushings.idax
.xml
Templates/Single/Cable, Paper.idax
.xml
Templates/Single/Instrument Tx, CT w Test-tap.idax
.xml
Templates/Single/Instrument Tx, CT w-o Test-tap.idax
.xml
Templates/Single/Reactor.idax
.xml
Templates/Single/Rotating Machine.idax
.xml
Templates/Single/Transformer, 2-Winding.idax
.xml
Templates/Single/Transformer, 3-Winding.idax
.xml
Templates/Single/Transformer, Auto w Tertiary.idax
.xml
Templates/Single/Transformer, Auto w-o Tertiary.idax
.xml
Templates/Single/Voltage Transformer.idax
.xml
TestLeads.xml
.xml
TestObjectDesigner.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\GitLab-Runner\builds\cGUMUf98\0\idax\idax5\TestObjectDesigner\obj\x86\Release\TestObjectDesigner.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TestObjects/!General Specimen.xml
TestObjects/2w transformer - Moisture.xml
TestObjects/2w transformer - PFDF.xml
TestObjects/2w transformer.xml
TestObjects/3w transformer - Moisture.xml
TestObjects/3w transformer - PFDF.xml
TestObjects/3w transformer.xml
TestObjects/Autotransformer with tertiary winding - Moisture.xml
TestObjects/Autotransformer with tertiary winding - PFDF.xml
TestObjects/Autotransformer with tertiary winding.xml
TestObjects/Autotransformer without tertiary winding - Moisture.xml
TestObjects/Autotransformer without tertiary winding - PFDF.xml
TestObjects/Autotransformer without tertiary winding.xml
TestObjects/Bushing - ITC1.xml
TestObjects/Bushing - PFDF.xml
TestObjects/Bushing.xml
TestObjects/CT - ITC1.xml
TestObjects/CT - PFDF.xml
TestObjects/CT with Tap - ITC1.xml
TestObjects/CT with Tap - PFDF.xml
TestObjects/CT with Tap.xml
TestObjects/CT.xml
TestObjects/Cable.xml
TestObjects/Rotating Machine.xml
TestObjects/Test Capacitor.xml
TestObjects/Voltage Transfomer.xml
TestObjects/b_Reactor - PFDF.xml
TestObjects/b_Reactor.xml
TuesPechkin.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\grayd\Documents\GitHub\Pechkin\TuesPechkin\obj\Release\TuesPechkin.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Uninstall.exe.nsis
WinSparkle.dll
.dll windows:5 windows x86 arch:x86

3c441b2048bcc0365a0aef38090b81cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Dev\winsparkle\Release\WinSparkle.pdb

Imports

wininet

InternetReadFile
InternetOpenUrlA
HttpQueryInfoA
InternetOpenW
InternetCloseHandle

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetModuleHandleA
SetFilePointer
InitializeCriticalSectionAndSpinCount
CreateFileW
LoadLibraryA
GetLocaleInfoW
WriteConsoleA
ExitProcess
WriteConsoleW
SetStdHandle
FlushFileBuffers
FreeLibrary
SetEndOfFile
GetProcessHeap
ReadFile
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetVersionExW
GetEnvironmentVariableW
DebugBreak
FormatMessageW
SetCurrentDirectoryW
GetFileAttributesW
LoadLibraryW
GetTempPathW
FindFirstFileW
FindClose
WaitForMultipleObjects
OutputDebugStringW
FreeConsole
GetConsoleScreenBufferInfo
ReadConsoleOutputCharacterA
SetConsoleCursorPosition
FillConsoleOutputCharacterW
SetErrorMode
GetCommandLineW
MulDiv
HeapSize
GetConsoleMode
GetConsoleCP
GetModuleFileNameA
GetStdHandle
WriteFile
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleW
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
HeapReAlloc
HeapAlloc
GetCommandLineA
CreateThread
GetCurrentThreadId
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
MultiByteToWideChar
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
CreateDirectoryW
ResumeThread
CloseHandle
CreateEventW
RaiseException
SetEvent
WaitForSingleObject
DeleteCriticalSection
LockResource
GetModuleFileNameW
SizeofResource
InitializeCriticalSection
LoadResource
FindResourceA
LocalFree
OutputDebugStringA
GetLastError
FormatMessageA
DeleteFileW
Sleep
EnterCriticalSection
LeaveCriticalSection
GetFullPathNameW
GetDriveTypeA
SetEnvironmentVariableW
GetCurrentDirectoryA
GetConsoleOutputCP

advapi32

RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

shell32

ExtractIconW
ExtractIconExW
DragFinish
DragQueryFileW
DragAcceptFiles
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
DragQueryPoint
SHGetFolderPathW
ShellExecuteW

ole32

OleInitialize
OleUninitialize
OleLockRunning
OleSetContainedObject
OleRun
CoCreateInstance

comctl32

ImageList_Add
ImageList_Destroy
ImageList_Create
ord17
ImageList_Replace

user32

GetClassNameW
SetForegroundWindow
SetActiveWindow
ValidateRect
GetMessageW
SetMenu
DrawFrameControl
DrawIconEx
DestroyCursor
GetWindowDC
BeginPaint
EndPaint
MapWindowPoints
FindWindowExW
ChangeDisplaySettingsW
EnumDisplaySettingsW
GetActiveWindow
GetAsyncKeyState
VkKeyScanW
GetMessageTime
EndDeferWindowPos
BeginDeferWindowPos
GetWindow
FillRect
GetUpdateRgn
GetSysColor
InflateRect
IsWindowVisible
IsWindowEnabled
IsDialogMessageW
CallWindowProcW
DeferWindowPos
ClientToScreen
ScreenToClient
UpdateWindow
RedrawWindow
SetParent
GetParent
WindowFromPoint
IsWindow
ScrollWindow
EnableScrollBar
SetScrollInfo
GetScrollInfo
SetCursorPos
SetCursor
PtInRect
GetWindowTextW
GetCapture
ReleaseCapture
SetCapture
EnableWindow
GetFocus
SetFocus
FlashWindow
GetMenu
AdjustWindowRectEx
GetClientRect
SetWindowRgn
DrawMenuBar
EnableMenuItem
GetSystemMenu
SetWindowPos
GetDesktopWindow
SetWindowLongW
GetWindowLongW
GetWindowPlacement
IsIconic
IsZoomed
ShowWindow
BringWindowToTop
SetWindowTextW
MoveWindow
CreateDialogIndirectParamW
GetWindowRect
GetSystemMetrics
CreateIconIndirect
ReleaseDC
GetDC
GetIconInfo
DestroyIcon
GetKeyState
LoadCursorW
MsgWaitForMultipleObjects
KillTimer
PeekMessageW
DefWindowProcW
DestroyWindow
SendMessageW
UnregisterClassW
PostThreadMessageW
MessageBoxW
CreateWindowExW
RegisterClassW
PostMessageW
GetWindowTextLengthW
DispatchMessageW
TranslateMessage
InvalidateRect
GetDoubleClickTime
SystemParametersInfoW
OffsetRect
DrawFocusRect
DrawTextW
CopyRect
LoadIconW
LoadImageW
LoadBitmapW
GetDlgItem
CreateDialogParamW
UnhookWindowsHookEx
SetWindowsHookExW
GetCursorPos
CallNextHookEx
SetTimer

gdi32

Polyline
PolyPolygon
Polygon
SetPolyFillMode
SetPixel
Arc
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
SelectObject
BitBlt
Pie
GetPixel
ExtFloodFill
GetBkColor
SetMapMode
SelectClipRgn
ExtSelectClipRgn
GetClipBox
SetStretchBltMode
LineTo
MoveToEx
GetStockObject
CreateSolidBrush
CreatePen
SetBkColor
SetTextColor
GetDeviceCaps
CreateFontIndirectW
GetOutlineTextMetricsW
Rectangle
RoundRect
Ellipse
MaskBlt
ExtTextOutW
SetBrushOrgEx
SetROP2
GetCharABCWidthsW
GetTextExtentExPointW
SetViewportExtEx
SetWindowExtEx
SetViewportOrgEx
SetWindowOrgEx
StretchBlt
StretchDIBits
CreateDIBSection
GetDIBits
GetDIBColorTable
CreateDIBitmap
CreatePatternBrush
CreateHatchBrush
ExtCreatePen
SaveDC
RestoreDC
CombineRgn
GetRgnBox
SetBkMode
EqualRgn
PtInRegion
RectInRegion
CreateBitmap
GetObjectW
CreateRectRgn
ExcludeClipRect
GetTextMetricsW
GetTextExtentPoint32W
GdiFlush
OffsetRgn
ExtCreateRegion
DeleteObject
GetRegionData

oleaut32

SafeArrayCreate
VariantInit
SafeArrayAccessData
SafeArrayDestroy
SysFreeString
SafeArrayUnaccessData
SysAllocString

Exports

Exports

win_sparkle_check_update_with_ui
win_sparkle_cleanup
win_sparkle_init
win_sparkle_set_app_details
win_sparkle_set_appcast_url
win_sparkle_set_registry_path

Sections

.text
Size: 591KB - Virtual size: 591KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
firmware.bin
.zip
0.xml
.xml
idax.txt
index.xml
system.exo
wkhtmltox.dll
.dll windows:4 windows x86 arch:x86

8b77460634eef8d30c3178433b16799d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

CopySid
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
DeregisterEventSource
FreeSid
GetLengthSid
GetTokenInformation
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegisterEventSourceW
ReportEventW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

gdi32

AbortDoc
BeginPath
BitBlt
CloseFigure
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateEllipticRgn
CreateFontIndirectW
CreatePalette
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
EndDoc
EndPage
EndPath
EnumFontFamiliesExW
ExtCreatePen
ExtTextOutW
FillPath
GdiFlush
GetBkMode
GetCharABCWidthsFloatW
GetCharABCWidthsW
GetCurrentObject
GetDIBits
GetDeviceCaps
GetFontData
GetGlyphOutlineW
GetNearestPaletteIndex
GetObjectW
GetOutlineTextMetricsW
GetPaletteEntries
GetRegionData
GetRgnBox
GetStockObject
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
GetWorldTransform
LineTo
MoveToEx
OffsetRgn
PolyBezierTo
PtInRegion
RealizePalette
ResetDCW
RestoreDC
SaveDC
SelectClipPath
SelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetGraphicsMode
SetPolyFillMode
SetTextAlign
SetTextColor
SetWorldTransform
StartDocW
StartPage
StretchBlt
StrokePath

imm32

ImmAssociateContext
ImmGetCompositionStringW
ImmGetContext
ImmGetDefaultIMEWnd
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionFontW
ImmSetCompositionWindow

kernel32

AddVectoredExceptionHandler
AreFileApisANSI
CloseHandle
CompareStringW
ConvertFiberToThread
ConvertThreadToFiber
CopyFileW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFiber
CreateFileA
CreateFileMappingW
CreateFileW
CreateProcessW
CreateSemaphoreA
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DeleteFiber
DeleteFileA
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileExW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeLibrary
GetCommandLineW
GetConsoleMode
GetCurrencyFormatW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDriveTypeW
GetEnvironmentVariableW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetFullPathNameW
GetHandleInformation
GetLastError
GetLocalTime
GetLocaleInfoW
GetLogicalDrives
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetProfileStringW
GetStartupInfoW
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeFormatW
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultUILanguage
GetVersion
GetVersionExW
GetVolumeInformationW
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLanguageGroup
IsValidLocale
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MoveFileW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleA
ReadConsoleW
ReadFile
ReadProcessMemory
ReleaseSemaphore
RemoveDirectoryW
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetConsoleMode
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetFilePointerEx
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
SwitchToFiber
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile
lstrcmpW

msvcrt

___mb_cur_max_func
__doserrno
__pioinfo
__setusermatherr
_amsg_exit
_beginthreadex
_clearfp
_close
_control87
_endthreadex
_errno
_exit
_filelengthi64
_fileno
_flushall
_fstat64
_ftime
_get_osfhandle
_getdrive
_initterm
_iob
_lock
_lseek
_lseeki64
_msize
_onexit
_open_osfhandle
_read
_setjmp3
_setmode
_vsnwprintf
_strdup
_stricmp
_strnicmp
_tzset
_ultoa
_unlock
_vsnprintf
_waccess
_wchmod
_wfopen
_wgetdcwd
_wgetenv
_write
abort
acos
asin
atan
atof
atoi
calloc
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
frexp
fseek
fsetpos
ftell
fwprintf
fwrite
getc
getenv
getwc
isalpha
islower
isspace
isupper
iswctype
isxdigit
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
mktime
localtime
gmtime
printf
putc
puts
putwc
qsort
raise
rand
realloc
remove
setlocale
setvbuf
signal
sprintf
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strrchr
strspn
strstr
strtol
strtoul
strxfrm
tan
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
time
wcscoll
wcscpy
wcsftime
wcslen
wcsrchr
wcsstr
wcsxfrm
_stat
_snwprintf
_tzname
longjmp
_nextafter
_write
_strdup
_read
_putenv
_fileno
_fdopen
_close

ole32

CoCreateGuid
CoCreateInstance
CoGetMalloc
CoInitialize
CoLockObjectExternal
CoTaskMemFree
CoUninitialize
DoDragDrop
OleFlushClipboard
OleGetClipboard
OleInitialize
OleIsCurrentClipboard
OleSetClipboard
OleUninitialize
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StringFromGUID2

shell32

SHGetFileInfoW
ShellExecuteW
Shell_NotifyIconW

shlwapi

PathCombineW
PathRemoveFileSpecW
SHGetValueW

user32

AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcW
ChangeClipboardChain
CharNextExA
ClientToScreen
ClipCursor
CreateCaret
CreateCursor
CreateIconIndirect
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCaret
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageW
DrawIconEx
EnableMenuItem
EndPaint
FindWindowExW
FindWindowW
FlashWindowEx
GetActiveWindow
GetAsyncKeyState
GetCaretBlinkTime
GetClassInfoW
GetClientRect
GetClipboardFormatNameW
GetCursorPos
GetDC
GetDesktopWindow
GetDoubleClickTime
GetFocus
GetIconInfo
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardState
GetLastInputInfo
GetMenu
GetMessageW
GetParent
GetProcessWindowStation
GetPropW
GetQueueStatus
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetUpdateRect
GetUserObjectInformationW
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowRgn
GetWindowThreadProcessId
HideCaret
InvalidateRect
InvalidateRgn
IsChild
IsIconic
IsWindowVisible
IsZoomed
KillTimer
LoadCursorW
LoadIconW
LoadImageW
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxW
MoveWindow
MsgWaitForMultipleObjectsEx
PeekMessageW
PostMessageW
RegisterClassExW
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
ScreenToClient
ScrollWindowEx
SendMessageW
SetCapture
SetCaretBlinkTime
SetCaretPos
SetClipboardViewer
SetCursor
SetCursorPos
SetDoubleClickTime
SetFocus
SetForegroundWindow
SetMenuItemInfoW
SetParent
SetPropW
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoW
ToAscii
ToUnicode
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
ValidateRgn
WindowFromPoint

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winmm

timeBeginPeriod
timeEndPeriod

winspool.drv

ClosePrinter
DeviceCapabilitiesW
EnumFormsW
EnumPrintersW
GetPrinterW
OpenPrinterW

ws2_32

WSAAccept
WSAAsyncSelect
WSACleanup
WSAConnect
WSAGetLastError
WSAHtonl
WSAHtons
WSAIoctl
WSANtohl
WSANtohs
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSASetLastError
WSASocketW
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
gethostname
getnameinfo
getpeername
getsockname
getsockopt
htonl
inet_addr
ioctlsocket
listen
ntohl
ntohs
recv
select
send
setsockopt
socket

Exports

Exports

_Z11handleErrorbi
_ZN11wkhtmltopdf12PdfConverter11addResourceERKNS_8settings9PdfObjectEPK7QString
_ZN11wkhtmltopdf12PdfConverter11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf12PdfConverter11qt_metacastEPKc
_ZN11wkhtmltopdf12PdfConverter14producingFormsEb
_ZN11wkhtmltopdf12PdfConverter16staticMetaObjectE
_ZN11wkhtmltopdf12PdfConverter18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf12PdfConverter25staticMetaObjectExtraDataE
_ZN11wkhtmltopdf12PdfConverter27millimeterToPointMultiplierE
_ZN11wkhtmltopdf12PdfConverter4privEv
_ZN11wkhtmltopdf12PdfConverter6outputEv
_ZN11wkhtmltopdf12PdfConverterC1ERNS_8settings9PdfGlobalE
_ZN11wkhtmltopdf12PdfConverterC2ERNS_8settings9PdfGlobalE
_ZN11wkhtmltopdf12PdfConverterD0Ev
_ZN11wkhtmltopdf12PdfConverterD1Ev
_ZN11wkhtmltopdf12PdfConverterD2Ev
_ZN11wkhtmltopdf14ImageConverter11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf14ImageConverter11qt_metacastEPKc
_ZN11wkhtmltopdf14ImageConverter16staticMetaObjectE
_ZN11wkhtmltopdf14ImageConverter18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf14ImageConverter25staticMetaObjectExtraDataE
_ZN11wkhtmltopdf14ImageConverter4privEv
_ZN11wkhtmltopdf14ImageConverter6outputEv
_ZN11wkhtmltopdf14ImageConverterC1ERNS_8settings11ImageGlobalEPK7QString
_ZN11wkhtmltopdf14ImageConverterC2ERNS_8settings11ImageGlobalEPK7QString
_ZN11wkhtmltopdf14ImageConverterD0Ev
_ZN11wkhtmltopdf14ImageConverterD1Ev
_ZN11wkhtmltopdf14ImageConverterD2Ev
_ZN11wkhtmltopdf24dumpDefaultTOCStyleSheetER11QTextStreamRNS_8settings14TableOfContentE
_ZN11wkhtmltopdf8settings10LoadGlobalC1Ev
_ZN11wkhtmltopdf8settings10LoadGlobalC2Ev
_ZN11wkhtmltopdf8settings10proxyToStrERKNS0_5ProxyE
_ZN11wkhtmltopdf8settings10strToProxyEPKcPb
_ZN11wkhtmltopdf8settings11ImageGlobal3getEPKc
_ZN11wkhtmltopdf8settings11ImageGlobal3setEPKcRK7QString
_ZN11wkhtmltopdf8settings11ImageGlobalC1Ev
_ZN11wkhtmltopdf8settings11ImageGlobalC2Ev
_ZN11wkhtmltopdf8settings12CropSettingsC1Ev
_ZN11wkhtmltopdf8settings12CropSettingsC2Ev
_ZN11wkhtmltopdf8settings12HeaderFooterC1Ev
_ZN11wkhtmltopdf8settings12HeaderFooterC2Ev
_ZN11wkhtmltopdf8settings13logLevelToStrERKNS0_8LogLevelEPb
_ZN11wkhtmltopdf8settings13pageSizeToStrEN8QPrinter8PageSizeE
_ZN11wkhtmltopdf8settings13strToLogLevelEPKcPb
_ZN11wkhtmltopdf8settings13strToPageSizeEPKcPb
_ZN11wkhtmltopdf8settings13strToUnitRealEPKcPb
_ZN11wkhtmltopdf8settings13unitRealToStrERK5QPairIdN8QPrinter4UnitEEPb
_ZN11wkhtmltopdf8settings14TableOfContentC1Ev
_ZN11wkhtmltopdf8settings14TableOfContentC2Ev
_ZN11wkhtmltopdf8settings14colorModeToStrEN8QPrinter9ColorModeE
_ZN11wkhtmltopdf8settings14strToColorModeEPKcPb
_ZN11wkhtmltopdf8settings16orientationToStrEN8QPrinter11OrientationE
_ZN11wkhtmltopdf8settings16printerModeToStrEN8QPrinter11PrinterModeE
_ZN11wkhtmltopdf8settings16strToOrientationEPKcPb
_ZN11wkhtmltopdf8settings16strToPrinterModeEPKcPb
_ZN11wkhtmltopdf8settings22loadErrorHandlingToStrENS0_8LoadPage17LoadErrorHandlingE
_ZN11wkhtmltopdf8settings22strToLoadErrorHandlingEPKcPb
_ZN11wkhtmltopdf8settings3WebC1Ev
_ZN11wkhtmltopdf8settings3WebC2Ev
_ZN11wkhtmltopdf8settings4SizeC1Ev
_ZN11wkhtmltopdf8settings4SizeC2Ev
_ZN11wkhtmltopdf8settings5ProxyC1Ev
_ZN11wkhtmltopdf8settings5ProxyC2Ev
_ZN11wkhtmltopdf8settings6MarginC1Ev
_ZN11wkhtmltopdf8settings6MarginC2Ev
_ZN11wkhtmltopdf8settings8LoadPage20mediaFilesExtensionsE
_ZN11wkhtmltopdf8settings8LoadPageC1Ev
_ZN11wkhtmltopdf8settings8LoadPageC2Ev
_ZN11wkhtmltopdf8settings9PdfGlobal3getEPKc
_ZN11wkhtmltopdf8settings9PdfGlobal3setEPKcRK7QString
_ZN11wkhtmltopdf8settings9PdfGlobalC1Ev
_ZN11wkhtmltopdf8settings9PdfGlobalC2Ev
_ZN11wkhtmltopdf8settings9PdfObject3getEPKc
_ZN11wkhtmltopdf8settings9PdfObject3setEPKcRK7QString
_ZN11wkhtmltopdf8settings9PdfObjectC1Ev
_ZN11wkhtmltopdf8settings9PdfObjectC2Ev
_ZN11wkhtmltopdf9Converter10phaseCountEv
_ZN11wkhtmltopdf9Converter11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf9Converter11qt_metacastEPKc
_ZN11wkhtmltopdf9Converter12currentPhaseEv
_ZN11wkhtmltopdf9Converter12phaseChangedEv
_ZN11wkhtmltopdf9Converter13httpErrorCodeEv
_ZN11wkhtmltopdf9Converter14progressStringEv
_ZN11wkhtmltopdf9Converter15beginConversionEv
_ZN11wkhtmltopdf9Converter15progressChangedEi
_ZN11wkhtmltopdf9Converter16emitCheckboxSvgsERKNS_8settings8LoadPageE
_ZN11wkhtmltopdf9Converter16phaseDescriptionEi
_ZN11wkhtmltopdf9Converter16staticMetaObjectE
_ZN11wkhtmltopdf9Converter18checkboxSvgChangedERK7QString
_ZN11wkhtmltopdf9Converter18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf9Converter21radiobuttonSvgChangedERK7QString
_ZN11wkhtmltopdf9Converter25checkboxCheckedSvgChangedERK7QString
_ZN11wkhtmltopdf9Converter25staticMetaObjectExtraDataE
_ZN11wkhtmltopdf9Converter28radiobuttonCheckedSvgChangedERK7QString
_ZN11wkhtmltopdf9Converter5errorERK7QString
_ZN11wkhtmltopdf9Converter6cancelEv
_ZN11wkhtmltopdf9Converter7convertEv
_ZN11wkhtmltopdf9Converter7warningERK7QString
_ZN11wkhtmltopdf9Converter8finishedEb
_ZN12MyLooksStyle11qt_metacallEN11QMetaObject4CallEiPPv
_ZN12MyLooksStyle11qt_metacastEPKc
_ZN12MyLooksStyle11radiobuttonE
_ZN12MyLooksStyle14producingFormsEb
_ZN12MyLooksStyle14setCheckboxSvgERK7QString
_ZN12MyLooksStyle16checkbox_checkedE
_ZN12MyLooksStyle16staticMetaObjectE
_ZN12MyLooksStyle17setRadioButtonSvgERK7QString
_ZN12MyLooksStyle18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN12MyLooksStyle19radiobutton_checkedE
_ZN12MyLooksStyle21setCheckboxCheckedSvgERK7QString
_ZN12MyLooksStyle24setRadioButtonCheckedSvgERK7QString
_ZN12MyLooksStyle25staticMetaObjectExtraDataE
_ZN12MyLooksStyle8checkboxE
_ZN12MyLooksStyleC1Ev
_ZN12MyLooksStyleC2Ev
_ZNK11wkhtmltopdf12PdfConverter10metaObjectEv
_ZNK11wkhtmltopdf12PdfConverter14globalSettingsEv
_ZNK11wkhtmltopdf14ImageConverter10metaObjectEv
_ZNK11wkhtmltopdf9Converter10metaObjectEv
_ZNK12MyLooksStyle10metaObjectEv
_ZNK12MyLooksStyle13drawPrimitiveEN6QStyle16PrimitiveElementEPK12QStyleOptionP8QPainterPK7QWidget
_ZTI12MyLooksStyle
_ZTIN11wkhtmltopdf12PdfConverterE
_ZTIN11wkhtmltopdf14ImageConverterE
_ZTIN11wkhtmltopdf9ConverterE
_ZTV12MyLooksStyle
_ZTVN11wkhtmltopdf12PdfConverterE
_ZTVN11wkhtmltopdf14ImageConverterE
_ZTVN11wkhtmltopdf9ConverterE
wkhtmltoimage_convert
wkhtmltoimage_convert@4
wkhtmltoimage_create_converter
wkhtmltoimage_create_converter@8
wkhtmltoimage_create_global_settings
wkhtmltoimage_create_global_settings@0
wkhtmltoimage_current_phase
wkhtmltoimage_current_phase@4
wkhtmltoimage_deinit
wkhtmltoimage_deinit@0
wkhtmltoimage_destroy_converter
wkhtmltoimage_destroy_converter@4
wkhtmltoimage_destroy_global_settings@4
wkhtmltoimage_extended_qt
wkhtmltoimage_extended_qt@0
wkhtmltoimage_get_global_setting
wkhtmltoimage_get_global_setting@16
wkhtmltoimage_get_output
wkhtmltoimage_get_output@8
wkhtmltoimage_http_error_code
wkhtmltoimage_http_error_code@4
wkhtmltoimage_init
wkhtmltoimage_init@4
wkhtmltoimage_phase_count
wkhtmltoimage_phase_count@4
wkhtmltoimage_phase_description
wkhtmltoimage_phase_description@8
wkhtmltoimage_progress_string
wkhtmltoimage_progress_string@4
wkhtmltoimage_set_error_callback
wkhtmltoimage_set_error_callback@8
wkhtmltoimage_set_finished_callback
wkhtmltoimage_set_finished_callback@8
wkhtmltoimage_set_global_setting
wkhtmltoimage_set_global_setting@12
wkhtmltoimage_set_phase_changed_callback
wkhtmltoimage_set_phase_changed_callback@8
wkhtmltoimage_set_progress_changed_callback
wkhtmltoimage_set_progress_changed_callback@8
wkhtmltoimage_set_warning_callback
wkhtmltoimage_set_warning_callback@8
wkhtmltoimage_version
wkhtmltoimage_version@0
wkhtmltopdf_add_object
wkhtmltopdf_add_object@12
wkhtmltopdf_convert
wkhtmltopdf_convert@4
wkhtmltopdf_create_converter
wkhtmltopdf_create_converter@4
wkhtmltopdf_create_global_settings
wkhtmltopdf_create_global_settings@0
wkhtmltopdf_create_object_settings
wkhtmltopdf_create_object_settings@0
wkhtmltopdf_current_phase
wkhtmltopdf_current_phase@4
wkhtmltopdf_deinit
wkhtmltopdf_deinit@0
wkhtmltopdf_destroy_converter
wkhtmltopdf_destroy_converter@4
wkhtmltopdf_destroy_global_settings
wkhtmltopdf_destroy_global_settings@4
wkhtmltopdf_destroy_object_settings
wkhtmltopdf_destroy_object_settings@4
wkhtmltopdf_extended_qt
wkhtmltopdf_extended_qt@0
wkhtmltopdf_get_global_setting
wkhtmltopdf_get_global_setting@16
wkhtmltopdf_get_object_setting
wkhtmltopdf_get_object_setting@16
wkhtmltopdf_get_output
wkhtmltopdf_get_output@8
wkhtmltopdf_http_error_code
wkhtmltopdf_http_error_code@4
wkhtmltopdf_init
wkhtmltopdf_init@4
wkhtmltopdf_phase_count
wkhtmltopdf_phase_count@4
wkhtmltopdf_phase_description
wkhtmltopdf_phase_description@8
wkhtmltopdf_progress_string
wkhtmltopdf_progress_string@4
wkhtmltopdf_set_error_callback
wkhtmltopdf_set_error_callback@8
wkhtmltopdf_set_finished_callback
wkhtmltopdf_set_finished_callback@8
wkhtmltopdf_set_global_setting
wkhtmltopdf_set_global_setting@12
wkhtmltopdf_set_object_setting
wkhtmltopdf_set_object_setting@12
wkhtmltopdf_set_phase_changed_callback
wkhtmltopdf_set_phase_changed_callback@8
wkhtmltopdf_set_progress_changed_callback
wkhtmltopdf_set_progress_changed_callback@8
wkhtmltopdf_set_warning_callback
wkhtmltopdf_set_warning_callback@8
wkhtmltopdf_version
wkhtmltopdf_version@0

Sections

.text
Size: 37.3MB - Virtual size: 37.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 61KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9c0657252137ac61c1eeeba4c021000

Code Sign

69:46:b6:da:b1:23:70:d9:ed:ce:80:15:7f:b1:94:34Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

c5:c9:8b:f4:65:5f:28:ab:98:f7:60:fa:96:1c:a1:99:48:9b:ba:01:dc:ff:e8:f5:ea:0a:96:0f:cc:20:7a:2bSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 149KB

.ndata Size: - Virtual size: 72KB

.rsrc Size: 14KB - Virtual size: 13KB

1f1fddd20def884fc86e064d8f2333ae

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 625B

.rdata Size: 512B - Virtual size: 439B

.data Size: 512B - Virtual size: 164B

.reloc Size: 512B - Virtual size: 210B

610235b90207a63ccf481f0d4375d329

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

04281f88c3d826e409dc7c24629e7efc

Headers

File Characteristics

Imports

kernel32

user32

wsock32

wininet

Exports

Exports

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 620B

69:46:b6:da:b1:23:70:d9:ed:ce:80:15:7f:b1:94:34
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

c5:c9:8b:f4:65:5f:28:ab:98:f7:60:fa:96:1c:a1:99:48:9b:ba:01:dc:ff:e8:f5:ea:0a:96:0f:cc:20:7a:2b
Signer

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 149KB

.ndata
Size: - Virtual size: 72KB

.rsrc
Size: 14KB - Virtual size: 13KB

.text
Size: 1024B - Virtual size: 625B

.rdata
Size: 512B - Virtual size: 439B

.data
Size: 512B - Virtual size: 164B

.reloc
Size: 512B - Virtual size: 210B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 620B

.data
Size: 512B - Virtual size: 64B

.reloc
Size: 512B - Virtual size: 232B

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 322KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 867B

.data
Size: 512B - Virtual size: 104B

.reloc
Size: 1024B - Virtual size: 636B

.text
Size: 1024B - Virtual size: 700B

.rdata
Size: 1024B - Virtual size: 705B

.data
Size: 512B - Virtual size: 88B

.reloc
Size: 512B - Virtual size: 240B

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:05:a2:30:00:00:00:00:00:08
Certificate

d6:d5:21:44:87:a4:87:f6:84:c8:27:2e:90:f4:8d:98:d2:12:c9:41
Signer