VMFS_Recovery[.]exe

resource	yara_rule
static1/unpack001/DiskInternals.Preview.dll	vmprotect

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

VMFS_Recovery.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 411c917f6338e6126787d7e5ecc318913581fb5a2bfc5d0548eb0b41e3b3af7a
MD5 c89ba2ec32d1e45808c324a271ae99d9
SHA1 b37dcc340a65b6e6aa2a0c4e84631fb2a930933d
SHA512 bad604b496842e109279b2942a556b46a367332ee6a5c0c6190a7ea5d914dcf5cea2737ecf5fbf38340dd4c38cdbaff13de9e289d4e27b3e5231ad4e66a67a28
SSDEEP 1572864:XdkHfj/WgbPIpM/RWVBltvQW3dIXsCF1zyISuxtxVZ1tw:XdIjVIpoYBgW3W8CF1zyIvtxLw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

56:8d:78:cf:2f:27:a7:a0:d6:d8:b9:64:97:10:a4:2c:4d:a0:d1:3e:ad:9d:24:12:b9:71:d4:26:b8:41:67:06

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Jun 4, 2024

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

33:72:af:9d:6f:a0:a4:83:81:d7:57:0d:01:36:b0:43:d5:2d:24:c6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Jun 4, 2024

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13564

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
MD5 4add245d4ba34b04f213409bfe504c07
SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-wizard.bmp

SHA256 60c39643de7e93e9f539d5818a550ae0cd8630fea7f868017ec1e1547ceb2b66
MD5 b9ca14f8c20352b674928e1828ec881f
SHA1 89a5be1913fcebaf3df202bb180ca5b2737d8dd8
SHA512 17181a3e0e890036f5ef431d07b67597e345265e106bbc45e2fba35e518cbb2e3ed624cacdac5fa3bc2aa42f9b8e8ba6cdde64c08d1872260c7637cd26571cf5
SSDEEP 3072:UqQG3i7wHFqCWdDosoemKSmEkskkkkkkkkYikkkkkkGkkkj8M/:U1G3i7wlqCWZoSmKSJ8M/
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
MD5 1d8f01a83ddd259bc339902c1d33c8f1
SHA1 9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
SHA512 28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
SSDEEP 96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DiskInternals.Preview.dll

IMPHASH 4e65df08a08f1fb10440869399f9d808
SHA256 35527d3a185f68a10cf93aaa46bfccdc1562c1ea26b73a72045ffb6b71c543fc
MD5 fef9bbb22b937ebae7c896f0627d0768
SHA1 13c8f4a5b030914ba1fc464fb95b4d829be1edcf
SHA512 b4b06eaaab63d4ee274d560da62f06cbd41d62248e91a01ac7cd9d094c683791149cbd0074bac94162cdb8361e25af0ebd9967358277c0034625c66e266d5922
SSDEEP 196608:GshBMFrLIZhqBVeEO9MlAhsyJ2+OQCGFfb7LHKtlQRB:GshBMFnbeEYPhdbCy7mtcB
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

VMProtect packed file

Detects executables packed with VMProtect commercial packer.

vmprotect

Digest

9d:f5:9e:f0:ac:c8:00:05:7c:e5:2b:3b:00:f8:e4:f2:31:b4:90:c2:7f:fc:10:31:4f:c8:b5:8a:d2:ad:b4:6b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Jun 2, 2024

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

a8:13:e9:1e:5f:98:7a:66:31:d4:79:99:f7:b5:a0:d8:81:4f:1e:48

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Jun 2, 2024

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

5

Entry point

14879137

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SafeArrayPtrOfIndex GetErrorInfo

advapi32

RegQueryValueExW RegSetValueExW

user32

MessageBoxA SetClassLongW EnumDisplayMonitors GetProcessWindowStation GetProcessWindowStation GetUserObjectInformationW

kernel32

GetVersion GetProcAddress GetVersionExA GetVersionExW GetVersion Sleep VerSetConditionMask AttachConsole GetProcAddress VirtualQuery LocalAlloc LocalFree GetModuleFileNameW GetProcessAffinityMask SetProcessAffinityMask SetThreadAffinityMask Sleep ExitProcess FreeLibrary LoadLibraryA GetModuleHandleA GetProcAddress

gdi32

WidenPath GetRandomRgn

version

VerQueryValueW

ole32

CreateStreamOnHGlobal CoCreateGuid

comctl32

InitializeFlatSB

msvcrt

isxdigit

shell32

SHGetFileInfoA ILFree

wininet

InternetReadFile

comdlg32

ChooseColorW

winspool.drv

OpenPrinterW GetDefaultPrinterW

oleacc

AccessibleObjectFromWindow

winmm

timeGetTime

gdiplus

GdipGetImageEncoders GdipDisposeImage

wtsapi32

WTSSendMessageW

Name

.text

Size

Virtual Size

9.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

767KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

350KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

240B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

33B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vmp0

Size

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.vmp1

Size

10.4MB

Virtual Size

10.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

47KB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

License.txt

SHA256 0d00c0c11c4409f50f860b6b414fdbf051e56164b00ec5773f4d7fb887d85774
MD5 c5a8502e97f9859ffe3c99453a3c0fd2
SHA1 23c27f31957626d9b151631eac13927704645554
SHA512 f0b36f2002994754cc5d055b52f44d920556fd5682c41f409de2376487e0339f0bc25734fe81ab513ac4842fe9f72d0d7a78e19598bd8178e33fb3a7b6583b94
SSDEEP 96:eH6IuUiq82nG2793hnIXOTkr3HmB6EvRwcOYibeND8T:Su6RjA+6HmbJwrCtg
MD5 SHA1 SHA512 SSDEEP

av/SDL2.dll

IMPHASH 907496b88ebc992364a5a4373ee3f21e
SHA256 f7d75b5ec634b0726394f38ba0e6b0445a8791cd67d893210436ac38467d3b41
MD5 099dbe0f220ad83c4f4dbaa9d2251e8c
SHA1 28d4d74f91e545cbe075fd5e2a03ffbe4350143b
SHA512 421b39cc790e29af60bcd8e75ad2f8b18b049183d1d0dd87812f8c371c0b46ec55462af60ea7875410993d8c5af2b6ad03510f3d9f13980ce8ca928fc98fbafa
SSDEEP 24576:rYNlQTkQrDqBSzscm0fP12fOmkBBeb7LVNpWAJqiuv0h6Llefgwn0TSfMY3TCosl:i+WOsc7RsdE9RLa/r/fHc/d/xHq/z/XW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

ca:62:2a:1d:8f:b3:6d:5c:ef:fc:3e:95:8d:51:56:65:7b:87:f0:51:2e:a2:8b:3b:27:3d:5e:77:ca:51:ee:97

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

f4:fc:5f:97:ce:5a:a0:f9:dd:a9:2a:40:27:38:66:8e:27:89:9a:ca

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

4914

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

gdi32

BitBlt ChoosePixelFormat CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateFontIndirectW CreateFontW CreatePen CreateRectRgn CreateSolidBrush DeleteDC DeleteObject DescribePixelFormat ExtTextOutW GetDIBits GetDeviceCaps GetDeviceGammaRamp GetPixelFormat GetTextExtentPoint32A GetTextExtentPoint32W GetTextMetricsW Rectangle SelectObject SetBkMode SetDeviceGammaRamp SetPixelFormat SetTextColor SwapBuffers

imm32

ImmAssociateContext ImmGetCandidateListW ImmGetCompositionStringW ImmGetContext ImmGetIMEFileNameA ImmNotifyIME ImmReleaseContext ImmSetCompositionStringW ImmSetCompositionWindow

kernel32

AttachConsole CancelIo CloseHandle CompareStringA CreateDirectoryW CreateEventA CreateEventW CreateFileA CreateFileW CreateSemaphoreW CreateThread CreateToolhelp32Snapshot DeleteCriticalSection DeviceIoControl EnterCriticalSection ExitProcess FormatMessageW FreeLibrary GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentVariableA GetFileSizeEx GetLastError GetLocaleInfoA GetModuleFileNameW GetModuleHandleW GetOverlappedResult GetProcAddress GetStdHandle GetSystemInfo GetSystemPowerStatus GetSystemTimeAsFileTime GetTickCount GlobalAlloc GlobalLock GlobalMemoryStatusEx GlobalUnlock InitializeCriticalSection InitializeCriticalSectionAndSpinCount IsDebuggerPresent LeaveCriticalSection LoadLibraryA LoadLibraryW LocalFree MulDiv OutputDebugStringW Process32First Process32Next QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseSemaphore ResetEvent SetEnvironmentVariableA SetErrorMode SetFilePointer SetFilePointerEx SetThreadExecutionState SetThreadPriority SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile lstrcatW lstrlenA lstrlenW

msvcrt

__dllonexit _amsg_exit _initterm _iob _lock _onexit _unlock abort calloc fputs free malloc memcpy memmove memset strncmp vfprintf

ole32

CoCreateInstance CoInitializeEx CoTaskMemFree CoUninitialize PropVariantClear

oleaut32

SysFreeString

setupapi

SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA SetupDiGetDeviceInterfaceDetailA SetupDiGetDeviceRegistryPropertyA

shell32

DragAcceptFiles DragFinish DragQueryFileW ExtractIconExW SHGetFolderPathW ShellExecuteW

user32

AdjustWindowRectEx CallWindowProcW ChangeDisplaySettingsExW ClientToScreen ClipCursor CloseClipboard CreateIconFromResource CreateIconIndirect CreateWindowExA CreateWindowExW DefWindowProcW DestroyIcon DestroyWindow DialogBoxIndirectParamW DispatchMessageW DrawTextW EmptyClipboard EndDialog EnumDisplayDevicesW EnumDisplayMonitors EnumDisplaySettingsW GetAsyncKeyState GetClassInfoExW GetClientRect GetClipCursor GetClipboardData GetClipboardSequenceNumber GetCursorPos GetDC GetDesktopWindow GetDlgItem GetDoubleClickTime GetFocus GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetMessageExtraInfo GetMessageW GetMonitorInfoW GetParent GetPropW GetRawInputData GetRawInputDeviceInfoA GetRawInputDeviceList GetSystemMetrics GetUpdateRect GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW InvalidateRect IsClipboardFormatAvailable IsIconic IsRectEmpty IsWindowVisible KillTimer LoadCursorW LoadIconW MapVirtualKeyW MessageBoxA OpenClipboard PeekMessageW PostMessageW PostThreadMessageW PtInRect RegisterClassExA RegisterClassExW RegisterClassW RegisterDeviceNotificationW RegisterRawInputDevices ReleaseDC RemovePropW ScreenToClient SendMessageW SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetLayeredWindowAttributes SetPropW SetTimer SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextW ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicode TrackMouseEvent TranslateMessage UnregisterClassA UnregisterClassW UnregisterDeviceNotification ValidateRect WindowFromPoint

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

winmm

timeBeginPeriod timeEndPeriod timeGetTime waveInAddBuffer waveInClose waveInGetDevCapsW waveInGetNumDevs waveInOpen waveInPrepareHeader waveInReset waveInStart waveInUnprepareHeader waveOutClose waveOutGetDevCapsW waveOutGetErrorTextW waveOutGetNumDevs waveOutOpen waveOutPrepareHeader waveOutReset waveOutUnprepareHeader waveOutWrite

SDL_AddEventWatch SDL_AddHintCallback SDL_AddTimer SDL_AllocFormat SDL_AllocPalette SDL_AllocRW SDL_AtomicAdd SDL_AtomicCAS SDL_AtomicCASPtr SDL_AtomicGet SDL_AtomicGetPtr SDL_AtomicLock SDL_AtomicSet SDL_AtomicSetPtr SDL_AtomicTryLock SDL_AtomicUnlock SDL_AudioInit SDL_AudioQuit SDL_AudioStreamAvailable SDL_AudioStreamClear SDL_AudioStreamFlush SDL_AudioStreamGet SDL_AudioStreamPut SDL_BuildAudioCVT SDL_CalculateGammaRamp SDL_CaptureMouse SDL_ClearError SDL_ClearHints SDL_ClearQueuedAudio SDL_CloseAudio SDL_CloseAudioDevice SDL_ComposeCustomBlendMode SDL_CondBroadcast SDL_CondSignal SDL_CondWait SDL_CondWaitTimeout SDL_ConvertAudio SDL_ConvertPixels SDL_ConvertSurface SDL_ConvertSurfaceFormat SDL_CreateColorCursor SDL_CreateCond SDL_CreateCursor SDL_CreateMutex SDL_CreateRGBSurface SDL_CreateRGBSurfaceFrom SDL_CreateRGBSurfaceWithFormat SDL_CreateRGBSurfaceWithFormatFrom SDL_CreateRenderer SDL_CreateSemaphore SDL_CreateShapedWindow SDL_CreateSoftwareRenderer SDL_CreateSystemCursor SDL_CreateTexture SDL_CreateTextureFromSurface SDL_CreateThread SDL_CreateThreadWithStackSize SDL_CreateWindow SDL_CreateWindowAndRenderer SDL_CreateWindowFrom SDL_DXGIGetOutputInfo SDL_DYNAPI_entry SDL_DelEventWatch SDL_DelHintCallback SDL_Delay SDL_DequeueAudio SDL_DestroyCond SDL_DestroyMutex SDL_DestroyRenderer SDL_DestroySemaphore SDL_DestroyTexture SDL_DestroyWindow SDL_DetachThread SDL_Direct3D9GetAdapterIndex SDL_DisableScreenSaver SDL_DuplicateSurface SDL_EnableScreenSaver SDL_EnclosePoints SDL_Error SDL_EventState SDL_FillRect SDL_FillRects SDL_FilterEvents SDL_FlushEvent SDL_FlushEvents SDL_FreeAudioStream SDL_FreeCursor SDL_FreeFormat SDL_FreePalette SDL_FreeRW SDL_FreeSurface SDL_FreeWAV SDL_GL_BindTexture SDL_GL_CreateContext SDL_GL_DeleteContext SDL_GL_ExtensionSupported SDL_GL_GetAttribute SDL_GL_GetCurrentContext SDL_GL_GetCurrentWindow SDL_GL_GetDrawableSize SDL_GL_GetProcAddress SDL_GL_GetSwapInterval SDL_GL_LoadLibrary SDL_GL_MakeCurrent SDL_GL_ResetAttributes SDL_GL_SetAttribute SDL_GL_SetSwapInterval SDL_GL_SwapWindow SDL_GL_UnbindTexture SDL_GL_UnloadLibrary SDL_GameControllerAddMapping SDL_GameControllerAddMappingsFromRW SDL_GameControllerClose SDL_GameControllerEventState SDL_GameControllerFromInstanceID SDL_GameControllerFromPlayerIndex SDL_GameControllerGetAttached SDL_GameControllerGetAxis SDL_GameControllerGetAxisFromString SDL_GameControllerGetBindForAxis SDL_GameControllerGetBindForButton SDL_GameControllerGetButton SDL_GameControllerGetButtonFromString SDL_GameControllerGetJoystick SDL_GameControllerGetNumTouchpadFingers SDL_GameControllerGetNumTouchpads SDL_GameControllerGetPlayerIndex SDL_GameControllerGetProduct SDL_GameControllerGetProductVersion SDL_GameControllerGetSensorData SDL_GameControllerGetSerial SDL_GameControllerGetStringForAxis SDL_GameControllerGetStringForButton SDL_GameControllerGetTouchpadFinger SDL_GameControllerGetType SDL_GameControllerGetVendor SDL_GameControllerHasAxis SDL_GameControllerHasButton SDL_GameControllerHasLED SDL_GameControllerHasSensor SDL_GameControllerIsSensorEnabled SDL_GameControllerMapping SDL_GameControllerMappingForDeviceIndex SDL_GameControllerMappingForGUID SDL_GameControllerMappingForIndex SDL_GameControllerName SDL_GameControllerNameForIndex SDL_GameControllerNumMappings SDL_GameControllerOpen SDL_GameControllerRumble SDL_GameControllerRumbleTriggers SDL_GameControllerSetLED SDL_GameControllerSetPlayerIndex SDL_GameControllerSetSensorEnabled SDL_GameControllerTypeForIndex SDL_GameControllerUpdate SDL_GetAssertionHandler SDL_GetAssertionReport SDL_GetAudioDeviceName SDL_GetAudioDeviceStatus SDL_GetAudioDriver SDL_GetAudioStatus SDL_GetBasePath SDL_GetCPUCacheLineSize SDL_GetCPUCount SDL_GetClipRect SDL_GetClipboardText SDL_GetClosestDisplayMode SDL_GetColorKey SDL_GetCurrentAudioDriver SDL_GetCurrentDisplayMode SDL_GetCurrentVideoDriver SDL_GetCursor SDL_GetDefaultAssertionHandler SDL_GetDefaultCursor SDL_GetDesktopDisplayMode SDL_GetDisplayBounds SDL_GetDisplayDPI SDL_GetDisplayMode SDL_GetDisplayName SDL_GetDisplayOrientation SDL_GetDisplayUsableBounds SDL_GetError SDL_GetErrorMsg SDL_GetEventFilter SDL_GetGlobalMouseState SDL_GetGrabbedWindow SDL_GetHint SDL_GetHintBoolean SDL_GetKeyFromName SDL_GetKeyFromScancode SDL_GetKeyName SDL_GetKeyboardFocus SDL_GetKeyboardState SDL_GetMemoryFunctions SDL_GetModState SDL_GetMouseFocus SDL_GetMouseState SDL_GetNumAllocations SDL_GetNumAudioDevices SDL_GetNumAudioDrivers SDL_GetNumDisplayModes SDL_GetNumRenderDrivers SDL_GetNumTouchDevices SDL_GetNumTouchFingers SDL_GetNumVideoDisplays SDL_GetNumVideoDrivers SDL_GetPerformanceCounter SDL_GetPerformanceFrequency SDL_GetPixelFormatName SDL_GetPlatform SDL_GetPowerInfo SDL_GetPrefPath SDL_GetPreferredLocales SDL_GetQueuedAudioSize SDL_GetRGB SDL_GetRGBA SDL_GetRelativeMouseMode SDL_GetRelativeMouseState SDL_GetRenderDrawBlendMode SDL_GetRenderDrawColor SDL_GetRenderDriverInfo SDL_GetRenderTarget SDL_GetRenderer SDL_GetRendererInfo SDL_GetRendererOutputSize SDL_GetRevision SDL_GetRevisionNumber SDL_GetScancodeFromKey SDL_GetScancodeFromName SDL_GetScancodeName SDL_GetShapedWindowMode SDL_GetSurfaceAlphaMod SDL_GetSurfaceBlendMode SDL_GetSurfaceColorMod SDL_GetSystemRAM SDL_GetTextureAlphaMod SDL_GetTextureBlendMode SDL_GetTextureColorMod SDL_GetTextureScaleMode SDL_GetThreadID SDL_GetThreadName SDL_GetTicks SDL_GetTouchDevice SDL_GetTouchDeviceType SDL_GetTouchFinger SDL_GetVersion SDL_GetVideoDriver SDL_GetWindowBordersSize SDL_GetWindowBrightness SDL_GetWindowData SDL_GetWindowDisplayIndex SDL_GetWindowDisplayMode SDL_GetWindowFlags SDL_GetWindowFromID SDL_GetWindowGammaRamp SDL_GetWindowGrab SDL_GetWindowID SDL_GetWindowMaximumSize SDL_GetWindowMinimumSize SDL_GetWindowOpacity SDL_GetWindowPixelFormat SDL_GetWindowPosition SDL_GetWindowSize SDL_GetWindowSurface SDL_GetWindowTitle SDL_GetWindowWMInfo SDL_GetYUVConversionMode SDL_GetYUVConversionModeForResolution SDL_HapticClose SDL_HapticDestroyEffect SDL_HapticEffectSupported SDL_HapticGetEffectStatus SDL_HapticIndex SDL_HapticName SDL_HapticNewEffect SDL_HapticNumAxes SDL_HapticNumEffects SDL_HapticNumEffectsPlaying SDL_HapticOpen SDL_HapticOpenFromJoystick SDL_HapticOpenFromMouse SDL_HapticOpened SDL_HapticPause SDL_HapticQuery SDL_HapticRumbleInit SDL_HapticRumblePlay SDL_HapticRumbleStop SDL_HapticRumbleSupported SDL_HapticRunEffect SDL_HapticSetAutocenter SDL_HapticSetGain SDL_HapticStopAll SDL_HapticStopEffect SDL_HapticUnpause SDL_HapticUpdateEffect SDL_Has3DNow SDL_HasARMSIMD SDL_HasAVX SDL_HasAVX2 SDL_HasAVX512F SDL_HasAltiVec SDL_HasClipboardText SDL_HasColorKey SDL_HasEvent SDL_HasEvents SDL_HasIntersection SDL_HasMMX SDL_HasNEON SDL_HasRDTSC SDL_HasSSE SDL_HasSSE2 SDL_HasSSE3 SDL_HasSSE41 SDL_HasSSE42 SDL_HasScreenKeyboardSupport SDL_HasSurfaceRLE SDL_HideWindow SDL_Init SDL_InitSubSystem SDL_IntersectRect SDL_IntersectRectAndLine SDL_IsGameController SDL_IsScreenKeyboardShown SDL_IsScreenSaverEnabled SDL_IsShapedWindow SDL_IsTablet SDL_IsTextInputActive SDL_JoystickAttachVirtual SDL_JoystickClose SDL_JoystickCurrentPowerLevel SDL_JoystickDetachVirtual SDL_JoystickEventState SDL_JoystickFromInstanceID SDL_JoystickFromPlayerIndex SDL_JoystickGetAttached SDL_JoystickGetAxis SDL_JoystickGetAxisInitialState SDL_JoystickGetBall SDL_JoystickGetButton SDL_JoystickGetDeviceGUID SDL_JoystickGetDeviceInstanceID SDL_JoystickGetDevicePlayerIndex SDL_JoystickGetDeviceProduct SDL_JoystickGetDeviceProductVersion SDL_JoystickGetDeviceType SDL_JoystickGetDeviceVendor SDL_JoystickGetGUID SDL_JoystickGetGUIDFromString SDL_JoystickGetGUIDString SDL_JoystickGetHat SDL_JoystickGetPlayerIndex SDL_JoystickGetProduct SDL_JoystickGetProductVersion SDL_JoystickGetSerial SDL_JoystickGetType SDL_JoystickGetVendor SDL_JoystickHasLED SDL_JoystickInstanceID SDL_JoystickIsHaptic SDL_JoystickIsVirtual SDL_JoystickName SDL_JoystickNameForIndex SDL_JoystickNumAxes SDL_JoystickNumBalls SDL_JoystickNumButtons SDL_JoystickNumHats SDL_JoystickOpen SDL_JoystickRumble SDL_JoystickRumbleTriggers SDL_JoystickSetLED SDL_JoystickSetPlayerIndex SDL_JoystickSetVirtualAxis SDL_JoystickSetVirtualButton SDL_JoystickSetVirtualHat SDL_JoystickUpdate SDL_LoadBMP_RW SDL_LoadDollarTemplates SDL_LoadFile SDL_LoadFile_RW SDL_LoadFunction SDL_LoadObject SDL_LoadWAV_RW SDL_LockAudio SDL_LockAudioDevice SDL_LockJoysticks SDL_LockMutex SDL_LockSensors SDL_LockSurface SDL_LockTexture SDL_LockTextureToSurface SDL_Log SDL_LogCritical SDL_LogDebug SDL_LogError SDL_LogGetOutputFunction SDL_LogGetPriority SDL_LogInfo SDL_LogMessage SDL_LogMessageV SDL_LogResetPriorities SDL_LogSetAllPriority SDL_LogSetOutputFunction SDL_LogSetPriority SDL_LogVerbose SDL_LogWarn SDL_LowerBlit SDL_LowerBlitScaled SDL_MapRGB SDL_MapRGBA SDL_MasksToPixelFormatEnum SDL_MaximizeWindow SDL_MemoryBarrierAcquireFunction SDL_MemoryBarrierReleaseFunction SDL_Metal_CreateView SDL_Metal_DestroyView SDL_Metal_GetDrawableSize SDL_Metal_GetLayer SDL_MinimizeWindow SDL_MixAudio SDL_MixAudioFormat SDL_MouseIsHaptic SDL_NewAudioStream SDL_NumHaptics SDL_NumJoysticks SDL_NumSensors SDL_OnApplicationDidBecomeActive SDL_OnApplicationDidEnterBackground SDL_OnApplicationDidReceiveMemoryWarning SDL_OnApplicationWillEnterForeground SDL_OnApplicationWillResignActive SDL_OnApplicationWillTerminate SDL_OpenAudio SDL_OpenAudioDevice SDL_OpenURL SDL_PauseAudio SDL_PauseAudioDevice SDL_PeepEvents SDL_PixelFormatEnumToMasks SDL_PollEvent SDL_PumpEvents SDL_PushEvent SDL_QueryTexture SDL_QueueAudio SDL_Quit SDL_QuitSubSystem SDL_RWFromConstMem SDL_RWFromFP SDL_RWFromFile SDL_RWFromMem SDL_RWclose SDL_RWread SDL_RWseek SDL_RWsize SDL_RWtell SDL_RWwrite SDL_RaiseWindow SDL_ReadBE16 SDL_ReadBE32 SDL_ReadBE64 SDL_ReadLE16 SDL_ReadLE32 SDL_ReadLE64 SDL_ReadU8 SDL_RecordGesture SDL_RegisterApp SDL_RegisterEvents SDL_RemoveTimer SDL_RenderClear SDL_RenderCopy SDL_RenderCopyEx SDL_RenderCopyExF SDL_RenderCopyF SDL_RenderDrawLine SDL_RenderDrawLineF SDL_RenderDrawLines SDL_RenderDrawLinesF SDL_RenderDrawPoint SDL_RenderDrawPointF SDL_RenderDrawPoints SDL_RenderDrawPointsF SDL_RenderDrawRect SDL_RenderDrawRectF SDL_RenderDrawRects SDL_RenderDrawRectsF SDL_RenderFillRect SDL_RenderFillRectF SDL_RenderFillRects SDL_RenderFillRectsF SDL_RenderFlush SDL_RenderGetClipRect SDL_RenderGetD3D9Device SDL_RenderGetIntegerScale SDL_RenderGetLogicalSize SDL_RenderGetMetalCommandEncoder SDL_RenderGetMetalLayer SDL_RenderGetScale SDL_RenderGetViewport SDL_RenderIsClipEnabled SDL_RenderPresent SDL_RenderReadPixels SDL_RenderSetClipRect SDL_RenderSetIntegerScale SDL_RenderSetLogicalSize SDL_RenderSetScale SDL_RenderSetViewport SDL_RenderTargetSupported SDL_ReportAssertion SDL_ResetAssertionReport SDL_RestoreWindow SDL_SIMDAlloc SDL_SIMDFree SDL_SIMDGetAlignment SDL_SIMDRealloc SDL_SaveAllDollarTemplates SDL_SaveBMP_RW SDL_SaveDollarTemplate SDL_SemPost SDL_SemTryWait SDL_SemValue SDL_SemWait SDL_SemWaitTimeout SDL_SensorClose SDL_SensorFromInstanceID SDL_SensorGetData SDL_SensorGetDeviceInstanceID SDL_SensorGetDeviceName SDL_SensorGetDeviceNonPortableType SDL_SensorGetDeviceType SDL_SensorGetInstanceID SDL_SensorGetName SDL_SensorGetNonPortableType SDL_SensorGetType SDL_SensorOpen SDL_SensorUpdate SDL_SetAssertionHandler SDL_SetClipRect SDL_SetClipboardText SDL_SetColorKey SDL_SetCursor SDL_SetError SDL_SetEventFilter SDL_SetHint SDL_SetHintWithPriority SDL_SetMainReady SDL_SetMemoryFunctions SDL_SetModState SDL_SetPaletteColors SDL_SetPixelFormatPalette SDL_SetRelativeMouseMode SDL_SetRenderDrawBlendMode SDL_SetRenderDrawColor SDL_SetRenderTarget SDL_SetSurfaceAlphaMod SDL_SetSurfaceBlendMode SDL_SetSurfaceColorMod SDL_SetSurfacePalette SDL_SetSurfaceRLE SDL_SetTextInputRect SDL_SetTextureAlphaMod SDL_SetTextureBlendMode SDL_SetTextureColorMod SDL_SetTextureScaleMode SDL_SetThreadPriority SDL_SetWindowBordered SDL_SetWindowBrightness SDL_SetWindowData SDL_SetWindowDisplayMode SDL_SetWindowFullscreen SDL_SetWindowGammaRamp SDL_SetWindowGrab SDL_SetWindowHitTest SDL_SetWindowIcon SDL_SetWindowInputFocus SDL_SetWindowMaximumSize SDL_SetWindowMinimumSize SDL_SetWindowModalFor SDL_SetWindowOpacity SDL_SetWindowPosition SDL_SetWindowResizable SDL_SetWindowShape SDL_SetWindowSize SDL_SetWindowTitle SDL_SetWindowsMessageHook SDL_SetYUVConversionMode SDL_ShowCursor SDL_ShowMessageBox SDL_ShowSimpleMessageBox SDL_ShowWindow SDL_SoftStretch SDL_StartTextInput SDL_StopTextInput SDL_TLSCreate SDL_TLSGet SDL_TLSSet SDL_ThreadID SDL_TryLockMutex SDL_UnionRect SDL_UnloadObject SDL_UnlockAudio SDL_UnlockAudioDevice SDL_UnlockJoysticks SDL_UnlockMutex SDL_UnlockSensors SDL_UnlockSurface SDL_UnlockTexture SDL_UnregisterApp SDL_UpdateTexture SDL_UpdateWindowSurface SDL_UpdateWindowSurfaceRects SDL_UpdateYUVTexture SDL_UpperBlit SDL_UpperBlitScaled SDL_VideoInit SDL_VideoQuit SDL_Vulkan_CreateSurface SDL_Vulkan_GetDrawableSize SDL_Vulkan_GetInstanceExtensions SDL_Vulkan_GetVkGetInstanceProcAddr SDL_Vulkan_LoadLibrary SDL_Vulkan_UnloadLibrary SDL_WaitEvent SDL_WaitEventTimeout SDL_WaitThread SDL_WarpMouseGlobal SDL_WarpMouseInWindow SDL_WasInit SDL_WriteBE16 SDL_WriteBE32 SDL_WriteBE64 SDL_WriteLE16 SDL_WriteLE32 SDL_WriteLE64 SDL_WriteU8 SDL_abs SDL_acos SDL_acosf SDL_asin SDL_asinf SDL_atan SDL_atan2 SDL_atan2f SDL_atanf SDL_atof SDL_atoi SDL_calloc SDL_ceil SDL_ceilf SDL_copysign SDL_copysignf SDL_cos SDL_cosf SDL_crc32 SDL_exp SDL_expf SDL_fabs SDL_fabsf SDL_floor SDL_floorf SDL_fmod SDL_fmodf SDL_free SDL_getenv SDL_iconv SDL_iconv_close SDL_iconv_open SDL_iconv_string SDL_isdigit SDL_islower SDL_isspace SDL_isupper SDL_itoa SDL_lltoa SDL_log SDL_log10 SDL_log10f SDL_logf SDL_ltoa SDL_malloc SDL_memcmp SDL_memcpy SDL_memmove SDL_memset SDL_pow SDL_powf SDL_qsort SDL_realloc SDL_scalbn SDL_scalbnf SDL_setenv SDL_sin SDL_sinf SDL_snprintf SDL_sqrt SDL_sqrtf SDL_sscanf SDL_strcasecmp SDL_strchr SDL_strcmp SDL_strdup SDL_strlcat SDL_strlcpy SDL_strlen SDL_strlwr SDL_strncasecmp SDL_strncmp SDL_strrchr SDL_strrev SDL_strstr SDL_strtod SDL_strtokr SDL_strtol SDL_strtoll SDL_strtoul SDL_strtoull SDL_strupr SDL_tan SDL_tanf SDL_tolower SDL_toupper SDL_trunc SDL_truncf SDL_uitoa SDL_ulltoa SDL_ultoa SDL_utf8strlcpy SDL_utf8strlen SDL_vsnprintf SDL_vsscanf SDL_wcscasecmp SDL_wcscmp SDL_wcsdup SDL_wcslcat SDL_wcslcpy SDL_wcslen SDL_wcsncasecmp SDL_wcsncmp SDL_wcsstr

Name

.text

Size

1001KB

Virtual Size

1001KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

188KB

Virtual Size

188KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

792B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

av/SoundTouch.dll

IMPHASH 47c48064dbc000892407135387cfad7a
SHA256 78694379464be8116a78b968f8a4513e39b969351446bf76df404188e222d92f
MD5 e9adb0d2a9fa6cff12474e06e9e3453b
SHA1 37dada8eaafd2b2341463f3eddfcab30d5901580
SHA512 1a29af93255e9de631794921d85c8f3bd3518b94c02e70d8eefbbaa52b267120e3451c071ac5ec5f9ea7d37ee378bddf0c5c23281d5612980f4605c5bf94fdae
SSDEEP 24576:A04/rF9FAwxK6cDmKVamPmdsqFhQdBTu0tSED1L0CgJ4AcjvdyOuRhWZQi3//ty:t4/rF9FAw07DOBFhQdBTu0tSED1L0Cgx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

96:19:69:21:9c:51:9b:f1:a7:40:e8:5a:98:e7:b5:9f:ca:1f:11:22:d4:f9:ef:ec:d1:c5:49:96:f6:3b:3d:7f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

fd:e8:7c:bf:42:12:3f:52:40:24:9c:2a:aa:12:1a:8d:92:52:ec:72

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

5120

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CreateSemaphoreW DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection MultiByteToWideChar QueryPerformanceCounter ReleaseSemaphore SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte

msvcrt

__dllonexit __mb_cur_max __setusermatherr _amsg_exit _errno _exit _initterm _iob _lock _onexit _snwprintf _strnicmp calloc fopen fprintf fputc fputs free fwprintf fwrite getenv isspace iswctype localeconv malloc memchr memcmp memcpy memmove memset printf raise realloc setlocale sprintf strchr strcmp strcoll strerror strftime strlen strncmp strncpy strtoul strxfrm _unlock abort atoi towlower towupper vfprintf wcscoll wcscpy wcsftime wcslen wcsxfrm _write

user32

MessageBoxW

Name

.text

Size

677KB

Virtual Size

676KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

833B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

av/avcodec-58.dll

IMPHASH cd0a5ed988fad37163c8ee72c4762a70
SHA256 668a477589f36ea44c8992c73021780c59ccd77df0460a808f57e9567a1ce6f8
MD5 0a8f1c91e6d0748ae9a3d23c95462c2a
SHA1 c9603040829fb387eff06d1e40b151b2566e347e
SHA512 887e585f6f1303afcc2a8d53931e761b4707190ed95d58f1dcc5f1ec557a41088ea88cba9c8859bccc43bf19135b25c2cb14bbec9ae371197ff3d238d82c385c
SSDEEP 393216:RJP5oQTPA2Zr3dNssckfzNOJlgI2lNxmI:6QTPA2Zr3dqOfgJ7Ct
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

a5:51:33:ab:0c:47:fe:8b:3e:28:45:39:79:c3:f5:99:1f:ed:cc:39:d2:a2:b0:5a:ff:e3:95:54:fb:52:fa:70

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

52:9e:86:66:0a:7a:ff:5b:90:7f:43:ea:5e:58:95:e7:50:ef:ec:07

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

5040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CreateEventA CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection FreeLibrary GetACP GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetLastError GetModuleFileNameW GetModuleHandleW GetProcAddress GetProcessAffinityMask GetSystemDirectoryA GetSystemDirectoryW GetSystemInfo GetThreadContext GetThreadPriority InitOnceBeginInitialize InitOnceComplete InitializeCriticalSection InitializeCriticalSectionAndSpinCount IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW MultiByteToWideChar OpenProcess QueryPerformanceCounter QueryPerformanceFrequency ReleaseMutex ReleaseSemaphore ResetEvent ResumeThread SetEvent SetLastError SetThreadContext SetThreadPriority Sleep SuspendThread TlsAlloc TlsFree TlsGetValue TlsSetValue VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte

msvcrt

__mb_cur_max __setusermatherr _aligned_free _aligned_malloc _aligned_realloc _amsg_exit _assert _beginthreadex _endthreadex _errno _filelengthi64 _fileno _hypot _initterm _iob _lock _setjmp3 _unlock _vscprintf _vsnprintf abort acos atan atoi bsearch calloc exit fclose fflush fgetpos fopen fprintf fputc fread free frexp fseek fsetpos fwrite getc getenv islower isspace isupper isxdigit localeconv log10 malloc memchr memcmp memcpy memmove memset localtime printf qsort rand realloc setlocale sprintf strchr strcmp strcpy strcspn strerror strftime strlen strncat strncmp strncpy strrchr strspn strstr strtol strtoul tolower toupper ungetc vfprintf time wcscpy wcslen wcsrchr _ftime64 longjmp

ole32

CoTaskMemFree

avutil-56

av_asprintf av_audio_fifo_alloc av_audio_fifo_drain av_audio_fifo_free av_audio_fifo_read av_audio_fifo_size av_audio_fifo_write av_bmg_get av_bprint_append_data av_bprint_chars av_bprint_clear av_bprint_finalize av_bprint_get_buffer av_bprint_init av_bprintf av_buffer_alloc av_buffer_allocz av_buffer_create av_buffer_default_free av_buffer_get_ref_count av_buffer_is_writable av_buffer_make_writable av_buffer_pool_get av_buffer_pool_init av_buffer_pool_init2 av_buffer_pool_uninit av_buffer_realloc av_buffer_ref av_buffer_replace av_buffer_unref av_calloc av_chroma_location_name av_color_primaries_name av_color_range_name av_color_space_name av_color_transfer_name av_content_light_metadata_create_side_data av_cpu_count av_crc av_crc_get_table av_crc_init av_d2q av_default_item_name av_dict_copy av_dict_free av_dict_get av_dict_set av_display_matrix_flip av_display_rotation_set av_div_q av_downmix_info_update_side_data av_dynamic_hdr_plus_alloc av_dynarray_add_nofree av_expr_eval av_expr_free av_expr_parse av_fast_malloc av_fast_mallocz av_fast_realloc av_fifo_alloc av_fifo_alloc_array av_fifo_drain av_fifo_freep av_fifo_generic_peek_at av_fifo_generic_read av_fifo_generic_write av_fifo_grow av_fifo_realloc2 av_fifo_reset av_fifo_size av_fifo_space av_film_grain_params_create_side_data av_find_best_pix_fmt_of_2 av_fourcc_make_string av_frame_alloc av_frame_apply_cropping av_frame_clone av_frame_copy av_frame_copy_props av_frame_free av_frame_get_buffer av_frame_get_side_data av_frame_is_writable av_frame_make_writable av_frame_move_ref av_frame_new_side_data av_frame_new_side_data_from_buf av_frame_ref av_frame_unref av_free av_freep av_gcd av_get_bits_per_pixel av_get_bytes_per_sample av_get_channel_layout_channel_index av_get_channel_layout_nb_channels av_get_channel_layout_string av_get_cpu_flags av_get_media_type_string av_get_picture_type_char av_get_pix_fmt_loss av_get_pix_fmt_name av_get_planar_sample_fmt av_get_sample_fmt_name av_hwdevice_ctx_create av_hwdevice_get_type_name av_hwframe_ctx_alloc av_hwframe_ctx_init av_hwframe_get_buffer av_hwframe_transfer_data av_image_alloc av_image_check_sar av_image_check_size av_image_check_size2 av_image_copy av_image_copy_plane av_image_copy_to_buffer av_image_fill_arrays av_image_fill_black av_image_fill_linesizes av_image_fill_max_pixsteps av_image_fill_plane_sizes av_image_fill_pointers av_image_get_buffer_size av_image_get_linesize av_lfg_init av_lfg_init_from_data av_log av_log_get_level av_log_once av_lzo1x_decode av_malloc av_malloc_array av_mallocz av_mallocz_array av_mastering_display_metadata_create_side_data av_match_list av_md5_alloc av_md5_final av_md5_init av_md5_update av_memcpy_backptr av_memdup av_mul_q av_opt_copy av_opt_free av_opt_get_int av_opt_next av_opt_set av_opt_set_defaults av_opt_set_defaults2 av_opt_set_dict av_opt_set_dict2 av_opt_set_from_string av_opt_set_int av_parse_color av_pix_fmt_count_planes av_pix_fmt_desc_get av_pix_fmt_get_chroma_sub_sample av_realloc av_realloc_array av_realloc_f av_reallocp av_reallocp_array av_reduce av_rescale av_rescale_q av_rescale_q_rnd av_sample_fmt_is_planar av_samples_copy av_samples_fill_arrays av_samples_get_buffer_size av_samples_set_silence av_sscanf av_stereo3d_alloc av_stereo3d_create_side_data av_strcasecmp av_strdup av_strerror av_stristr av_strlcat av_strlcatf av_strlcpy av_strncasecmp av_strtok av_timecode_get_smpte av_timecode_make_mpeg_tc_string av_timecode_make_smpte_tc_string2 av_tx_init av_tx_uninit av_usleep av_video_enc_params_create_side_data avpriv_alloc_fixed_dsp avpriv_cga_font avpriv_float_dsp_alloc avpriv_get_trc_function_from_trc avpriv_report_missing_feature avpriv_request_sample avpriv_scalarproduct_float_c avpriv_set_systematic_pal2 avpriv_slicethread_create avpriv_slicethread_execute avpriv_slicethread_free avpriv_vga16_font

swresample-3

swr_alloc swr_close swr_convert swr_free swr_init swr_is_initialized

av_ac3_parse_header av_adts_header_parse av_bitstream_filter_close av_bitstream_filter_filter av_bitstream_filter_init av_bitstream_filter_next av_bsf_alloc av_bsf_flush av_bsf_free av_bsf_get_by_name av_bsf_get_class av_bsf_get_null_filter av_bsf_init av_bsf_iterate av_bsf_list_alloc av_bsf_list_append av_bsf_list_append2 av_bsf_list_finalize av_bsf_list_free av_bsf_list_parse_str av_bsf_next av_bsf_receive_packet av_bsf_send_packet av_codec_ffversion av_codec_get_chroma_intra_matrix av_codec_get_codec_descriptor av_codec_get_codec_properties av_codec_get_lowres av_codec_get_max_lowres av_codec_get_pkt_timebase av_codec_get_seek_preroll av_codec_is_decoder av_codec_is_encoder av_codec_iterate av_codec_next av_codec_set_chroma_intra_matrix av_codec_set_codec_descriptor av_codec_set_lowres av_codec_set_pkt_timebase av_codec_set_seek_preroll av_copy_packet av_copy_packet_side_data av_cpb_properties_alloc av_d3d11va_alloc_context av_dct_calc av_dct_end av_dct_init av_dirac_parse_sequence_header av_dup_packet av_dv_codec_profile av_dv_codec_profile2 av_dv_frame_profile av_fast_padded_malloc av_fast_padded_mallocz av_fft_calc av_fft_end av_fft_init av_fft_permute av_free_packet av_get_audio_frame_duration av_get_audio_frame_duration2 av_get_bits_per_sample av_get_codec_tag_string av_get_exact_bits_per_sample av_get_pcm_codec av_get_profile_name av_grow_packet av_hwaccel_next av_imdct_calc av_imdct_half av_init_packet av_jni_get_java_vm av_jni_set_java_vm av_lockmgr_register av_mdct_calc av_mdct_end av_mdct_init av_mediacodec_alloc_context av_mediacodec_default_free av_mediacodec_default_init av_mediacodec_release_buffer av_mediacodec_render_buffer_at_time av_new_packet av_packet_add_side_data av_packet_alloc av_packet_clone av_packet_copy_props av_packet_free av_packet_free_side_data av_packet_from_data av_packet_get_side_data av_packet_make_refcounted av_packet_make_writable av_packet_merge_side_data av_packet_move_ref av_packet_new_side_data av_packet_pack_dictionary av_packet_ref av_packet_rescale_ts av_packet_shrink_side_data av_packet_side_data_name av_packet_split_side_data av_packet_unpack_dictionary av_packet_unref av_parser_change av_parser_close av_parser_init av_parser_iterate av_parser_next av_parser_parse2 av_picture_copy av_picture_crop av_picture_pad av_qsv_alloc_context av_rdft_calc av_rdft_end av_rdft_init av_register_bitstream_filter av_register_codec_parser av_register_hwaccel av_shrink_packet av_vorbis_parse_frame av_vorbis_parse_frame_flags av_vorbis_parse_free av_vorbis_parse_init av_vorbis_parse_reset av_xiphlacing avcodec_align_dimensions avcodec_align_dimensions2 avcodec_alloc_context3 avcodec_chroma_pos_to_enum avcodec_close avcodec_configuration avcodec_copy_context avcodec_dct_alloc avcodec_dct_get_class avcodec_dct_init avcodec_decode_audio4 avcodec_decode_subtitle2 avcodec_decode_video2 avcodec_default_execute avcodec_default_execute2 avcodec_default_get_buffer2 avcodec_default_get_encode_buffer avcodec_default_get_format avcodec_descriptor_get avcodec_descriptor_get_by_name avcodec_descriptor_next avcodec_encode_audio2 avcodec_encode_subtitle avcodec_encode_video2 avcodec_enum_to_chroma_pos avcodec_fill_audio_frame avcodec_find_best_pix_fmt2 avcodec_find_best_pix_fmt_of_2 avcodec_find_best_pix_fmt_of_list avcodec_find_decoder avcodec_find_decoder_by_name avcodec_find_encoder avcodec_find_encoder_by_name avcodec_flush_buffers avcodec_free_context avcodec_get_chroma_sub_sample avcodec_get_class avcodec_get_context_defaults3 avcodec_get_frame_class avcodec_get_hw_config avcodec_get_hw_frames_parameters avcodec_get_name avcodec_get_pix_fmt_loss avcodec_get_subtitle_rect_class avcodec_get_type avcodec_is_open avcodec_license avcodec_open2 avcodec_parameters_alloc avcodec_parameters_copy avcodec_parameters_free avcodec_parameters_from_context avcodec_parameters_to_context avcodec_pix_fmt_to_codec_tag avcodec_profile_name avcodec_receive_frame avcodec_receive_packet avcodec_register avcodec_register_all avcodec_send_frame avcodec_send_packet avcodec_string avcodec_version avpicture_alloc avpicture_fill avpicture_free avpicture_get_size avpicture_layout avpriv_ac3_channel_layout_tab avpriv_ac3_parse_header avpriv_align_put_bits avpriv_codec2_mode_bit_rate avpriv_codec2_mode_block_align avpriv_codec2_mode_frame_size avpriv_codec_get_cap_skip_frame_fill_param avpriv_copy_bits avpriv_dca_convert_bitstream avpriv_dca_parse_core_frame_header avpriv_dca_sample_rates avpriv_dnxhd_get_frame_size avpriv_dnxhd_get_hr_frame_size avpriv_dnxhd_get_interlaced avpriv_do_elbg avpriv_exif_decode_ifd avpriv_find_pix_fmt avpriv_find_start_code avpriv_fits_header_init avpriv_fits_header_parse_line avpriv_get_raw_pix_fmt_tags avpriv_h264_has_num_reorder_frames avpriv_init_elbg avpriv_mjpeg_bits_ac_chrominance avpriv_mjpeg_bits_ac_luminance avpriv_mjpeg_bits_dc_chrominance avpriv_mjpeg_bits_dc_luminance avpriv_mjpeg_val_ac_chrominance avpriv_mjpeg_val_ac_luminance avpriv_mjpeg_val_dc avpriv_mpa_bitrate_tab avpriv_mpa_freq_tab avpriv_mpeg4audio_get_config avpriv_mpeg4audio_get_config2 avpriv_mpeg4audio_sample_rates avpriv_mpegaudio_decode_header avpriv_packet_list_free avpriv_packet_list_get avpriv_packet_list_put avpriv_pix_fmt_bps_avi avpriv_pix_fmt_bps_mov avpriv_split_xiph_headers avpriv_tak_parse_streaminfo avpriv_toupper4 avsubtitle_free

Name

.text

Size

11.8MB

Virtual Size

11.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

71KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3.8MB

Virtual Size

3.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rodata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

5.2MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

896B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

213KB

Virtual Size

212KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

av/avdevice-58.dll

IMPHASH 0f2ed6f29fbeb4e03beb0eeb2b3469b5
SHA256 208210a51f2ccb55410c6f3b27dc1626273b389e2c90c31db62cbc44da686226
MD5 0ae1b785d7398eedd051cf82753863d2
SHA1 950e9d866137d0a29f0a956ab3fdf9261bbabc0b
SHA512 6e09ff0cf54881b5b340fe7321665028542c89ed65e72d75c13f5dd6c1521cfa98e12cebf9f48f9ccdbc358cf806d8f12781b55387538100ef7c5f1090533d5d
SSDEEP 3072:rip0z+ykKy46YDU9Gh3lXEVwtgEoL0ShZGxUhZBxvw:rKnKd6YDU9alXswtgEaJHvHbw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

8d:da:58:35:ed:92:b8:c5:e9:fa:30:e6:59:b8:e8:24:d6:3e:84:60:1a:0d:97:60:7e:7a:ff:ae:0e:a6:34:55

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

17:3a:da:15:39:32:20:f7:24:70:64:86:9c:71:29:9b:4e:a5:61:ce

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

5040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

gdi32

BitBlt CombineRgn CreateCompatibleDC CreateDIBSection CreateRectRgn DeleteDC DeleteObject GetDIBColorTable GetDeviceCaps GetObjectA GetStockObject SelectObject

kernel32

CloseHandle CreateEventA CreateMutexA DeleteCriticalSection DuplicateHandle EnterCriticalSection GetCurrentProcess GetLastError GetModuleHandleW GetProcAddress InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection MultiByteToWideChar ReleaseMutex ResetEvent SetEvent Sleep TlsGetValue VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte

msvcrt

__mb_cur_max _amsg_exit _errno _initterm _iob _lock _unlock abort atoi calloc fflush fputs free fwrite getc islower isspace isupper isxdigit localeconv malloc memcpy memset realloc setlocale strchr strcmp strlen strncmp strtok strtol strtoul tolower ungetc vfprintf wcscmp wcscpy _wcsdup

ole32

CoCreateInstance CoGetMalloc CoInitialize CoTaskMemAlloc CoTaskMemFree CoUninitialize CreateBindCtx OleLoadFromStream OleSaveToStream

oleaut32

OleCreatePropertyFrame

shlwapi

SHCreateStreamOnFileA

user32

AdjustWindowRectEx BeginPaint CopyIcon CreateWindowExA DefWindowProcA DestroyCursor DestroyWindow DispatchMessageA DrawIcon EndPaint FindWindowA FrameRect GetClientRect GetCursorInfo GetDC GetIconInfo GetSystemMetrics GetWindowLongA GetWindowRect LoadCursorA PeekMessageA ReleaseDC SendMessageA SetWindowLongA SetWindowRgn ShowWindow

avicap32

capCreateCaptureWindowA capGetDriverDescriptionA

avcodec-58

av_get_pcm_codec av_new_packet av_packet_add_side_data av_packet_move_ref av_packet_pack_dictionary av_packet_unref avcodec_find_decoder avpriv_find_pix_fmt avpriv_get_raw_pix_fmt_tags

avfilter-7

av_buffersink_get_channel_layout av_buffersink_get_channels av_buffersink_get_format av_buffersink_get_frame_flags av_buffersink_get_h av_buffersink_get_sample_aspect_ratio av_buffersink_get_sample_rate av_buffersink_get_time_base av_buffersink_get_type av_buffersink_get_w avfilter_get_by_name avfilter_graph_alloc avfilter_graph_config avfilter_graph_create_filter avfilter_graph_dump avfilter_graph_free avfilter_graph_parse_ptr avfilter_inout_free avfilter_link avfilter_pad_get_type

avformat-58

av_codec_get_id av_find_input_format avformat_alloc_context avformat_alloc_output_context2 avformat_free_context avformat_get_riff_video_tags avformat_new_stream avio_closep avio_open2 avio_read_to_bprint avpriv_register_devices avpriv_set_pts_info

avutil-56

av_bprint_chars av_bprint_finalize av_bprint_init av_default_item_name av_dict_copy av_dict_free av_dict_set av_frame_alloc av_frame_free av_frame_get_side_data av_frame_unref av_free av_freep av_get_bytes_per_sample av_get_padded_bits_per_pixel av_get_pix_fmt_name av_get_sample_fmt_name av_gettime av_gettime_relative av_image_copy_to_buffer av_image_get_buffer_size av_int_list_length_for_size av_log av_malloc av_malloc_array av_mallocz av_opt_set_bin av_opt_set_defaults av_opt_set_dict2 av_opt_set_int av_parse_video_rate av_parse_video_size av_pix_fmt_desc_get av_rescale_q_rnd av_strdup av_usleep avpriv_report_missing_feature

Name

.text

Size

75KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

540B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

700B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

av/avfilter-7.dll

IMPHASH 271f6870a95dccb0d06490dd0ffa6103
SHA256 90e5b3cc6398da5e7f3bf0957b8eccbd45dd29cd56d815697583277a330295dc
MD5 0ce8af987a5c0401cc3976ca5ae52026
SHA1 a1e107f5ae93bef9c18961f3c2b50bbe9e411fde
SHA512 885501ecb9b459275cd9ebcf0971d87e14f4cc0f9e1ba15b56f413b31d564e00ac7f5cc4b8788ecf5abf9b723b890bea1a2894cc583b23ff73ba9be8067429e7
SSDEEP 98304:RI4vGty36/FQmxB6DL5n5rsECFrok74UvHnGCPGebhsqreD4AReL0aTldBAUZLXs:RI4MyixBon5grok7FH/bhbeD4AReNXVw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

ed:53:15:4f:d6:30:9c:08:6e:90:7e:7a:b0:fc:49:ba:59:ac:28:d7:80:4f:6a:09:7e:78:0a:a3:f6:b4:35:d2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

bf:e3:b1:9a:60:f5:e1:01:60:bd:aa:9f:a0:67:f3:94:aa:f2:47:e8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

5040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CreateEventA CreateFileMappingA CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection FreeLibrary GetACP GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetFileAttributesA GetFileAttributesExA GetFullPathNameA GetLastError GetLongPathNameA GetModuleFileNameA GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessAffinityMask GetSystemDirectoryA GetSystemTimeAsFileTime GetTempPathA GetThreadContext GetThreadPriority GetWindowsDirectoryA InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryA LoadLibraryW MapViewOfFile MultiByteToWideChar OpenProcess ReleaseSemaphore ResetEvent ResumeThread SetEvent SetLastError SetThreadContext SetThreadPriority Sleep SuspendThread TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte

msvcrt

__mb_cur_max __setusermatherr _amsg_exit _assert _beginthreadex _endthreadex _errno _findclose _fullpath _get_osfhandle _hypot _initterm _iob _lock _locking _mbsrchr _setjmp3 _sopen _unlock _vscprintf _vsnprintf abort acos asin atan atoi bsearch calloc cosh exit fclose fflush fgetc fgets fopen fprintf fputc fread free frexp fseek ftell fwrite getc getenv isalpha islower isspace isupper isxdigit localeconv log10 malloc memchr memcmp memcpy memmove memset localtime gmtime _mkdir perror printf putchar puts qsort rand realloc rename rewind setlocale sinh sprintf srand sscanf strcat strchr strcmp strcpy strcspn strerror strlen strncat strncmp strncpy strrchr strspn strstr strtol strtoul tan tanh time tolower ungetc vfprintf time wcslen _stati64 _ftime64 _findnext _findfirst longjmp _write _unlink _strdup _rmdir _read _open _fdopen _close _chmod _access

avcodec-58

av_dct_calc av_dct_end av_dct_init av_fft_calc av_fft_end av_fft_init av_fft_permute av_packet_unref av_rdft_calc av_rdft_end av_rdft_init avcodec_alloc_context3 avcodec_decode_subtitle2 avcodec_descriptor_get avcodec_find_decoder avcodec_flush_buffers avcodec_free_context avcodec_get_name avcodec_open2 avcodec_parameters_to_context avcodec_receive_frame avcodec_send_packet avpriv_do_elbg avpriv_init_elbg avsubtitle_free

avformat-58

av_find_best_stream av_find_input_format av_read_frame av_seek_frame avformat_close_input avformat_find_stream_info avformat_match_stream_specifier avformat_open_input avio_closep avio_get_str avio_open avio_read avio_rl32 avio_seek avio_size avio_write

avutil-56

av_adler32_update av_asprintf av_audio_fifo_alloc av_audio_fifo_drain av_audio_fifo_free av_audio_fifo_peek av_audio_fifo_peek_at av_audio_fifo_read av_audio_fifo_size av_audio_fifo_write av_bprint_channel_layout av_bprint_chars av_bprint_clear av_bprint_finalize av_bprint_init av_bprint_strftime av_bprintf av_buffer_alloc av_buffer_allocz av_buffer_pool_get av_buffer_pool_init av_buffer_pool_uninit av_buffer_ref av_buffer_unref av_calloc av_channel_layout_extract_channel av_color_primaries_name av_color_range_name av_color_space_name av_color_transfer_name av_compare_ts av_cpu_count av_d2q av_default_item_name av_dict_free av_dict_get av_dict_set av_dict_set_int av_display_rotation_get av_div_q av_dynarray2_add av_dynarray_add av_expr_count_func av_expr_count_vars av_expr_eval av_expr_free av_expr_parse av_expr_parse_and_eval av_fast_malloc av_fast_realloc av_file_map av_file_unmap av_find_best_pix_fmt_of_2 av_fopen_utf8 av_frame_alloc av_frame_clone av_frame_copy av_frame_copy_props av_frame_free av_frame_get_buffer av_frame_get_plane_buffer av_frame_get_side_data av_frame_is_writable av_frame_make_writable av_frame_move_ref av_frame_new_side_data av_frame_new_side_data_from_buf av_frame_ref av_frame_remove_side_data av_frame_unref av_free av_freep av_gcd av_gcd_q av_get_bits_per_pixel av_get_bytes_per_sample av_get_channel_layout av_get_channel_layout_channel_index av_get_channel_layout_nb_channels av_get_channel_layout_string av_get_channel_name av_get_cpu_flags av_get_default_channel_layout av_get_extended_channel_layout av_get_media_type_string av_get_packed_sample_fmt av_get_padded_bits_per_pixel av_get_picture_type_char av_get_pix_fmt av_get_pix_fmt_name av_get_planar_sample_fmt av_get_random_seed av_get_sample_fmt av_get_sample_fmt_name av_get_token av_gettime av_gettime_relative av_hwdevice_ctx_create av_hwdevice_ctx_create_derived av_hwdevice_find_type_by_name av_hwdevice_get_hwframe_constraints av_hwframe_constraints_free av_hwframe_ctx_alloc av_hwframe_ctx_create_derived av_hwframe_ctx_init av_hwframe_get_buffer av_hwframe_map av_hwframe_transfer_data av_hwframe_transfer_get_formats av_image_alloc av_image_check_size av_image_check_size2 av_image_copy av_image_copy_plane av_image_fill_linesizes av_image_fill_max_pixsteps av_image_get_linesize av_lfg_init av_log av_log_get_level av_malloc av_malloc_array av_mallocz av_mallocz_array av_memdup av_mul_q av_opt_copy av_opt_eval_flags av_opt_find av_opt_find2 av_opt_free av_opt_get_int av_opt_get_key_value av_opt_get_sample_fmt av_opt_next av_opt_set av_opt_set_defaults av_opt_set_dict av_opt_set_dict2 av_opt_set_from_string av_opt_set_int av_opt_set_sample_fmt av_parse_color av_parse_ratio av_parse_time av_parse_video_rate av_parse_video_size av_pix_fmt_count_planes av_pix_fmt_desc_get av_pix_fmt_desc_get_id av_pix_fmt_desc_next av_pixelutils_get_sad_fn av_read_image_line2 av_realloc av_realloc_array av_realloc_f av_reduce av_rescale av_rescale_q av_rescale_q_rnd av_rescale_rnd av_sample_fmt_is_planar av_samples_alloc_array_and_samples av_samples_copy av_samples_get_buffer_size av_samples_set_silence av_set_options_string av_spherical_tile_bounds av_sscanf av_stereo3d_create_side_data av_stereo3d_type_name av_strcasecmp av_strdup av_strerror av_strlcatf av_strlcpy av_strtod av_strtok av_timecode_init_from_string av_timecode_make_mpeg_tc_string av_timecode_make_smpte_tc_string2 av_timecode_make_string av_tree_destroy av_tree_enumerate av_tree_find av_tree_insert av_tree_node_alloc av_tx_init av_tx_uninit av_usleep av_video_enc_params_create_side_data av_vlog av_write_image_line2 avpriv_cga_font avpriv_float_dsp_alloc avpriv_report_missing_feature avpriv_set_systematic_pal2 avpriv_slicethread_create avpriv_slicethread_execute avpriv_slicethread_free avpriv_vga16_font

swresample-3

swr_alloc swr_alloc_set_opts swr_convert swr_free swr_get_class swr_get_delay swr_init swr_next_pts swr_set_channel_mapping swr_set_matrix

swscale-5

sws_alloc_context sws_freeContext sws_getCoefficients sws_getColorspaceDetails sws_getContext sws_get_class sws_init_context sws_isSupportedEndiannessConversion sws_isSupportedInput sws_isSupportedOutput sws_scale sws_setColorspaceDetails

av_abuffersink_params_alloc av_buffersink_get_channel_layout av_buffersink_get_channels av_buffersink_get_format av_buffersink_get_frame av_buffersink_get_frame_flags av_buffersink_get_frame_rate av_buffersink_get_h av_buffersink_get_hw_frames_ctx av_buffersink_get_sample_aspect_ratio av_buffersink_get_sample_rate av_buffersink_get_samples av_buffersink_get_time_base av_buffersink_get_type av_buffersink_get_w av_buffersink_params_alloc av_buffersink_set_frame_size av_buffersrc_add_frame av_buffersrc_add_frame_flags av_buffersrc_close av_buffersrc_get_nb_failed_requests av_buffersrc_parameters_alloc av_buffersrc_parameters_set av_buffersrc_write_frame av_filter_ffversion av_filter_iterate avfilter_add_matrix avfilter_config_links avfilter_configuration avfilter_free avfilter_get_by_name avfilter_get_class avfilter_graph_alloc avfilter_graph_alloc_filter avfilter_graph_config avfilter_graph_create_filter avfilter_graph_dump avfilter_graph_free avfilter_graph_get_filter avfilter_graph_parse avfilter_graph_parse2 avfilter_graph_parse_ptr avfilter_graph_queue_command avfilter_graph_request_oldest avfilter_graph_send_command avfilter_graph_set_auto_convert avfilter_init_dict avfilter_init_str avfilter_inout_alloc avfilter_inout_free avfilter_insert_filter avfilter_license avfilter_link avfilter_link_free avfilter_link_get_channels avfilter_link_set_closed avfilter_make_format64_list avfilter_mul_matrix avfilter_next avfilter_pad_count avfilter_pad_get_name avfilter_pad_get_type avfilter_process_command avfilter_register avfilter_register_all avfilter_sub_matrix avfilter_transform avfilter_version ff_default_query_formats ff_filter_frame ff_get_video_buffer ff_make_format_list ff_set_common_formats

Name

.text

Size

3.5MB

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rodata

Size

512B

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

100KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

av/avformat-58.dll

IMPHASH 89915f8168713efa6372bd1964165acb
SHA256 10190e1b0c7819be7a417ef69bb35f060b73a8573f1fe8d9197a620caa423151
MD5 757646aa1d506ce577f22fa3913147ae
SHA1 710730d13f441b260ea34e92ea0bb55cfc2f9763
SHA512 d3661b43173c156684218927a2c273f27b400d56c9494e1b45d617c382ef9d35961e59d151095a6de86e112f53b33e15982cebc66504860082bdcab7800a0488
SSDEEP 196608:4bQ4zvXZi1eztIMEw1trreOArHENf1s/JRLgRBBaI996MIrGzDZSnj6VrpbDKolo:vOov/JpgRBcIKyVSnjE9uP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

9b:42:f9:35:ed:c4:8c:72:9f:70:4b:04:67:c6:95:cc:81:cc:f9:6b:5f:9f:cc:9c:be:b5:8a:f6:8f:53:10:e6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

14:f5:49:61:b8:16:2b:fd:04:4a:53:e9:04:ff:1a:34:30:5b:a8:bb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

5040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

CryptAcquireContextA CryptAcquireContextW CryptCreateHash CryptDecrypt CryptDestroyHash CryptGenRandom CryptGetHashParam CryptGetProvParam CryptReleaseContext CryptSetHashParam CryptSetProvParam CryptSignHashA

crypt32

CertCloseStore CertDeleteCertificateFromStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CertGetCertificateContextProperty CertOpenSystemStoreA PFXImportCertStore

kernel32

CloseHandle CreateDirectoryW CreateEventA CreateMutexA CreateSemaphoreA CreateSemaphoreW DeleteCriticalSection DuplicateHandle EnterCriticalSection FormatMessageA FormatMessageW FreeLibrary GetACP GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetFileAttributesA GetFileAttributesW GetLastError GetModuleFileNameW GetModuleHandleExA GetModuleHandleW GetProcAddress GetProcessAffinityMask GetSystemDirectoryA GetSystemTimeAsFileTime GetTempPathA GetThreadContext GetThreadPriority GetTimeZoneInformation GetVersionExA GlobalAlloc GlobalFree GlobalHandle GlobalLock GlobalUnlock InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryA LoadLibraryW LocalFree MoveFileExA MoveFileExW MultiByteToWideChar OpenProcess QueryPerformanceCounter QueryPerformanceFrequency ReleaseMutex ReleaseSemaphore ResetEvent ResumeThread SetEvent SetLastError SetThreadAffinityMask SetThreadContext SetThreadPriority Sleep SuspendThread TlsAlloc TlsFree TlsGetValue TlsSetValue VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte lstrcpyA lstrcpynA

msvcrt

__mb_cur_max __setusermatherr _access _amsg_exit _assert _beginthread _beginthreadex _endthread _endthreadex _errno _close _filelengthi64 _fileno _findclose _fstat64 _fstati64 _ftime _fullpath _hypot _initterm _iob _lock _lseeki64 _open _rmdir _setjmp3 _unlink _unlock _vscprintf _vsnprintf _waccess _wfindfirst _wfindnext _wfopen _wmkdir _wopen _wremove _wrmdir _wstat _wunlink abort atof atoi bsearch calloc exit fclose feof ferror fflush fgetc fgetpos fgets fopen fprintf fputc fputs fread free fseek fsetpos ftell fwrite getc getenv getwc gmtime isalpha islower isspace isupper iswctype isxdigit localeconv localtime log10 malloc memchr memcmp memcpy memmove memset localtime gmtime _mkdir printf putc putchar puts putwc qsort rand realloc setlocale setvbuf sprintf srand sscanf strcat strchr strcmp strcoll strcpy strcspn strerror strftime strlen strncat strncmp strncpy strpbrk strrchr strspn strstr strtol strtoul strxfrm time tolower toupper towlower towupper ungetc ungetwc vfprintf time _stricmp _strnicmp wcscoll wcsftime wcslen wcstombs wcsxfrm _stat _stati64 _ftime64 _findnext _findfirst longjmp _write _strdup _setmode _read _putenv _open _lseek _getpid _getcwd _fileno _fdopen _dup _close

user32

wsprintfA

ws2_32

WSACleanup WSAGetLastError WSARecvFrom WSASendTo WSASetLastError WSAStartup __WSAFDIsSet accept bind closesocket connect freeaddrinfo getaddrinfo gethostname getnameinfo getpeername getsockname getsockopt htonl htons ioctlsocket listen ntohl ntohs recv recvfrom select send sendto setsockopt shutdown socket

avcodec-58

av_ac3_parse_header av_adts_header_parse av_bitstream_filter_filter av_bsf_alloc av_bsf_free av_bsf_get_by_name av_bsf_init av_bsf_receive_packet av_bsf_send_packet av_codec_is_decoder av_codec_iterate av_dirac_parse_sequence_header av_dv_frame_profile av_get_audio_frame_duration av_get_audio_frame_duration2 av_get_bits_per_sample av_get_exact_bits_per_sample av_grow_packet av_init_packet av_new_packet av_packet_add_side_data av_packet_alloc av_packet_copy_props av_packet_free av_packet_from_data av_packet_get_side_data av_packet_make_refcounted av_packet_move_ref av_packet_new_side_data av_packet_pack_dictionary av_packet_ref av_packet_rescale_ts av_packet_unref av_parser_close av_parser_init av_parser_parse2 av_shrink_packet av_vorbis_parse_frame_flags av_vorbis_parse_free av_vorbis_parse_init av_vorbis_parse_reset av_xiphlacing avcodec_alloc_context3 avcodec_chroma_pos_to_enum avcodec_close avcodec_decode_subtitle2 avcodec_descriptor_get avcodec_find_decoder avcodec_find_decoder_by_name avcodec_free_context avcodec_get_name avcodec_get_type avcodec_is_open avcodec_open2 avcodec_parameters_alloc avcodec_parameters_copy avcodec_parameters_free avcodec_parameters_from_context avcodec_parameters_to_context avcodec_pix_fmt_to_codec_tag avcodec_receive_frame avcodec_send_packet avcodec_string avpriv_ac3_channel_layout_tab avpriv_codec_get_cap_skip_frame_fill_param avpriv_dca_convert_bitstream avpriv_dca_parse_core_frame_header avpriv_exif_decode_ifd avpriv_find_pix_fmt avpriv_find_start_code avpriv_fits_header_init avpriv_fits_header_parse_line avpriv_get_raw_pix_fmt_tags avpriv_h264_has_num_reorder_frames avpriv_mjpeg_bits_ac_chrominance avpriv_mjpeg_bits_ac_luminance avpriv_mjpeg_bits_dc_chrominance avpriv_mjpeg_bits_dc_luminance avpriv_mjpeg_val_ac_chrominance avpriv_mjpeg_val_ac_luminance avpriv_mjpeg_val_dc avpriv_mpa_freq_tab avpriv_mpeg4audio_get_config2 avpriv_mpeg4audio_sample_rates avpriv_mpegaudio_decode_header avpriv_packet_list_free avpriv_packet_list_get avpriv_packet_list_put avpriv_tak_parse_streaminfo avpriv_toupper4 avsubtitle_free

avutil-56

av_add_stable av_aes_alloc av_aes_crypt av_aes_ctr_alloc av_aes_ctr_crypt av_aes_ctr_free av_aes_ctr_init av_aes_ctr_set_full_iv av_aes_init av_append_path_component av_asprintf av_base64_decode av_base64_encode av_basename av_bprint_append_data av_bprint_chars av_bprint_clear av_bprint_finalize av_bprint_init av_bprint_init_for_buffer av_bprintf av_buffer_alloc av_buffer_create av_buffer_default_free av_buffer_pool_get av_buffer_pool_init av_buffer_pool_uninit av_buffer_realloc av_buffer_ref av_buffer_unref av_calloc av_color_primaries_name av_color_space_name av_color_transfer_name av_compare_mod av_compare_ts av_content_light_metadata_alloc av_crc av_crc_get_table av_d2q av_default_item_name av_des_alloc av_des_crypt av_des_init av_des_mac av_dict_copy av_dict_count av_dict_free av_dict_get av_dict_parse_string av_dict_set av_dict_set_int av_display_rotation_get av_div_q av_dovi_alloc av_dynarray2_add av_dynarray_add av_dynarray_add_nofree av_encryption_info_add_side_data av_encryption_info_alloc av_encryption_info_clone av_encryption_info_free av_encryption_init_info_add_side_data av_encryption_init_info_alloc av_encryption_init_info_free av_encryption_init_info_get_side_data av_expr_eval av_expr_parse av_fast_malloc av_fast_realloc av_fifo_alloc av_fifo_drain av_fifo_freep av_fifo_generic_peek av_fifo_generic_peek_at av_fifo_generic_read av_fifo_generic_write av_fifo_reset av_fifo_size av_fifo_space av_find_info_tag av_fourcc_make_string av_frame_alloc av_frame_free av_free av_freep av_gcd av_get_channel_layout_nb_channels av_get_channel_name av_get_media_type_string av_get_picture_type_char av_get_pix_fmt av_get_random_seed av_get_token av_gettime av_gettime_relative av_hmac_alloc av_hmac_final av_hmac_free av_hmac_init av_hmac_update av_image_check_sar av_image_check_size av_image_get_buffer_size av_lfg_init av_log av_log_get_level av_lzo1x_decode av_malloc av_malloc_array av_mallocz av_mallocz_array av_mastering_display_metadata_alloc av_match_list av_match_name av_md5_alloc av_md5_final av_md5_init av_md5_sum av_md5_update av_memdup av_mul_q av_opt_copy av_opt_flag_is_set av_opt_free av_opt_get av_opt_get_dict_val av_opt_get_int av_opt_get_key_value av_opt_next av_opt_ptr av_opt_set av_opt_set_bin av_opt_set_defaults av_opt_set_dict av_opt_set_dict2 av_opt_set_dict_val av_opt_set_from_string av_parse_ratio av_parse_time av_parse_video_rate av_pix_fmt_desc_get av_rc4_alloc av_rc4_crypt av_rc4_init av_realloc av_realloc_array av_realloc_f av_reallocp av_reallocp_array av_reduce av_rescale av_rescale_q av_rescale_q_rnd av_rescale_rnd av_sha_alloc av_sha_final av_sha_init av_sha_update av_small_strptime av_spherical_alloc av_spherical_projection_name av_spherical_tile_bounds av_sscanf av_stereo3d_alloc av_stereo3d_type_name av_strcasecmp av_strdup av_strerror av_strireplace av_stristart av_stristr av_strlcat av_strlcatf av_strlcpy av_strncasecmp av_strndup av_strstart av_strtod av_strtok av_tea_alloc av_tea_crypt av_tea_init av_timecode_init av_timecode_make_smpte_tc_string2 av_timecode_make_string av_timegm av_tree_destroy av_tree_enumerate av_tree_find av_tree_insert av_tree_node_alloc av_usleep av_vbprintf avpriv_dict_set_timestamp avpriv_open avpriv_report_missing_feature avpriv_request_sample avpriv_tempfile

av_add_index_entry av_append_packet av_apply_bitstream_filters av_codec_get_id av_codec_get_tag av_codec_get_tag2 av_demuxer_iterate av_demuxer_open av_dump_format av_filename_number_test av_find_best_stream av_find_default_stream_index av_find_input_format av_find_program_from_stream av_fmt_ctx_get_duration_estimation_method av_format_ffversion av_format_get_audio_codec av_format_get_control_message_cb av_format_get_data_codec av_format_get_metadata_header_padding av_format_get_opaque av_format_get_open_cb av_format_get_probe_score av_format_get_subtitle_codec av_format_get_video_codec av_format_inject_global_side_data av_format_set_audio_codec av_format_set_control_message_cb av_format_set_data_codec av_format_set_metadata_header_padding av_format_set_opaque av_format_set_open_cb av_format_set_subtitle_codec av_format_set_video_codec av_get_frame_filename av_get_frame_filename2 av_get_output_timestamp av_get_packet av_guess_codec av_guess_format av_guess_frame_rate av_guess_sample_aspect_ratio av_hex_dump av_hex_dump_log av_iformat_next av_index_search_timestamp av_interleaved_write_frame av_interleaved_write_uncoded_frame av_match_ext av_muxer_iterate av_new_program av_oformat_next av_pkt_dump2 av_pkt_dump_log2 av_probe_input_buffer av_probe_input_buffer2 av_probe_input_format av_probe_input_format2 av_probe_input_format3 av_program_add_stream_index av_read_frame av_read_pause av_read_play av_register_all av_register_input_format av_register_output_format av_sdp_create av_seek_frame av_stream_add_side_data av_stream_get_codec_timebase av_stream_get_end_pts av_stream_get_parser av_stream_get_r_frame_rate av_stream_get_recommended_encoder_configuration av_stream_get_side_data av_stream_new_side_data av_stream_set_r_frame_rate av_stream_set_recommended_encoder_configuration av_url_split av_write_frame av_write_trailer av_write_uncoded_frame av_write_uncoded_frame_query avformat_alloc_context avformat_alloc_output_context2 avformat_close_input avformat_configuration avformat_find_stream_info avformat_flush avformat_free_context avformat_get_class avformat_get_mov_audio_tags avformat_get_mov_video_tags avformat_get_riff_audio_tags avformat_get_riff_video_tags avformat_init_output avformat_license avformat_match_stream_specifier avformat_network_deinit avformat_network_init avformat_new_stream avformat_open_input avformat_query_codec avformat_queue_attached_pictures avformat_seek_file avformat_transfer_internal_stream_timing_info avformat_version avformat_write_header avio_accept avio_alloc_context avio_check avio_close avio_close_dir avio_close_dyn_buf avio_closep avio_context_free avio_enum_protocols avio_feof avio_find_protocol_name avio_flush avio_free_directory_entry avio_get_dyn_buf avio_get_str avio_get_str16be avio_get_str16le avio_handshake avio_open avio_open2 avio_open_dir avio_open_dyn_buf avio_pause avio_print_string_array avio_printf avio_protocol_get_class avio_put_str avio_put_str16be avio_put_str16le avio_r8 avio_rb16 avio_rb24 avio_rb32 avio_rb64 avio_read avio_read_dir avio_read_partial avio_read_to_bprint avio_rl16 avio_rl24 avio_rl32 avio_rl64 avio_seek avio_seek_time avio_size avio_skip avio_w8 avio_wb16 avio_wb24 avio_wb32 avio_wb64 avio_wl16 avio_wl24 avio_wl32 avio_wl64 avio_write avio_write_marker avpriv_dv_get_packet avpriv_dv_init_demux avpriv_dv_produce_packet avpriv_io_delete avpriv_io_move avpriv_mpegts_parse_close avpriv_mpegts_parse_open avpriv_mpegts_parse_packet avpriv_new_chapter avpriv_register_devices avpriv_set_pts_info ff_guess_image2_codec ffvcl_reset_memory_protocol_callback ffvcl_set_memory_protocol_callback

Name

.text

Size

6.3MB

Virtual Size

6.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

565KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

196KB

Virtual Size

196KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

av/avutil-56.dll

IMPHASH 483bbb94eef2f764360d3c98297ea267
SHA256 825a405cabd839abfc2ffaae9fea5153630d6de5259592df34a69c592bddb029
MD5 6be55b366214a8bfc5d8689665d6ba72
SHA1 e0a1023f8dcfdd0ad60804c7dba1064cbb808b47
SHA512 c99895ff586d9abfa01adb9b2eb70ea0d941b477ed23be14baa6604c6cbd98701b3da6894f8589fd4bc1bbdd021043e16ccffd0581295dbc78d8395adf775d90
SSDEEP 12288:xvHx0Ygf8UJxxTmlBvCdNTWlPPXfRqEZnnJjA0xwR6SmaPNTRmioaTob:xvHx0h8UJvTmDapWlPPX5qEJnJjA0xwQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

7b:72:52:b7:40:f8:d1:0d:42:88:59:f6:4e:a3:a9:35:fa:cf:5b:37:aa:ac:e5:28:1d:ac:ea:c5:4a:59:f6:83

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

8d:34:b2:1d:ae:cc:ab:e8:d3:0d:24:5a:b8:07:1c:6a:2f:68:74:15

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

5040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

bcrypt

BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider

kernel32

CloseHandle CreateEventA CreateFileMappingA CreateMutexA CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection FreeLibrary GetConsoleMode GetConsoleScreenBufferInfo GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetLastError GetModuleFileNameW GetModuleHandleW GetProcAddress GetProcessAffinityMask GetStdHandle GetSystemDirectoryA GetSystemDirectoryW GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTimeZoneInformation InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW MapViewOfFile MultiByteToWideChar OpenProcess ReleaseMutex ReleaseSemaphore ResetEvent ResumeThread SetConsoleTextAttribute SetEvent SetLastError SetThreadContext SetThreadPriority Sleep SuspendThread TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW

msvcrt

__mb_cur_max __setusermatherr _aligned_free _aligned_malloc _aligned_realloc _amsg_exit _beginthreadex _endthreadex _errno _fstati64 _get_osfhandle _hypot _initterm _iob _lock _setjmp3 _sopen _unlock _wsopen abort acos asin atan atoi bsearch calloc clock cosh exit fputc fputs free frexp fwrite getc getenv islower isspace isupper isxdigit localeconv log10 malloc memchr memcmp memcpy memmove memset mktime localtime gmtime rand realloc setlocale sinh strchr strcmp strcpy strcspn strerror strftime strlen strncat strncmp strrchr strspn strstr strtol strtoul tan tanh tolower ungetc vfprintf wcscpy wcslen wcsrchr _ftime64 longjmp _read _isatty _fdopen _close

user32

GetDesktopWindow

av_add_i av_add_q av_add_stable av_adler32_update av_aes_alloc av_aes_crypt av_aes_ctr_alloc av_aes_ctr_crypt av_aes_ctr_free av_aes_ctr_get_iv av_aes_ctr_increment_iv av_aes_ctr_init av_aes_ctr_set_full_iv av_aes_ctr_set_iv av_aes_ctr_set_random_iv av_aes_init av_aes_size av_append_path_component av_asprintf av_assert0_fpu av_audio_fifo_alloc av_audio_fifo_drain av_audio_fifo_free av_audio_fifo_peek av_audio_fifo_peek_at av_audio_fifo_read av_audio_fifo_realloc av_audio_fifo_reset av_audio_fifo_size av_audio_fifo_space av_audio_fifo_write av_base64_decode av_base64_encode av_basename av_blowfish_alloc av_blowfish_crypt av_blowfish_crypt_ecb av_blowfish_init av_bmg_get av_bprint_append_data av_bprint_channel_layout av_bprint_chars av_bprint_clear av_bprint_escape av_bprint_finalize av_bprint_get_buffer av_bprint_init av_bprint_init_for_buffer av_bprint_strftime av_bprintf av_buffer_alloc av_buffer_allocz av_buffer_create av_buffer_default_free av_buffer_get_opaque av_buffer_get_ref_count av_buffer_is_writable av_buffer_make_writable av_buffer_pool_buffer_get_opaque av_buffer_pool_get av_buffer_pool_init av_buffer_pool_init2 av_buffer_pool_uninit av_buffer_realloc av_buffer_ref av_buffer_replace av_buffer_unref av_calloc av_camellia_alloc av_camellia_crypt av_camellia_init av_camellia_size av_cast5_alloc av_cast5_crypt av_cast5_crypt2 av_cast5_init av_cast5_size av_channel_layout_extract_channel av_chroma_location_from_name av_chroma_location_name av_cmp_i av_color_primaries_from_name av_color_primaries_name av_color_range_from_name av_color_range_name av_color_space_from_name av_color_space_name av_color_transfer_from_name av_color_transfer_name av_compare_mod av_compare_ts av_content_light_metadata_alloc av_content_light_metadata_create_side_data av_cpu_count av_cpu_max_align av_crc av_crc_get_table av_crc_init av_d2q av_d2str av_default_get_category av_default_item_name av_des_alloc av_des_crypt av_des_init av_des_mac av_dict_copy av_dict_count av_dict_free av_dict_get av_dict_get_string av_dict_parse_string av_dict_set av_dict_set_int av_dirname av_display_matrix_flip av_display_rotation_get av_display_rotation_set av_div_i av_div_q av_dovi_alloc av_downmix_info_update_side_data av_dynamic_hdr_plus_alloc av_dynamic_hdr_plus_create_side_data av_dynarray2_add av_dynarray_add av_dynarray_add_nofree av_encryption_info_add_side_data av_encryption_info_alloc av_encryption_info_clone av_encryption_info_free av_encryption_info_get_side_data av_encryption_init_info_add_side_data av_encryption_init_info_alloc av_encryption_init_info_free av_encryption_init_info_get_side_data av_escape av_expr_count_func av_expr_count_vars av_expr_eval av_expr_free av_expr_parse av_expr_parse_and_eval av_fast_malloc av_fast_mallocz av_fast_realloc av_fifo_alloc av_fifo_alloc_array av_fifo_drain av_fifo_free av_fifo_freep av_fifo_generic_peek av_fifo_generic_peek_at av_fifo_generic_read av_fifo_generic_write av_fifo_grow av_fifo_realloc2 av_fifo_reset av_fifo_size av_fifo_space av_file_map av_file_unmap av_film_grain_params_alloc av_film_grain_params_create_side_data av_find_best_pix_fmt_of_2 av_find_info_tag av_find_nearest_q_idx av_fopen_utf8 av_force_cpu_flags av_fourcc_make_string av_frame_alloc av_frame_apply_cropping av_frame_clone av_frame_copy av_frame_copy_props av_frame_free av_frame_get_best_effort_timestamp av_frame_get_buffer av_frame_get_channel_layout av_frame_get_channels av_frame_get_color_range av_frame_get_colorspace av_frame_get_decode_error_flags av_frame_get_metadata av_frame_get_pkt_duration av_frame_get_pkt_pos av_frame_get_pkt_size av_frame_get_plane_buffer av_frame_get_qp_table av_frame_get_sample_rate av_frame_get_side_data av_frame_is_writable av_frame_make_writable av_frame_move_ref av_frame_new_side_data av_frame_new_side_data_from_buf av_frame_ref av_frame_remove_side_data av_frame_set_best_effort_timestamp av_frame_set_channel_layout av_frame_set_channels av_frame_set_color_range av_frame_set_colorspace av_frame_set_decode_error_flags av_frame_set_metadata av_frame_set_pkt_duration av_frame_set_pkt_pos av_frame_set_pkt_size av_frame_set_qp_table av_frame_set_sample_rate av_frame_side_data_name av_frame_unref av_free av_freep av_gcd av_gcd_q av_get_alt_sample_fmt av_get_bits_per_pixel av_get_bytes_per_sample av_get_channel_description av_get_channel_layout av_get_channel_layout_channel_index av_get_channel_layout_nb_channels av_get_channel_layout_string av_get_channel_name av_get_colorspace_name av_get_cpu_flags av_get_default_channel_layout av_get_extended_channel_layout av_get_known_color_name av_get_media_type_string av_get_packed_sample_fmt av_get_padded_bits_per_pixel av_get_picture_type_char av_get_pix_fmt av_get_pix_fmt_loss av_get_pix_fmt_name av_get_pix_fmt_string av_get_planar_sample_fmt av_get_random_seed av_get_sample_fmt av_get_sample_fmt_name av_get_sample_fmt_string av_get_standard_channel_layout av_get_time_base_q av_get_token av_gettime av_gettime_relative av_gettime_relative_is_monotonic av_hash_alloc av_hash_final av_hash_final_b64 av_hash_final_bin av_hash_final_hex av_hash_freep av_hash_get_name av_hash_get_size av_hash_init av_hash_names av_hash_update av_hmac_alloc av_hmac_calc av_hmac_final av_hmac_free av_hmac_init av_hmac_update av_hwdevice_ctx_alloc av_hwdevice_ctx_create av_hwdevice_ctx_create_derived av_hwdevice_ctx_create_derived_opts av_hwdevice_ctx_init av_hwdevice_find_type_by_name av_hwdevice_get_hwframe_constraints av_hwdevice_get_type_name av_hwdevice_hwconfig_alloc av_hwdevice_iterate_types av_hwframe_constraints_free av_hwframe_ctx_alloc av_hwframe_ctx_create_derived av_hwframe_ctx_init av_hwframe_get_buffer av_hwframe_map av_hwframe_transfer_data av_hwframe_transfer_get_formats av_i2int av_image_alloc av_image_check_sar av_image_check_size av_image_check_size2 av_image_copy av_image_copy_plane av_image_copy_to_buffer av_image_copy_uc_from av_image_fill_arrays av_image_fill_black av_image_fill_linesizes av_image_fill_max_pixsteps av_image_fill_plane_sizes av_image_fill_pointers av_image_get_buffer_size av_image_get_linesize av_int2i av_int_list_length_for_size av_lfg_init av_lfg_init_from_data av_log av_log2 av_log2_16bit av_log2_i av_log_default_callback av_log_format_line av_log_format_line2 av_log_get_flags av_log_get_level av_log_once av_log_set_callback av_log_set_flags av_log_set_level av_lzo1x_decode av_malloc av_malloc_array av_mallocz av_mallocz_array av_mastering_display_metadata_alloc av_mastering_display_metadata_create_side_data av_match_list av_match_name av_max_alloc av_md5_alloc av_md5_final av_md5_init av_md5_size av_md5_sum av_md5_update av_memcpy_backptr av_memdup av_mod_i av_mul_i av_mul_q av_murmur3_alloc av_murmur3_final av_murmur3_init av_murmur3_init_seeded av_murmur3_update av_nearer_q av_opt_child_class_iterate av_opt_child_class_next av_opt_child_next av_opt_copy av_opt_eval_double av_opt_eval_flags av_opt_eval_float av_opt_eval_int av_opt_eval_int64 av_opt_eval_q av_opt_find av_opt_find2 av_opt_flag_is_set av_opt_free av_opt_freep_ranges av_opt_get av_opt_get_channel_layout av_opt_get_dict_val av_opt_get_double av_opt_get_image_size av_opt_get_int av_opt_get_key_value av_opt_get_pixel_fmt av_opt_get_q av_opt_get_sample_fmt av_opt_get_video_rate av_opt_is_set_to_default av_opt_is_set_to_default_by_name av_opt_next av_opt_ptr av_opt_query_ranges av_opt_query_ranges_default av_opt_serialize av_opt_set av_opt_set_bin av_opt_set_channel_layout av_opt_set_defaults av_opt_set_defaults2 av_opt_set_dict av_opt_set_dict2 av_opt_set_dict_val av_opt_set_double av_opt_set_from_string av_opt_set_image_size av_opt_set_int av_opt_set_pixel_fmt av_opt_set_q av_opt_set_sample_fmt av_opt_set_video_rate av_opt_show2 av_parse_color av_parse_cpu_caps av_parse_cpu_flags av_parse_ratio av_parse_time av_parse_video_rate av_parse_video_size av_pix_fmt_count_planes av_pix_fmt_desc_get av_pix_fmt_desc_get_id av_pix_fmt_desc_next av_pix_fmt_get_chroma_sub_sample av_pix_fmt_swap_endianness av_pixelutils_get_sad_fn av_q2intfloat av_rc4_alloc av_rc4_crypt av_rc4_init av_read_image_line av_read_image_line2 av_realloc av_realloc_array av_realloc_f av_reallocp av_reallocp_array av_reduce av_rescale av_rescale_delta av_rescale_q av_rescale_q_rnd av_rescale_rnd av_ripemd_alloc av_ripemd_final av_ripemd_init av_ripemd_size av_ripemd_update av_sample_fmt_is_planar av_samples_alloc av_samples_alloc_array_and_samples av_samples_copy av_samples_fill_arrays av_samples_get_buffer_size av_samples_set_silence av_set_cpu_flags_mask av_set_options_string av_sha512_alloc av_sha512_final av_sha512_init av_sha512_size av_sha512_update av_sha_alloc av_sha_final av_sha_init av_sha_size av_sha_update av_shr_i av_small_strptime av_spherical_alloc av_spherical_from_name av_spherical_projection_name av_spherical_tile_bounds av_sscanf av_stereo3d_alloc av_stereo3d_create_side_data av_stereo3d_from_name av_stereo3d_type_name av_strcasecmp av_strdup av_strerror av_strireplace av_stristart av_stristr av_strlcat av_strlcatf av_strlcpy av_strncasecmp av_strndup av_strnstr av_strstart av_strtod av_strtok av_sub_i av_sub_q av_tea_alloc av_tea_crypt av_tea_init av_tea_size av_tempfile av_thread_message_flush av_thread_message_queue_alloc av_thread_message_queue_free av_thread_message_queue_nb_elems av_thread_message_queue_recv av_thread_message_queue_send av_thread_message_queue_set_err_recv av_thread_message_queue_set_err_send av_thread_message_queue_set_free_func av_timecode_adjust_ntsc_framenum2 av_timecode_check_frame_rate av_timecode_get_smpte av_timecode_get_smpte_from_framenum av_timecode_init av_timecode_init_from_components av_timecode_init_from_string av_timecode_make_mpeg_tc_string av_timecode_make_smpte_tc_string av_timecode_make_smpte_tc_string2 av_timecode_make_string av_timegm av_tree_destroy av_tree_enumerate av_tree_find av_tree_insert av_tree_node_alloc av_tree_node_size av_twofish_alloc av_twofish_crypt av_twofish_init av_twofish_size av_tx_init av_tx_uninit av_usleep av_utf8_decode av_util_ffversion av_vbprintf av_version_info av_video_enc_params_alloc av_video_enc_params_create_side_data av_vlog av_write_image_line av_write_image_line2 av_xtea_alloc av_xtea_crypt av_xtea_init av_xtea_le_crypt av_xtea_le_init avpriv_alloc_fixed_dsp avpriv_cga_font avpriv_dict_set_timestamp avpriv_float_dsp_alloc avpriv_get_gamma_from_trc avpriv_get_trc_function_from_trc avpriv_init_lls avpriv_open avpriv_report_missing_feature avpriv_request_sample avpriv_scalarproduct_float_c avpriv_set_systematic_pal2 avpriv_slicethread_create avpriv_slicethread_execute avpriv_slicethread_free avpriv_solve_lls avpriv_tempfile avpriv_vga16_font avutil_configuration avutil_license avutil_version

Name

.text

Size

572KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

97KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

888B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

av/swresample-3.dll

IMPHASH 9ad731d37d3ea2f838d63d288fa8c273
SHA256 c17558dfe866a072a8565532dd5cd2d0339b136fdb42a071c3c95c1425adbda6
MD5 b69b23e46c74834b27c0150fa48d8367
SHA1 ef90fa03cbf1eaa0ec38f981aba35334a090fc83
SHA512 5a1504bf152bd29393bf6b2a50efeb35784f62f1f399e3d5bd082ad87b499e78ef595ea6d7056297976a87d33f8264bd730db261c1135de811b718af4795d60a
SSDEEP 6144:Snn/N5+jc/MMWd3hN79eOQnBLsrfIR8gI/0/WG6ytTJ1mwDfPHqTHV:Sn/sc/M3hf79bQnsfIRY0/WG1tTJqjV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

f0:7d:75:d3:9a:5f:0b:df:ff:9e:31:b8:b6:82:6c:df:c1:fc:aa:41:ca:7e:14:db:1f:8b:c5:06:44:fc:ea:0b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

17:a5:03:ef:75:2a:f5:b9:08:5e:b6:30:e5:f9:52:b4:79:62:9b:d9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

5040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

244KB

Virtual Size

244KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

576B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

212KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

660B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

920B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

av/swscale-5.dll

IMPHASH 4545c0140d8a26dbcf1e58ac66be2d47
SHA256 9cff507b38c920c1048ba24fa7d39272aab574a77a6523308b004ba129213641
MD5 5a305996d068297a4d44cb7a31f2b5a4
SHA1 311658fb81814d4d7098f2e320c224bda7c429be
SHA512 81d63e5330594e0dea6fea66bdcd7aaa92a4b24c4e56aac6e6df4a65f5dc3823b90c69cf83ad2fab8fdf516cc42e711ad5e9d9acc890f0532a7fae241f6322f8
SSDEEP 12288:es0wGw+h8v44lgGEk3xbYyGwTDejVyolpV:ex8v44lgGPhbYyGwTDejvlpV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

35:73:96:88:44:bc:95:d5:88:eb:ae:7f:35:7d:de:aa:b8:95:56:1a:61:24:2d:b6:e6:f8:d5:3d:63:11:bc:22

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

94:69:4e:c7:42:2b:6f:80:7d:a2:63:a6:72:4d:0e:90:57:ac:d7:e6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

5040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

495KB

Virtual Size

495KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

1006B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

904B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

b64.dll

IMPHASH bcf0c2f3d39c34f50899f10439f86703
SHA256 acee4259a0bfd79cf2d96750aeed6e0226aacf83c29f9044e1512454b24d5ce3
MD5 040e24380a8929fc7f7fca4802927052
SHA1 bbdd0008518b3194742cb1ade8c13c9db963f014
SHA512 648eca99d9c9b68630c38f49621115593bfb31c5753c85f457842a321e2d085e2313f7b3765b05eb58b6b582f9777dca97509d878f36935638284075eb76f580
SSDEEP 3072:o9Qcjyb1ph60e1wKt4CocGS/GlUB9ltVkRhZWhZ7:aPybW1wKtpdGM/EHWH7
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

f2:a7:99:61:6e:41:33:c8:9a:92:fe:53:24:09:6f:4c:81:f0:d0:12:74:e8:2a:8d:91:73:4e:48:71:7e:53:4e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Sep 7, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

50:7a:f8:65:75:7a:21:0f:d2:1f:81:5c:c0:06:a7:b4:d4:5e:e3:12

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Sep 7, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

26388

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

59KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

49KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

cbfs.cab

SHA256 e2329f67af5486a639b52f119e0b66e37eb7055380563dde0d7a1a32507d80fa
MD5 c637b6a526415a3fff669d2409213c5c
SHA1 607b524a3aff47dc630ccbbd080a3c83f90b0a80
SHA512 83d2a4f6c9ad623a4127b685d239ecf9651a797f5b5956e39f994d1025b8f5a24142588552ba637cdc32d0e294f90efe722e1f1484b002a43364087ea20b0285
SSDEEP 49152:gxmjzoQI45BymLCaxeX5RFcTrFWJP/DOt3cr3qJ5j6XJ7zM3Xv:gYvB1WZpRFsr67OtMunSM3/
MD5 SHA1 SHA512 SSDEEP

cbfsconnectevtmsg.dll

SHA256 e560d90e3f2f4770310574f1b53e6f567579ce01886759d4e3db507eb430f241
MD5 3b09c81e1ae6c5d39f363c30e5659936
SHA1 bb1d5932dd0a2da95f31f55ecd525245a449652e
SHA512 8fc6ef9cd4afe8d653bc15b915d5a70b6bf08a748650c72de95db5aa90a349bb87ec9759556b986f843bdfa3a23914d9375184adfe7dd8144c2fe0c5b713e668
SSDEEP 192:CzTXVq5unYe+PjPJdZubhhRPsuSZscF8Bd1LcJNaW2:CnXVVnYPLXZAyZsHLcJ72
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

59:87:f0:71:da:06:2d:66:cd:72:fd:e9:ef:90:07:a4:52:c4:12:7e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 2, 2020

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

03:df:08:a3:c3:bd:af:27:16:c1:91:29:d0:bd:29:e6

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 29, 2017 - Sep 1, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

0

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

i386/SHA1/cbfsconnect2017.sys

IMPHASH 5d28e7aceab7e2ae7853d717a86cee9c
SHA256 45b0f42a6c8ea1aacccde5b9029ad86e1ab1b76582bc0c7fdd56d14dbe6a58cb
MD5 efb9ea299f39de7bb610b57693f36061
SHA1 c637efbbbe07f9e55b2951b39b352ee2db9cd8e3
SHA512 fe38d1b662a71c05b41e9b9be6e7f47841d8f83f5720ce546580f50a41a9c21bb067c5ad4817fd26b3bef765e928f5c19660baebb3f51af58ede48450305b246
SSDEEP 6144:xSsctdynja016GaRnitK4UMMIQB4bOlM2FKVsTUOs:Uhax1JztMIG4bO24XUO
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

7e:bb:e7:ae:cc:69:64:37:dc:d0:d9:c6:1f:d3:03:8f:a6:ea:6a:22

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 2, 2020

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

03:df:08:a3:c3:bd:af:27:16:c1:91:29:d0:bd:29:e6

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 29, 2017 - Sep 1, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

1

Major OS version

6

Entry point

355735

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\projects\cbfsconnect\bin\wxp\fre\i386\cbfsconnect2017.pdb

ntoskrnl.exe

ExAcquireResourceExclusiveLite KeEnterCriticalRegion ExReleaseFastMutexUnsafe ExAcquireFastMutexUnsafe RtlUnicodeStringToAnsiString IoQueueWorkItem ObfReferenceObject IoAllocateWorkItem IoFreeIrp KeWaitForSingleObject IoGetCurrentProcess _alldiv MmGetSystemRoutineAddress RtlAppendUnicodeStringToString RtlAppendUnicodeToString ExQueueWorkItem RtlCompareMemory IoRegisterPlugPlayNotification IoUnregisterPlugPlayNotification ExDeleteNPagedLookasideList ExDeletePagedLookasideList ExDeleteResourceLite IoDeleteDevice IoDeleteSymbolicLink IoRegisterFileSystem IoCreateSymbolicLink ExInitializePagedLookasideList ExInitializeNPagedLookasideList ExInitializeResourceLite MmQuerySystemSize KeInitializeTimer KeInitializeDpc IoCreateDevice FsRtlRegisterFileSystemFilterCallbacks PsGetVersion IoUnregisterFileSystem KeSetTimer KeCancelTimer IofCompleteRequest KeBugCheckEx FsRtlIsNtstatusExpected KeSetEvent FsRtlNotifyFullReportChange IoRaiseInformationalHardError IoIsSystemThread IoRaiseHardError IoSetDeviceToVerify IoGetDeviceToVerify FsRtlIsTotalDeviceFailure IoGetTopLevelIrp CcMdlWriteAbort IoSetTopLevelIrp IoFreeMdl MmProbeAndLockPages ExRaiseStatus IoAllocateMdl MmMapLockedPagesSpecifyCache ZwCreateKey ZwOpenKey ZwQueryValueKey ZwSetValueKey IofCallDriver IoAllocateIrp IoGetRelatedDeviceObject ZwSetInformationFile ZwQueryInformationFile ObReferenceObjectByHandle IoFileObjectType ZwCreateFile ZwOpenFile ObQueryNameString ExAcquireResourceSharedLite ExInterlockedPopEntrySList ExInterlockedPushEntrySList ExFreeToPagedLookasideList ExAllocateFromPagedLookasideList CcSetFileSizes FsRtlTeardownPerStreamContexts FsRtlUninitializeOplock FsRtlUninitializeFileLock KeQuerySystemTime PsGetProcessId RtlDeleteElementGenericTable RtlLookupElementGenericTable RtlInsertElementGenericTable RtlInitializeGenericTable RtlEnumerateGenericTableWithoutSplaying PsTerminateSystemThread FsRtlNotifyUninitializeSync FsRtlInitializeOplock FsRtlInitializeFileLock PsCreateSystemThread IoReleaseVpbSpinLock IoAcquireVpbSpinLock ExReleaseResourceLite IoCreateStreamFileObjectLite FsRtlNormalizeNtstatus IoSetHardErrorOrVerifyDevice IoVerifyVolume FsRtlOplockIsFastIoPossible ExAcquireSharedWaitForExclusive SeSinglePrivilegeCheck RtlLengthSecurityDescriptor IoCheckShareAccess PsGetCurrentThreadId IoRemoveShareAccess IoSetShareAccess CcIsThereDirtyData memmove IoUpdateShareAccess FsRtlOplockFsctrl FsRtlCheckOplock CcPurgeCacheSection MmCanFileBeTruncated CcFlushCache MmFlushImageSection FsRtlCurrentBatchOplock ExAllocatePool FsRtlDoesNameContainWildCards IoThreadToProcess FsRtlNotifyVolumeEvent MmForceSectionClosed CcUninitializeCacheMap ExReleaseResourceForThreadLite FsRtlFastUnlockAll IoGetRequestorProcess FsRtlNotifyCleanup FsRtlNotifyFullChangeDirectory MmUnlockPages CcWaitForCurrentLazyWriterActivity RtlFreeAnsiString IoBuildAsynchronousFsdRequest ExIsResourceAcquiredExclusiveLite CcGetFileObjectFromSectionPtrs ObOpenObjectByPointer KeTickCount ProbeForRead IoIsOperationSynchronous RtlCompareUnicodeString IoBuildDeviceIoControlRequest RtlEqualUnicodeString SePrivilegeCheck RtlDelete RtlSplay KeUnstackDetachProcess KeStackAttachProcess MmHighestUserAddress CcSetAdditionalCacheAttributes CcSetReadAheadGranularity CcInitializeCacheMap ExConvertExclusiveToSharedLite ExIsResourceAcquiredSharedLite ExLocalTimeToSystemTime FsRtlAreNamesEqual ZwQueryDirectoryFile CcMdlReadComplete CcMdlWriteComplete IoGetStackLimits CcMdlRead CcCopyRead FsRtlCheckLockForReadAccess FsRtlPostStackOverflow CcPrepareMdlWrite CcCopyWrite FsRtlCheckLockForWriteAccess ExAcquireSharedStarveExclusive CcDeferWrite CcCanIWrite FsRtlFastCheckLockForWrite FsRtlFastCheckLockForRead FsRtlCopyRead FsRtlCopyWrite FsRtlPrivateLock FsRtlFastUnlockSingle FsRtlFastUnlockAllByKey FsRtlProcessFileLock RtlValidRelativeSecurityDescriptor MmSystemRangeStart IoAttachDeviceToDeviceStack IoDetachDevice IoRegisterFsRegistrationChange IoCheckQuotaBufferValidity RtlValidSid RtlSubAuthoritySid RtlInitializeSid RtlCopySid RtlLengthSid KeLeaveCriticalRegion KeDelayExecutionThread PsGetCurrentProcessId ExFreePoolWithTag memset FsRtlNotifyInitializeSync RtlUnwind RtlNumberGenericTableElementsAvl _allmul KeFlushQueuedDpcs RtlInitializeGenericTableAvl RtlDeleteElementGenericTableAvl RtlInsertElementGenericTableAvl RtlLookupElementGenericTableAvl _allrem RtlEnumerateGenericTableWithoutSplayingAvl _alldvrm KeResetEvent PsSetCreateProcessNotifyRoutine ExEventObjectType _vsnwprintf DbgPrint IoGetDeviceObjectPointer ZwDeleteValueKey ZwEnumerateValueKey SeReleaseSubjectContext SeQueryAuthenticationIdToken SeCaptureSubjectContext PsDereferencePrimaryToken PsReferencePrimaryToken ZwQueryInformationProcess ZwQuerySymbolicLinkObject ZwOpenSymbolicLinkObject ExUuidCreate PsLookupProcessByProcessId FsRtlLookupPerStreamContextInternal FsRtlInsertPerStreamContext FsRtlRemovePerStreamContext FsRtlRegisterUncProvider FsRtlDeregisterUncProvider IoCancelFileOpen IoGetDiskDeviceObject RtlSetBits RtlClearAllBits RtlInitializeBitMap PoSetPowerState KeClearEvent PoCallDriver PoStartNextPowerIrp RtlClearBit IoInvalidateDeviceRelations RtlFindClearBitsAndSet RtlAreBitsClear RtlSetBit RtlTestBit IoGetLowerDeviceObject IoOpenDeviceRegistryKey IoGetAttachedDeviceReference FsRtlLegalAnsiCharacterArray ZwEnumerateKey _aullshr ZwCreateEvent IoCreateSynchronizationEvent ZwCreateDirectoryObject ZwOpenDirectoryObject ZwWriteFile ZwFsControlFile KeBugCheck PsLookupThreadByThreadId RtlDeleteNoSplay ZwMapViewOfSection ZwCreateSection ZwUnmapViewOfSection KeInitializeSemaphore RtlSetDaclSecurityDescriptor RtlCreateSecurityDescriptor KeReleaseSemaphore KeWaitForMultipleObjects PsRemoveCreateThreadNotifyRoutine _snwprintf PsSetCreateThreadNotifyRoutine RtlUpcaseUnicodeChar RtlGetElementGenericTable RtlNumberGenericTableElements FsRtlDissectName PsSetLoadImageNotifyRoutine PsRemoveLoadImageNotifyRoutine RtlIsGenericTableEmpty _vsnprintf IoWriteErrorLogEntry IoAllocateErrorLogEntry strrchr RtlInitUnicodeString ZwClose IoFreeWorkItem ObfDereferenceObject memcpy ExAllocatePoolWithTag swprintf KeGetCurrentThread IoBuildSynchronousFsdRequest KeInitializeEvent

hal

KeQueryPerformanceCounter KfAcquireSpinLock KfReleaseSpinLock KeGetCurrentIrql ExAcquireFastMutex ExReleaseFastMutex

fltmgr.sys

FltIs32bitProcess FltSetCallbackDataDirty FltUnregisterFilter

Name

.text

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

PAGE

Size

233KB

Virtual Size

233KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

i386/SHA1/vpnpbus.cat

SHA256 104d2c15563eb73b970cb2db02212fac33791844534567d18234aa8aff8d0293
MD5 ec1f198c7c185081621cb9a5ed4bbd7c
SHA1 6f0e72a6942cab1483896ff85b17fe326131b746
SHA512 ee725f0e73eb027030142e724e56d645841210d8eb69e1770580b4f4e646fba8cc2b7512ba41c1f3c857165f15df8d28c67e9d110193880f392e4993b3ac5383
SSDEEP 192:pkdFN7IdhnYe+PjPJdZubhhRPsuSZscF8Bd1LMJaEJac:aehnYPLXZAyZsHLMJaw
MD5 SHA1 SHA512 SSDEEP

i386/SHA1/vpnpbus.inf

SHA256 586cc28d61aed1819c321014fa757623693d49b327ecbae3bd77d288850de84f
MD5 1d992ea7dd85d14453fce31efccd880b
SHA1 158f0140bb1511d22845177f7995cc2a153be819
SHA512 435b5a496c452082ba8782c4d299e8d0d262b28c98356170f5eba5db0d6bdef79037781a9d862d0dad5620deb3310d96f9f4ce62feff705985abf1f6715e5215
MD5 SHA1 SHA512

i386/SHA1/vpnpbus.sys

IMPHASH b0da1bc6851e0bc1f3c297f207acc85b
SHA256 6f06f62cc7e07da8e464c0ad530e299057b5db283aa3e00319bae5c7295e3b45
MD5 de83e725e887c6d7107276c8545b08ee
SHA1 7858e5d7c88724529c44e58d0485bbb5d227ec9c
SHA512 da59f3d586bec69e8e0d9f8a897899d0efdb32fcbca8c748aa6d7220af3dee36055b66d2aabf277d32fac34c39a806759dbd1b47067ac2cbc219197def9478f3
SSDEEP 192:8BPy3fuEmwC1US7aTI6lKlmtef4F7mlqLjPnYe+PjPJdZubhhRPsuSZscF8Bd1LT:TuW7TI6iKefiylqfnYPLXZAyZsHLcJ6
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

c8:39:6d:14:51:ae:ab:f2:5e:86:14:0c:71:27:76:20:fd:a4:f9:a0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 2, 2020

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

03:df:08:a3:c3:bd:af:27:16:c1:91:29:d0:bd:29:e6

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 29, 2017 - Sep 1, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

1

Major OS version

6

Entry point

5838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\projects\driverlibraries\vpnpbus\bin\wxp\fre\i386\vpnpbus.pdb

Name

.text

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

384B

Virtual Size

360B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

128B

Virtual Size

116B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

PAGE

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

952B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

484B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

i386/cbfsconnect2017.sys

IMPHASH 5d28e7aceab7e2ae7853d717a86cee9c
SHA256 ec825d2a52d60c8c156d43d8a15f66fa0c00ca7643b83d9f979e623fff693e9f
MD5 4f441ac3aaa182c7eb0d2f005b8e3469
SHA1 e94e1008f5fbf7ec6b3dced855d0466b2a7ae141
SHA512 b7fe78388be019b1584eeccabd2a28d62a6b39c90b45602ae8a25e8ac800190c4d4852a1629bbf5437cf6246a75d64abe77aa8b7f4e749daebf158c397157012
SSDEEP 6144:xhsctdynja016GaRnitK4UMMIQB4bOlM2FKVsTUOsi:Lhax1JztMIG4bO24XUOn
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

e1:e2:3f:bc:84:9f:e2:c7:38:48:17:62:fc:3b:60:e0:fe:d8:41:e3:67:d7:c1:fc:10:6a:cf:e1:8e:94:14:d7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 10, 2024

Minor OS version

1

Major OS version

6

Entry point

355735

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\projects\cbfsconnect\bin\wxp\fre\i386\cbfsconnect2017.pdb

ntoskrnl.exe

ExAcquireResourceExclusiveLite KeEnterCriticalRegion ExReleaseFastMutexUnsafe ExAcquireFastMutexUnsafe RtlUnicodeStringToAnsiString IoQueueWorkItem ObfReferenceObject IoAllocateWorkItem IoFreeIrp KeWaitForSingleObject IoGetCurrentProcess _alldiv MmGetSystemRoutineAddress RtlAppendUnicodeStringToString RtlAppendUnicodeToString ExQueueWorkItem RtlCompareMemory IoRegisterPlugPlayNotification IoUnregisterPlugPlayNotification ExDeleteNPagedLookasideList ExDeletePagedLookasideList ExDeleteResourceLite IoDeleteDevice IoDeleteSymbolicLink IoRegisterFileSystem IoCreateSymbolicLink ExInitializePagedLookasideList ExInitializeNPagedLookasideList ExInitializeResourceLite MmQuerySystemSize KeInitializeTimer KeInitializeDpc IoCreateDevice FsRtlRegisterFileSystemFilterCallbacks PsGetVersion IoUnregisterFileSystem KeSetTimer KeCancelTimer IofCompleteRequest KeBugCheckEx FsRtlIsNtstatusExpected KeSetEvent FsRtlNotifyFullReportChange IoRaiseInformationalHardError IoIsSystemThread IoRaiseHardError IoSetDeviceToVerify IoGetDeviceToVerify FsRtlIsTotalDeviceFailure IoGetTopLevelIrp CcMdlWriteAbort IoSetTopLevelIrp IoFreeMdl MmProbeAndLockPages ExRaiseStatus IoAllocateMdl MmMapLockedPagesSpecifyCache ZwCreateKey ZwOpenKey ZwQueryValueKey ZwSetValueKey IofCallDriver IoAllocateIrp IoGetRelatedDeviceObject ZwSetInformationFile ZwQueryInformationFile ObReferenceObjectByHandle IoFileObjectType ZwCreateFile ZwOpenFile ObQueryNameString ExAcquireResourceSharedLite ExInterlockedPopEntrySList ExInterlockedPushEntrySList ExFreeToPagedLookasideList ExAllocateFromPagedLookasideList CcSetFileSizes FsRtlTeardownPerStreamContexts FsRtlUninitializeOplock FsRtlUninitializeFileLock KeQuerySystemTime PsGetProcessId RtlDeleteElementGenericTable RtlLookupElementGenericTable RtlInsertElementGenericTable RtlInitializeGenericTable RtlEnumerateGenericTableWithoutSplaying PsTerminateSystemThread FsRtlNotifyUninitializeSync FsRtlInitializeOplock FsRtlInitializeFileLock PsCreateSystemThread IoReleaseVpbSpinLock IoAcquireVpbSpinLock ExReleaseResourceLite IoCreateStreamFileObjectLite FsRtlNormalizeNtstatus IoSetHardErrorOrVerifyDevice IoVerifyVolume FsRtlOplockIsFastIoPossible ExAcquireSharedWaitForExclusive SeSinglePrivilegeCheck RtlLengthSecurityDescriptor IoCheckShareAccess PsGetCurrentThreadId IoRemoveShareAccess IoSetShareAccess CcIsThereDirtyData memmove IoUpdateShareAccess FsRtlOplockFsctrl FsRtlCheckOplock CcPurgeCacheSection MmCanFileBeTruncated CcFlushCache MmFlushImageSection FsRtlCurrentBatchOplock ExAllocatePool FsRtlDoesNameContainWildCards IoThreadToProcess FsRtlNotifyVolumeEvent MmForceSectionClosed CcUninitializeCacheMap ExReleaseResourceForThreadLite FsRtlFastUnlockAll IoGetRequestorProcess FsRtlNotifyCleanup FsRtlNotifyFullChangeDirectory MmUnlockPages CcWaitForCurrentLazyWriterActivity RtlFreeAnsiString IoBuildAsynchronousFsdRequest ExIsResourceAcquiredExclusiveLite CcGetFileObjectFromSectionPtrs ObOpenObjectByPointer KeTickCount ProbeForRead IoIsOperationSynchronous RtlCompareUnicodeString IoBuildDeviceIoControlRequest RtlEqualUnicodeString SePrivilegeCheck RtlDelete RtlSplay KeUnstackDetachProcess KeStackAttachProcess MmHighestUserAddress CcSetAdditionalCacheAttributes CcSetReadAheadGranularity CcInitializeCacheMap ExConvertExclusiveToSharedLite ExIsResourceAcquiredSharedLite ExLocalTimeToSystemTime FsRtlAreNamesEqual ZwQueryDirectoryFile CcMdlReadComplete CcMdlWriteComplete IoGetStackLimits CcMdlRead CcCopyRead FsRtlCheckLockForReadAccess FsRtlPostStackOverflow CcPrepareMdlWrite CcCopyWrite FsRtlCheckLockForWriteAccess ExAcquireSharedStarveExclusive CcDeferWrite CcCanIWrite FsRtlFastCheckLockForWrite FsRtlFastCheckLockForRead FsRtlCopyRead FsRtlCopyWrite FsRtlPrivateLock FsRtlFastUnlockSingle FsRtlFastUnlockAllByKey FsRtlProcessFileLock RtlValidRelativeSecurityDescriptor MmSystemRangeStart IoAttachDeviceToDeviceStack IoDetachDevice IoRegisterFsRegistrationChange IoCheckQuotaBufferValidity RtlValidSid RtlSubAuthoritySid RtlInitializeSid RtlCopySid RtlLengthSid KeLeaveCriticalRegion KeDelayExecutionThread PsGetCurrentProcessId ExFreePoolWithTag memset FsRtlNotifyInitializeSync RtlUnwind RtlNumberGenericTableElementsAvl _allmul KeFlushQueuedDpcs RtlInitializeGenericTableAvl RtlDeleteElementGenericTableAvl RtlInsertElementGenericTableAvl RtlLookupElementGenericTableAvl _allrem RtlEnumerateGenericTableWithoutSplayingAvl _alldvrm KeResetEvent PsSetCreateProcessNotifyRoutine ExEventObjectType _vsnwprintf DbgPrint IoGetDeviceObjectPointer ZwDeleteValueKey ZwEnumerateValueKey SeReleaseSubjectContext SeQueryAuthenticationIdToken SeCaptureSubjectContext PsDereferencePrimaryToken PsReferencePrimaryToken ZwQueryInformationProcess ZwQuerySymbolicLinkObject ZwOpenSymbolicLinkObject ExUuidCreate PsLookupProcessByProcessId FsRtlLookupPerStreamContextInternal FsRtlInsertPerStreamContext FsRtlRemovePerStreamContext FsRtlRegisterUncProvider FsRtlDeregisterUncProvider IoCancelFileOpen IoGetDiskDeviceObject RtlSetBits RtlClearAllBits RtlInitializeBitMap PoSetPowerState KeClearEvent PoCallDriver PoStartNextPowerIrp RtlClearBit IoInvalidateDeviceRelations RtlFindClearBitsAndSet RtlAreBitsClear RtlSetBit RtlTestBit IoGetLowerDeviceObject IoOpenDeviceRegistryKey IoGetAttachedDeviceReference FsRtlLegalAnsiCharacterArray ZwEnumerateKey _aullshr ZwCreateEvent IoCreateSynchronizationEvent ZwCreateDirectoryObject ZwOpenDirectoryObject ZwWriteFile ZwFsControlFile KeBugCheck PsLookupThreadByThreadId RtlDeleteNoSplay ZwMapViewOfSection ZwCreateSection ZwUnmapViewOfSection KeInitializeSemaphore RtlSetDaclSecurityDescriptor RtlCreateSecurityDescriptor KeReleaseSemaphore KeWaitForMultipleObjects PsRemoveCreateThreadNotifyRoutine _snwprintf PsSetCreateThreadNotifyRoutine RtlUpcaseUnicodeChar RtlGetElementGenericTable RtlNumberGenericTableElements FsRtlDissectName PsSetLoadImageNotifyRoutine PsRemoveLoadImageNotifyRoutine RtlIsGenericTableEmpty _vsnprintf IoWriteErrorLogEntry IoAllocateErrorLogEntry strrchr RtlInitUnicodeString ZwClose IoFreeWorkItem ObfDereferenceObject memcpy ExAllocatePoolWithTag swprintf KeGetCurrentThread IoBuildSynchronousFsdRequest KeInitializeEvent

hal

KeQueryPerformanceCounter KfAcquireSpinLock KfReleaseSpinLock KeGetCurrentIrql ExAcquireFastMutex ExReleaseFastMutex

fltmgr.sys

FltIs32bitProcess FltSetCallbackDataDirty FltUnregisterFilter

Name

.text

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

PAGE

Size

233KB

Virtual Size

233KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

i386/cbfsconnectMntNtf2017.dll

IMPHASH bacbf68d798faeba4ee2e76f30d65fdc
SHA256 d6a6e04ced21019c88cd0d1f1e3a0d41f49232d13eeea3939e438f377fa0a9a2
MD5 68f85fae1cb6e88bed7fb0e8d7ace96a
SHA1 cb96249859255a2a0bf86e332c6f86ebddcbaa58
SHA512 6e6520eb0a332faaf46ec521c1000fb5d24e61ee4cc0fa0d8ba49a5f544c055caffb917a64e50ffe64f72f86955129fc8114d2ace6e521727db3a9c9cdf80fc4
SSDEEP 3072:Q2ZWaT5rJlBwZat1m+/o70y7jHKN+gxurDUq5DU70PR:Q2ZWaT5rJl9/o70y7ON+tc4m
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Digest

d3:a7:bd:a8:fb:c4:0e:a5:af:6f:ca:fa:32:d9:c0:65:20:93:6d:77

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 2, 2020

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

03:df:08:a3:c3:bd:af:27:16:c1:91:29:d0:bd:29:e6

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 29, 2017 - Sep 1, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

0

Major OS version

5

Entry point

65544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Projects\CBFSConnect\umode\MntNtf\Release\CBFSConnectMntNtf2017.pdb

kernel32

GetWindowsDirectoryW GetCurrentThread DeviceIoControl GetSystemDirectoryW TlsAlloc TlsGetValue GetCurrentThreadId InterlockedExchange TlsSetValue DisableThreadLibraryCalls ResetEvent WaitForMultipleObjects GetOverlappedResult CreateMailslotW GetCurrentProcess WideCharToMultiByte GetThreadLocale SetThreadLocale LoadLibraryExW MultiByteToWideChar GetModuleFileNameW GetSystemWow64DirectoryW lstrcmpiW GetModuleHandleW DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection RaiseException CreateEventW CreateThread InterlockedIncrement InterlockedDecrement Sleep VirtualAlloc WaitForSingleObject VirtualFree CreateFileW GetTempPathW GetTempFileNameW SizeofResource ReadFile WriteFile CloseHandle DeleteFileW SetLastError GetLastError LoadLibraryW GetProcAddress FreeLibrary lstrlenW FindResourceExW FindResourceW LoadResource LockResource FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringA LoadLibraryA InitializeCriticalSectionAndSpinCount GetConsoleMode GetConsoleCP SetFilePointer GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount LCMapStringW HeapSize TlsFree IsValidCodePage GetOEMCP GetACP GetCPInfo GetModuleFileNameA GetStdHandle ExitProcess HeapReAlloc HeapDestroy HeapCreate GetCommandLineA ExitThread RtlUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess HeapAlloc HeapFree GetProcessHeap

user32

CharNextW

advapi32

RegisterEventSourceW ReportEventW DeregisterEventSource LsaNtStatusToWinError EqualSid FreeSid RegEnumValueW OpenThreadToken OpenProcessToken GetTokenInformation RegQueryInfoKeyW RegDeleteValueW RegDeleteKeyW RegEnumKeyExW RegEnumKeyW RegOpenKeyW RegSetValueExW RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey

shell32

SHGetIconOverlayIndexW ord192

ole32

CoTaskMemFree CoTaskMemRealloc StringFromGUID2 CoTaskMemAlloc CoCreateGuid CoCreateInstance StringFromCLSID

oleaut32

SysStringLen LoadRegTypeLi VarUI4FromStr SysFreeString RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysAllocString

shlwapi

SHDeleteKeyW SHDeleteEmptyKeyW

i386/cbfsconnectNetRdr2017.dll

IMPHASH 2b81fb4b58098cec4efe46553a5da16e
SHA256 ea4fb34592d10be8767c2f9926852b58648476aaf68632f6b5ee379977e9077e
MD5 8d023f94b24530f0a9ec75afc234dab3
SHA1 6cce8e4e57562b89fba54dd4fcd8512ea6be62a4
SHA512 a67ba031a0aedc780ee7ec3e60d8af600aca7bf9f6c1bdb89b4452e861ea0796b35ec02fd875ae4ccb5cedfc9ec184bcffe589d5b2d99110eabbfbf00f1b7263
SSDEEP 6144:vay7KxwqTx5frbzmeAELtNIo9pu5f1mAd:Tuw0x5nzkELtNb9g5f1mO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

09:27:c0:e7:70:b0:dd:65:f8:07:46:0a:74:50:10:3e:07:a4:11:9f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 2, 2020

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

03:df:08:a3:c3:bd:af:27:16:c1:91:29:d0:bd:29:e6

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 29, 2017 - Sep 1, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

0

Major OS version

5

Entry point

83663

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Projects\CBFSConnect\umode\NetRdr\Release\CBFSConnectNetRdr2017.pdb

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

kernel32

CreateFileMappingW GetFileSize QueryDosDeviceW InitializeCriticalSection InterlockedExchange WaitForMultipleObjects LeaveCriticalSection EnterCriticalSection MapViewOfFile DeviceIoControl GetLogicalDrives LocalFree CreateThread CreateEventW GetComputerNameW UnmapViewOfFile GetFileInformationByHandle DeleteFileW MoveFileExW GetFileAttributesW SetFileAttributesW CopyFileW GetCurrentThread lstrlenW lstrcpyW lstrcatW Sleep GetCurrentProcess lstrcpyA WideCharToMultiByte lstrcatA FindNextFileW CreateFileW WriteFile MultiByteToWideChar CreateMailslotW WaitForSingleObject ReadFile GetExitCodeProcess CloseHandle FindFirstFileW FindClose GetModuleHandleW GetTempPathW CreateDirectoryW GetWindowsDirectoryW GetFullPathNameW GetSystemDirectoryW LoadLibraryW GetProcAddress FreeLibrary GetModuleFileNameW GetLastError SetLastError CreateFileA SetEnvironmentVariableA CompareStringA CompareStringW SetEvent GetTimeZoneInformation SetStdHandle GetConsoleOutputCP WriteConsoleA SetFilePointer GetLocaleInfoW HeapSize IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA FlushFileBuffers GetConsoleMode GetConsoleCP LoadLibraryA RtlUnwind InitializeCriticalSectionAndSpinCount GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW HeapFree HeapAlloc WriteConsoleW GetFileType GetStdHandle GetCurrentThreadId GetCommandLineA HeapCreate HeapDestroy VirtualFree DeleteCriticalSection FatalAppExitA VirtualAlloc HeapReAlloc ExitProcess GetModuleFileNameA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetConsoleCtrlHandler GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW

advapi32

LsaNtStatusToWinError AllocateAndInitializeSid SetEntriesInAclW CreateServiceW GetLengthSid InitializeAcl AddAccessAllowedAce InitializeSecurityDescriptor SetSecurityDescriptorDacl SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorSacl InitiateSystemShutdownW LookupPrivilegeValueW AdjustTokenPrivileges LookupPrivilegeNameW GetTokenInformation EqualSid FreeSid OpenThreadToken OpenProcessToken QueryServiceConfigW ControlService StartServiceW QueryServiceStatus OpenSCManagerW OpenServiceW DeleteService CloseServiceHandle RegEnumValueA RegDeleteValueA RegEnumValueW RegDeleteValueW RegOpenKeyW RegEnumKeyExW RegisterEventSourceW ReportEventW DeregisterEventSource RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey

shell32

SHFileOperationW

setupapi

SetupDiGetINFClassW SetupIterateCabinetW SetupGetSourceFileLocationW SetupGetSourceInfoW SetupDiSetClassInstallParamsW SetupDiGetDeviceInstallParamsW SetupDiCreateDeviceInfoList SetupDiCreateDeviceInfoW SetupDiSetDeviceRegistryPropertyW SetupDiCallClassInstaller SetupDiGetDeviceInstanceIdW SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetDeviceRegistryPropertyW SetupGetIntField SetupDiGetActualSectionToInstallW SetupOpenInfFileW SetupFindFirstLineW SetupGetStringFieldW SetupFindNextLine SetupCloseInfFile

netapi32

NetShareAdd NetShareDel

i386/vpnpbus.cat

SHA256 289fb92b4d960fd819137764b92900ade9f0d0650d169b38575c3b355e527c9d
MD5 01278f66696ca8e99f4f2deba19d231b
SHA1 b2d707ee7b29a2239cbef3bf1b4e5fc51525d926
SHA512 132dc3c8cc2917b07f452dec9d66a538d72fbb5802d56e8636cf2cfa28fe2f54a19c375d37d63cd0ab862db6f69c29e81c4278a13befac614b44cbad483464e1
SSDEEP 192:n3b3z3k3GTJC4Z39JnxrEwJqKkhYCPoT45qAAqnajosa:v7DJxXxkh3PqlMsa
MD5 SHA1 SHA512 SSDEEP

i386/vpnpbus.inf

SHA256 586cc28d61aed1819c321014fa757623693d49b327ecbae3bd77d288850de84f
MD5 1d992ea7dd85d14453fce31efccd880b
SHA1 158f0140bb1511d22845177f7995cc2a153be819
SHA512 435b5a496c452082ba8782c4d299e8d0d262b28c98356170f5eba5db0d6bdef79037781a9d862d0dad5620deb3310d96f9f4ce62feff705985abf1f6715e5215
MD5 SHA1 SHA512

i386/vpnpbus.sys

IMPHASH b0da1bc6851e0bc1f3c297f207acc85b
SHA256 3b9e1aa0de433aa38baaad8772f8967231d0114a9fbc334ed992eb08cb74b21a
MD5 84cc1041acb4d651d840584cb42fa869
SHA1 1edad972dc42b7d301b9a2ff36fc2f9eb5e0cfc0
SHA512 9cc0fd50c35945b86b5c3bda8a2690028bca7fa2da40319ccb6cfaf1e8067ffc2a606d11ba059aa743dd6a15af67465a49a569cf64f6138e84075281b8baec33
SSDEEP 192:8BYy3fuEmwC1US7aTI6lKlmtef4F7mlqLh39JnxrEwJqKkhYCW9bqG5qAAqnajoV:CuW7TI6iKefiylqHJxXxkh3W5IlMuK
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

1e:18:ec:b0:14:1b:49:dd:95:2f:35:7a:dd:74:5c:30:97:df:4b:cb:b2:5f:d6:05:73:ad:a4:50:ce:ac:95:3b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 10, 2024

Minor OS version

1

Major OS version

6

Entry point

5838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\projects\driverlibraries\vpnpbus\bin\wxp\fre\i386\vpnpbus.pdb

Name

.text

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

384B

Virtual Size

360B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

128B

Virtual Size

116B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

PAGE

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

952B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

484B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

ia64/SHA1/cbfsconnect2017.sys

SHA256 94aa98276548b7e2b3c2d0c9ebd4946bb16d58d8b3371857681fa2b8c0412f37
MD5 8278de2dc02b5ab743f600cb971a19f1
SHA1 11071967598ba560f460b1eb2104080c2f58baae
SHA512 5540b56860fa1765dcde043a089cbb665fbb6be9e6a4b1278139bb13b47e8580ca9d3d5d9858eb1c01db14b1d266ca2dfdac08024e5f8f68ab109aff1e6b39c6
SSDEEP 12288:MnGhB3UhPB/GCkEj7uuiXqnGtvEly8GvRU+9Xze4cxQwdM:MlyuiXZsq5Snj
MD5 SHA1 SHA512 SSDEEP

ia64/SHA1/vpnpbus.cat

SHA256 727d57b9b58329c80d9d0626e60d68b0afa65190d9f96099225a16c57d09a225
MD5 e2cf6c4dc7f62d3d7444d086f2266b05
SHA1 acb3014a724b7f696d91e7268568ccffdb6ab262
SHA512 85fbe2340dc3fd5ac3d0629c957bc1932a5296d87c4f2cc1a0b9da11626be5fbf7b32e54019e7f060231f5084d6bac5dde6cc9fdf62be2e8baf7e39b810c453f
SSDEEP 192:WUHCcoWn0nYe+PjPJdZubhhRPsuSZscF8Bd1LMJatQjJWiaM:WPnYPLXZAyZsHLMJa6fd
MD5 SHA1 SHA512 SSDEEP

ia64/SHA1/vpnpbus.inf

SHA256 586cc28d61aed1819c321014fa757623693d49b327ecbae3bd77d288850de84f
MD5 1d992ea7dd85d14453fce31efccd880b
SHA1 158f0140bb1511d22845177f7995cc2a153be819
SHA512 435b5a496c452082ba8782c4d299e8d0d262b28c98356170f5eba5db0d6bdef79037781a9d862d0dad5620deb3310d96f9f4ce62feff705985abf1f6715e5215
MD5 SHA1 SHA512

ia64/SHA1/vpnpbus.sys

SHA256 f8fdaa3ba5a443a7817fca39c095fb726483eee6c048e7915637de42c5523fa3
MD5 b841d626429a6e1f8eb3f3e5a8f5d73d
SHA1 491221fc1ef44fe5456d91b685df9b54cad30da3
SHA512 980f4dae4e5ede9ab3605d8fd21445e56eac561dfd6fac6016adc98233dd99e21c30d8b87d7a44b35a8cb93e7d69c80b3084e670fc661fbb7d0a4c870f60aced
SSDEEP 384:a8OvhSSDeGKX79X+bVM0728+uD2KydZ4CmNnYPLXZAyZsHLcJiK:ajho9hubu0728xVNHH
MD5 SHA1 SHA512 SSDEEP

ia64/cbfsconnectMntNtf2017.dll

SHA256 b9e52658585d4e037884a439996dc7c8ca679d1d1f4f99dabdd7f94f5137c9a8
MD5 c8db8f83814f534bfb96e410849db92d
SHA1 7a0234e841f6dff6f0826ca1a8ca4c5279a2475e
SHA512 49901f9ef29529e57452d7cd3343e0fa80d7373ce172137ba1ada025f9825c57750edfbe65a4e6b6cc861e30dfd8fb3e33158a66d28fef29b704fb4c05dd6439
SSDEEP 6144:yCGu+lbKtXkL7WErpv8JLliXXjO5H4Y+z/DMm6OIkYvAvf43xswK7wVMSU/q0c9f:Wlb1L38TgtaC2y
MD5 SHA1 SHA512 SSDEEP

ia64/cbfsconnectNetRdr2017.dll

SHA256 527fec50c4f4ac1af24e4842a953f98bd9bc386bd12e8d22f6b2b2c418a41fca
MD5 8168b1794b31a91adc323ac1b4240ce5
SHA1 b7f94812c63a26bf0912663770f04f7a806b573a
SHA512 be7a213793103f4d7c3bab6f9b23a264845a623dbb72e41711da67776f3921a8d68acbb89d6d47ff095e8cca7cfa894e5f08419a3d89c4c69bcb5c8d2159acd6
SSDEEP 6144:bBGp1KYp393q04s9DA3sTn4vnpZAwpf8yt//rQpvE28Cr+wy3jZ95UPFnrg9gx+P:bWvp4+4R3ft7tzZ9SmMgsFwe1m
MD5 SHA1 SHA512 SSDEEP

wow64sup.exe

IMPHASH 2883b16fadf02f033c0bb617ed7b8030
SHA256 8b95692726496a050bcd8d6fadbce542dd8d2d5a0e0f830d0aa8e075435b4092
MD5 da4585280de2316ddac6fa9af520c027
SHA1 3213454079fcb333392722b36ed04ef941829879
SHA512 480dda880b0f4dc96859d67c76431d77a211fb0b5c7b1ed61ada949209dbc94022e41c72aa9ff3f017cc91030f59803ce34b47e17a8e9073297184e86f73cbf7
SSDEEP 3072:6llzC7YyaPU/DvAyBfNa3gbk4LWpZqyV54z:yC7pgsAcYUk1oz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Digest

9a:ea:d1:bf:09:22:42:d3:73:21:e1:9f:6f:d6:3c:28:da:ce:42:1e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 2, 2020

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

03:df:08:a3:c3:bd:af:27:16:c1:91:29:d0:bd:29:e6

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 29, 2017 - Sep 1, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

2

Major OS version

5

Entry point

44944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Projects\CBFSConnect\umode\wow64sup\x64\Release\wow64sup.pdb

kernel32

GetCurrentThreadId Sleep GetCurrentThread GetSystemDirectoryW GetFullPathNameW GetWindowsDirectoryW CreateDirectoryW GetProcAddress GetModuleHandleW FreeLibrary LoadLibraryW FindFirstFileW MultiByteToWideChar FindNextFileW lstrcatA WideCharToMultiByte lstrcpyA lstrcatW lstrcpyW lstrlenW GetCurrentProcess CopyFileW SetFileAttributesW GetFileAttributesW MoveFileExW UnmapViewOfFile MapViewOfFile CreateFileMappingW GetFileSize EnterCriticalSection DeleteCriticalSection HeapFree HeapAlloc RtlUnwindEx TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapSetInformation HeapCreate ExitProcess GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree FlsAlloc QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize HeapReAlloc GetTempPathW GetTempFileNameW DeleteFileW CreatePipe SetHandleInformation CreateProcessW WaitForSingleObject GetExitCodeProcess CreateFileW DeviceIoControl CloseHandle SetLastError GetLastError GetStdHandle ReadFile LeaveCriticalSection WriteFile

setupapi

SetupCloseInfFile SetupFindFirstLineW SetupDiSetDeviceRegistryPropertyW SetupDiGetINFClassW SetupIterateCabinetW SetupGetSourceFileLocationW SetupGetSourceInfoW SetupDiSetClassInstallParamsW SetupDiGetDeviceInstallParamsW SetupDiCreateDeviceInfoList SetupDiCreateDeviceInfoW SetupOpenInfFileW SetupDiCallClassInstaller SetupDiGetDeviceInstanceIdW SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetDeviceRegistryPropertyW SetupGetIntField SetupDiGetActualSectionToInstallW SetupGetStringFieldW

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

advapi32

QueryServiceConfigW StartServiceW QueryServiceStatus OpenSCManagerW OpenServiceW LsaNtStatusToWinError RegisterEventSourceW ReportEventW DeregisterEventSource CreateServiceW GetLengthSid InitializeAcl AddAccessAllowedAce InitializeSecurityDescriptor SetSecurityDescriptorDacl SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorSacl GetTokenInformation EqualSid FreeSid OpenThreadToken OpenProcessToken DeleteService CloseServiceHandle RegEnumValueA RegDeleteValueA RegEnumValueW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegOpenKeyW RegQueryValueExW RegEnumKeyExW RegOpenKeyExW RegCloseKey ControlService

shell32

SHFileOperationW

x64/SHA1/cbfsconnect2017.sys

IMPHASH 02ede98ea4c0581568dcadee85bd5e94
SHA256 60f5373bd3761627c4013b7f7edeff32e61697014fa44d9b59bcc9119b239786
MD5 942746ee38cabcafbefb0935a3ad0a0b
SHA1 cb333aa5bff05eee914ed4eba1345a8812dbc73f
SHA512 88d1d3f2c298f685a052a7b192c1593decf9616ebab38dc3839e09d54942fdcd827632e776dec33db90e299274a1cbaf5d9e3c966821f76eb6bedf1408aaeed7
SSDEEP 6144:peO3Y0YbeCspXtofejyrnOhiqzzxEJRndsac/OVWimH:peEY09pXqWjYnaiJRniv/4T
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

ff:ea:3f:bf:d0:6c:03:c8:35:49:b8:9f:f2:a3:9a:77:0a:8e:79:75

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 2, 2020

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

03:df:08:a3:c3:bd:af:27:16:c1:91:29:d0:bd:29:e6

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 29, 2017 - Sep 1, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

1

Major OS version

6

Entry point

474600

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

c:\projects\cbfsconnect\bin\wnet\fre\amd64\cbfsconnect2017.pdb

ntoskrnl.exe

RtlUnicodeStringToAnsiString KeEnterCriticalRegion ExAcquireFastMutexUnsafe KeDelayExecutionThread IoGetCurrentProcess IoAllocateWorkItem ExReleaseResourceLite ZwClose KeWaitForSingleObject IoFreeIrp RtlCompareUnicodeString ObfReferenceObject PsGetCurrentProcessId ObfDereferenceObject IoQueueWorkItem ExQueueWorkItem IoUnregisterFileSystem IoDeleteSymbolicLink FsRtlRegisterFileSystemFilterCallbacks IoRegisterPlugPlayNotification ExInitializeNPagedLookasideList InitializeSListHead IoRegisterFileSystem IoDeleteDevice MmGetSystemRoutineAddress RtlAppendUnicodeToString KeInitializeDpc KeInitializeTimer ExDeletePagedLookasideList MmQuerySystemSize IoUnregisterPlugPlayNotification RtlAppendUnicodeStringToString KeSetTimer PsGetVersion RtlCompareMemory ExDeleteResourceLite IoCreateSymbolicLink ExInitializePagedLookasideList IoCreateDevice ExInitializeResourceLite KeCancelTimer ExDeleteNPagedLookasideList ExRaiseStatus ZwCreateKey IoSetDeviceToVerify IoGetRelatedDeviceObject KeSetEvent CcMdlWriteAbort ZwSetValueKey IoRaiseInformationalHardError IoFreeMdl ZwSetInformationFile ObQueryNameString IoFileObjectType ZwCreateFile MmMapLockedPagesSpecifyCache ZwQueryValueKey IoGetDeviceToVerify IofCompleteRequest FsRtlIsTotalDeviceFailure IoSetTopLevelIrp ObReferenceObjectByHandle KeBugCheckEx IoRaiseHardError MmProbeAndLockPages IoAllocateIrp IoGetTopLevelIrp ZwOpenFile FsRtlIsNtstatusExpected ZwQueryInformationFile FsRtlNotifyFullReportChange IoIsSystemThread IoAllocateMdl IofCallDriver ZwOpenKey ExAcquireResourceSharedLite CcSetFileSizes ExpInterlockedPushEntrySList ExpInterlockedPopEntrySList ExQueryDepthSList IoAcquireVpbSpinLock FsRtlNotifyUninitializeSync RtlDeleteElementGenericTable PsCreateSystemThread FsRtlTeardownPerStreamContexts PsTerminateSystemThread RtlLookupElementGenericTable FsRtlInitializeFileLock FsRtlInitializeOplock RtlEnumerateGenericTableWithoutSplaying PsGetProcessId FsRtlNotifyInitializeSync FsRtlUninitializeFileLock IoReleaseVpbSpinLock RtlInitializeGenericTable IoCreateStreamFileObjectLite FsRtlUninitializeOplock RtlInsertElementGenericTable IoSetHardErrorOrVerifyDevice FsRtlNormalizeNtstatus IoVerifyVolume FsRtlOplockIsFastIoPossible ExAcquireSharedWaitForExclusive SeSinglePrivilegeCheck IoUpdateShareAccess FsRtlOplockFsctrl MmFlushImageSection IoRemoveShareAccess CcPurgeCacheSection CcFlushCache ExAllocatePool FsRtlCheckOplock CcIsThereDirtyData IoCheckShareAccess RtlLengthSecurityDescriptor MmCanFileBeTruncated FsRtlDoesNameContainWildCards PsGetCurrentThreadId IoSetShareAccess FsRtlCurrentBatchOplock FsRtlNotifyCleanup IoThreadToProcess IoGetRequestorProcess ExReleaseResourceForThreadLite CcUninitializeCacheMap FsRtlNotifyVolumeEvent FsRtlNotifyFullChangeDirectory FsRtlFastUnlockAll MmForceSectionClosed ProbeForRead CcWaitForCurrentLazyWriterActivity IoIsOperationSynchronous IoIs32bitProcess ExIsResourceAcquiredExclusiveLite IoBuildAsynchronousFsdRequest CcGetFileObjectFromSectionPtrs KeInitializeEvent MmUnlockPages ObOpenObjectByPointer IoBuildSynchronousFsdRequest IoBuildDeviceIoControlRequest RtlEqualUnicodeString SePrivilegeCheck RtlDelete RtlSplay MmHighestUserAddress KeUnstackDetachProcess KeStackAttachProcess ExIsResourceAcquiredSharedLite ExConvertExclusiveToSharedLite CcSetAdditionalCacheAttributes ZwQueryDirectoryFile CcSetReadAheadGranularity ExLocalTimeToSystemTime CcInitializeCacheMap FsRtlAreNamesEqual CcMdlWriteComplete CcMdlReadComplete IoGetStackLimits CcMdlRead FsRtlCheckLockForReadAccess FsRtlPostStackOverflow CcCopyRead CcPrepareMdlWrite CcDeferWrite CcCopyWrite CcCanIWrite FsRtlCheckLockForWriteAccess ExAcquireSharedStarveExclusive FsRtlFastUnlockSingle FsRtlCopyRead FsRtlFastCheckLockForRead FsRtlCopyWrite FsRtlFastCheckLockForWrite FsRtlFastUnlockAllByKey FsRtlPrivateLock FsRtlProcessFileLock MmSystemRangeStart RtlValidRelativeSecurityDescriptor KeReleaseSpinLock IoDetachDevice IoAttachDeviceToDeviceStack IoRegisterFsRegistrationChange KeAcquireSpinLockRaiseToDpc RtlSubAuthoritySid RtlCopySid RtlValidSid IoCheckQuotaBufferValidity RtlInitializeSid RtlLengthSid RtlDeleteElementGenericTableAvl RtlInsertElementGenericTableAvl RtlNumberGenericTableElementsAvl KeFlushQueuedDpcs RtlInitializeGenericTableAvl RtlLookupElementGenericTableAvl RtlEnumerateGenericTableWithoutSplayingAvl KeResetEvent PsSetCreateProcessNotifyRoutine ExEventObjectType ZwDeleteValueKey IoGetDeviceObjectPointer _vsnwprintf ZwEnumerateValueKey DbgPrint ExUuidCreate PsLookupProcessByProcessId ZwQuerySymbolicLinkObject PsReferencePrimaryToken ZwOpenSymbolicLinkObject SeReleaseSubjectContext SeCaptureSubjectContext ZwQueryInformationProcess SeQueryAuthenticationIdToken PsDereferencePrimaryToken KeClearEvent IoGetLowerDeviceObject ZwCreateEvent FsRtlLegalAnsiCharacterArray PoSetPowerState PoStartNextPowerIrp IoGetAttachedDeviceReference IoOpenDeviceRegistryKey ZwEnumerateKey IoCancelFileOpen FsRtlDeregisterUncProvider FsRtlRegisterUncProvider FsRtlRemovePerStreamContext FsRtlInsertPerStreamContext IoGetDiskDeviceObject FsRtlLookupPerStreamContextInternal IoInvalidateDeviceRelations RtlSetBits RtlInitializeBitMap RtlSetBit RtlClearAllBits RtlFindClearBitsAndSet PoCallDriver RtlTestBit RtlClearBit RtlAreBitsClear ZwFsControlFile ZwCreateDirectoryObject ZwOpenDirectoryObject ZwWriteFile IoCreateSynchronizationEvent _snwprintf PsRemoveCreateThreadNotifyRoutine RtlSetDaclSecurityDescriptor ZwMapViewOfSection PsSetCreateThreadNotifyRoutine RtlDeleteNoSplay ZwUnmapViewOfSection KeBugCheck KeInitializeSemaphore KeReleaseSemaphore ZwCreateSection KeWaitForMultipleObjects PsLookupThreadByThreadId RtlCreateSecurityDescriptor RtlNumberGenericTableElements RtlGetElementGenericTable PsSetLoadImageNotifyRoutine PsRemoveLoadImageNotifyRoutine FsRtlDissectName RtlUpcaseUnicodeChar RtlIsGenericTableEmpty IoWriteErrorLogEntry IoAllocateErrorLogEntry _vsnprintf strrchr swprintf IoFreeWorkItem RtlInitUnicodeString ExAcquireFastMutex KeLeaveCriticalRegion ExReleaseFastMutex ExFreePoolWithTag ExReleaseFastMutexUnsafe ExAllocatePoolWithTag RtlFreeAnsiString ExAcquireResourceExclusiveLite __C_specific_handler _local_unwind

hal

KeQueryPerformanceCounter

fltmgr.sys

FltRegisterFilter FltUnregisterFilter FltAttachVolume FltSetCallbackDataDirty FltGetVolumeFromName FltIs32bitProcess FltObjectDereference FltStartFiltering

Name

.text

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

74KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

303KB

Virtual Size

303KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

492B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

x64/SHA1/vpnpbus.cat

SHA256 830b3a56c324cedef4ee69f8e2e52df510ca2abd361f0525c06e387b21abd8f2
MD5 5a3291f60908e09d2086f66c77a9d829
SHA1 44481511fadd3b1148013f2d9a50ff1b19715d6c
SHA512 71ce800f2934f0468e1eba91bcd1c5035757ee41260ad7244c765e3f17d737423f5182c14f091023c6c518ce14ebeef0174f30cf0b697880a530b95a8c11e505
SSDEEP 192:i2kdAlNiq9gnYe+PjPJdZubhhRPsuSZscF8Bd1LMJaXCPel:zldgnYPLXZAyZsHLMJaP
MD5 SHA1 SHA512 SSDEEP

x64/SHA1/vpnpbus.inf

SHA256 586cc28d61aed1819c321014fa757623693d49b327ecbae3bd77d288850de84f
MD5 1d992ea7dd85d14453fce31efccd880b
SHA1 158f0140bb1511d22845177f7995cc2a153be819
SHA512 435b5a496c452082ba8782c4d299e8d0d262b28c98356170f5eba5db0d6bdef79037781a9d862d0dad5620deb3310d96f9f4ce62feff705985abf1f6715e5215
MD5 SHA1 SHA512

x64/SHA1/vpnpbus.sys

IMPHASH c6197237988fbc167f360d26ca736f7c
SHA256 99e7742b5c7818c8352cf714c94672989383d160643b5f35632cb729a9c3b9c3
MD5 01b8242ac919ae64cae185fc589434f2
SHA1 bbbff625593e7ed135a446a2593e8eb7fb682ab6
SHA512 43f31adc1f8726461b1da56fba5ed35b1315693ec1993a91a164e592320f4e6d7f92d238fba8658a8b20971b517d3f0d17f5f17a8a0b343dd2a2029496525583
SSDEEP 384:0WS40m1t/RzYoSb4vBMsuu45DVnYPLXZAyZsHLcJwtkj:F31xxYD4Cs2JVH4j
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

a3:59:9c:2e:52:0b:69:77:0c:6c:bb:1f:31:a7:95:d2:37:45:77:ea

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 2, 2020

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

03:df:08:a3:c3:bd:af:27:16:c1:91:29:d0:bd:29:e6

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 29, 2017 - Sep 1, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

1

Major OS version

6

Entry point

24900

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

c:\projects\driverlibraries\vpnpbus\bin\wnet\fre\amd64\vpnpbus.pdb

Name

.text

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

632B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

216B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

952B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

x64/cbfsconnect2017.sys

IMPHASH 02ede98ea4c0581568dcadee85bd5e94
SHA256 7016860b665766c006eb542e865afb8e02d328ae9cc5f5db115d2b7edf522ff5
MD5 bf20d568467e49da8df3974cdd31760d
SHA1 304e1345faa4f468316d6c7cd4afbdb4661520c5
SHA512 09baa40feca87586a618f4f3c521b57c6176e6b812fc614348ec23f3efdcaeff1000f70a33b491da5901a55d361b54b4882d359ef146c893352458ade02df058
SSDEEP 6144:JeO3Y0YbeCspXtofejyrnOhiqzzxEJRndsac/OVWimHF:JeEY09pXqWjYnaiJRniv/4Ty
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

2c:b3:61:f4:b6:86:7f:ee:83:84:2a:66:53:12:2b:9a:ba:01:91:e2:b4:92:ba:fc:28:4b:9d:db:2f:ff:b1:98

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 10, 2024

Minor OS version

1

Major OS version

6

Entry point

474600

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

c:\projects\cbfsconnect\bin\wnet\fre\amd64\cbfsconnect2017.pdb

ntoskrnl.exe

RtlUnicodeStringToAnsiString KeEnterCriticalRegion ExAcquireFastMutexUnsafe KeDelayExecutionThread IoGetCurrentProcess IoAllocateWorkItem ExReleaseResourceLite ZwClose KeWaitForSingleObject IoFreeIrp RtlCompareUnicodeString ObfReferenceObject PsGetCurrentProcessId ObfDereferenceObject IoQueueWorkItem ExQueueWorkItem IoUnregisterFileSystem IoDeleteSymbolicLink FsRtlRegisterFileSystemFilterCallbacks IoRegisterPlugPlayNotification ExInitializeNPagedLookasideList InitializeSListHead IoRegisterFileSystem IoDeleteDevice MmGetSystemRoutineAddress RtlAppendUnicodeToString KeInitializeDpc KeInitializeTimer ExDeletePagedLookasideList MmQuerySystemSize IoUnregisterPlugPlayNotification RtlAppendUnicodeStringToString KeSetTimer PsGetVersion RtlCompareMemory ExDeleteResourceLite IoCreateSymbolicLink ExInitializePagedLookasideList IoCreateDevice ExInitializeResourceLite KeCancelTimer ExDeleteNPagedLookasideList ExRaiseStatus ZwCreateKey IoSetDeviceToVerify IoGetRelatedDeviceObject KeSetEvent CcMdlWriteAbort ZwSetValueKey IoRaiseInformationalHardError IoFreeMdl ZwSetInformationFile ObQueryNameString IoFileObjectType ZwCreateFile MmMapLockedPagesSpecifyCache ZwQueryValueKey IoGetDeviceToVerify IofCompleteRequest FsRtlIsTotalDeviceFailure IoSetTopLevelIrp ObReferenceObjectByHandle KeBugCheckEx IoRaiseHardError MmProbeAndLockPages IoAllocateIrp IoGetTopLevelIrp ZwOpenFile FsRtlIsNtstatusExpected ZwQueryInformationFile FsRtlNotifyFullReportChange IoIsSystemThread IoAllocateMdl IofCallDriver ZwOpenKey ExAcquireResourceSharedLite CcSetFileSizes ExpInterlockedPushEntrySList ExpInterlockedPopEntrySList ExQueryDepthSList IoAcquireVpbSpinLock FsRtlNotifyUninitializeSync RtlDeleteElementGenericTable PsCreateSystemThread FsRtlTeardownPerStreamContexts PsTerminateSystemThread RtlLookupElementGenericTable FsRtlInitializeFileLock FsRtlInitializeOplock RtlEnumerateGenericTableWithoutSplaying PsGetProcessId FsRtlNotifyInitializeSync FsRtlUninitializeFileLock IoReleaseVpbSpinLock RtlInitializeGenericTable IoCreateStreamFileObjectLite FsRtlUninitializeOplock RtlInsertElementGenericTable IoSetHardErrorOrVerifyDevice FsRtlNormalizeNtstatus IoVerifyVolume FsRtlOplockIsFastIoPossible ExAcquireSharedWaitForExclusive SeSinglePrivilegeCheck IoUpdateShareAccess FsRtlOplockFsctrl MmFlushImageSection IoRemoveShareAccess CcPurgeCacheSection CcFlushCache ExAllocatePool FsRtlCheckOplock CcIsThereDirtyData IoCheckShareAccess RtlLengthSecurityDescriptor MmCanFileBeTruncated FsRtlDoesNameContainWildCards PsGetCurrentThreadId IoSetShareAccess FsRtlCurrentBatchOplock FsRtlNotifyCleanup IoThreadToProcess IoGetRequestorProcess ExReleaseResourceForThreadLite CcUninitializeCacheMap FsRtlNotifyVolumeEvent FsRtlNotifyFullChangeDirectory FsRtlFastUnlockAll MmForceSectionClosed ProbeForRead CcWaitForCurrentLazyWriterActivity IoIsOperationSynchronous IoIs32bitProcess ExIsResourceAcquiredExclusiveLite IoBuildAsynchronousFsdRequest CcGetFileObjectFromSectionPtrs KeInitializeEvent MmUnlockPages ObOpenObjectByPointer IoBuildSynchronousFsdRequest IoBuildDeviceIoControlRequest RtlEqualUnicodeString SePrivilegeCheck RtlDelete RtlSplay MmHighestUserAddress KeUnstackDetachProcess KeStackAttachProcess ExIsResourceAcquiredSharedLite ExConvertExclusiveToSharedLite CcSetAdditionalCacheAttributes ZwQueryDirectoryFile CcSetReadAheadGranularity ExLocalTimeToSystemTime CcInitializeCacheMap FsRtlAreNamesEqual CcMdlWriteComplete CcMdlReadComplete IoGetStackLimits CcMdlRead FsRtlCheckLockForReadAccess FsRtlPostStackOverflow CcCopyRead CcPrepareMdlWrite CcDeferWrite CcCopyWrite CcCanIWrite FsRtlCheckLockForWriteAccess ExAcquireSharedStarveExclusive FsRtlFastUnlockSingle FsRtlCopyRead FsRtlFastCheckLockForRead FsRtlCopyWrite FsRtlFastCheckLockForWrite FsRtlFastUnlockAllByKey FsRtlPrivateLock FsRtlProcessFileLock MmSystemRangeStart RtlValidRelativeSecurityDescriptor KeReleaseSpinLock IoDetachDevice IoAttachDeviceToDeviceStack IoRegisterFsRegistrationChange KeAcquireSpinLockRaiseToDpc RtlSubAuthoritySid RtlCopySid RtlValidSid IoCheckQuotaBufferValidity RtlInitializeSid RtlLengthSid RtlDeleteElementGenericTableAvl RtlInsertElementGenericTableAvl RtlNumberGenericTableElementsAvl KeFlushQueuedDpcs RtlInitializeGenericTableAvl RtlLookupElementGenericTableAvl RtlEnumerateGenericTableWithoutSplayingAvl KeResetEvent PsSetCreateProcessNotifyRoutine ExEventObjectType ZwDeleteValueKey IoGetDeviceObjectPointer _vsnwprintf ZwEnumerateValueKey DbgPrint ExUuidCreate PsLookupProcessByProcessId ZwQuerySymbolicLinkObject PsReferencePrimaryToken ZwOpenSymbolicLinkObject SeReleaseSubjectContext SeCaptureSubjectContext ZwQueryInformationProcess SeQueryAuthenticationIdToken PsDereferencePrimaryToken KeClearEvent IoGetLowerDeviceObject ZwCreateEvent FsRtlLegalAnsiCharacterArray PoSetPowerState PoStartNextPowerIrp IoGetAttachedDeviceReference IoOpenDeviceRegistryKey ZwEnumerateKey IoCancelFileOpen FsRtlDeregisterUncProvider FsRtlRegisterUncProvider FsRtlRemovePerStreamContext FsRtlInsertPerStreamContext IoGetDiskDeviceObject FsRtlLookupPerStreamContextInternal IoInvalidateDeviceRelations RtlSetBits RtlInitializeBitMap RtlSetBit RtlClearAllBits RtlFindClearBitsAndSet PoCallDriver RtlTestBit RtlClearBit RtlAreBitsClear ZwFsControlFile ZwCreateDirectoryObject ZwOpenDirectoryObject ZwWriteFile IoCreateSynchronizationEvent _snwprintf PsRemoveCreateThreadNotifyRoutine RtlSetDaclSecurityDescriptor ZwMapViewOfSection PsSetCreateThreadNotifyRoutine RtlDeleteNoSplay ZwUnmapViewOfSection KeBugCheck KeInitializeSemaphore KeReleaseSemaphore ZwCreateSection KeWaitForMultipleObjects PsLookupThreadByThreadId RtlCreateSecurityDescriptor RtlNumberGenericTableElements RtlGetElementGenericTable PsSetLoadImageNotifyRoutine PsRemoveLoadImageNotifyRoutine FsRtlDissectName RtlUpcaseUnicodeChar RtlIsGenericTableEmpty IoWriteErrorLogEntry IoAllocateErrorLogEntry _vsnprintf strrchr swprintf IoFreeWorkItem RtlInitUnicodeString ExAcquireFastMutex KeLeaveCriticalRegion ExReleaseFastMutex ExFreePoolWithTag ExReleaseFastMutexUnsafe ExAllocatePoolWithTag RtlFreeAnsiString ExAcquireResourceExclusiveLite __C_specific_handler _local_unwind

hal

KeQueryPerformanceCounter

fltmgr.sys

FltRegisterFilter FltUnregisterFilter FltAttachVolume FltSetCallbackDataDirty FltGetVolumeFromName FltIs32bitProcess FltObjectDereference FltStartFiltering

Name

.text

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

74KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

303KB

Virtual Size

303KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

492B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

x64/cbfsconnectMntNtf2017.dll

IMPHASH 320a9c93f519f83dd2b9d2c5f85044e0
SHA256 bcb0b639aad0d6db5dc07a864f2daf5199a3008e30bcc789e3755629c35bc5f7
MD5 b951e5662d705e85818ab75a41e5d369
SHA1 f1dd2155ee7a4122bad628dadfb9331a1dde6be2
SHA512 39e61ef7fc56f6d75bbd9c2614c0ddd882a97dce5a909f53a61a68629ca3a07c305563f49a27ed2315d2f22f5f5f5eeb14dc703bdb65a8d4288dc98672a2d193
SSDEEP 3072:iQl+jg/XUAU3DG9wzB/skgYRXb0JAnYBYF7QMk9NLzrZ5aUPdJHsi:iYvUAZwxqY6JAnWtMkPf+ed
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x64 arch:x64

Digest

ad:b5:29:4c:3e:b8:96:26:c9:47:11:6a:4a:3f:fe:c0:6d:55:b3:20

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 2, 2020

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

03:df:08:a3:c3:bd:af:27:16:c1:91:29:d0:bd:29:e6

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 29, 2017 - Sep 1, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

2

Major OS version

5

Entry point

77268

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

c:\Projects\CBFSConnect\umode\MntNtf\x64\Release\CBFSConnectMntNtf2017.pdb

kernel32

GetCurrentThread DeviceIoControl GetWindowsDirectoryW GetCurrentThreadId GetSystemDirectoryW DisableThreadLibraryCalls ResetEvent WaitForMultipleObjects GetOverlappedResult CreateMailslotW GetCurrentProcess WideCharToMultiByte GetThreadLocale SetThreadLocale LoadLibraryExW MultiByteToWideChar GetModuleFileNameW GetSystemWow64DirectoryW lstrcmpiW GetModuleHandleW DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection RaiseException CreateEventW CreateThread Sleep WaitForSingleObject CreateFileW GetTempPathW GetTempFileNameW ReadFile WriteFile CloseHandle DeleteFileW SetLastError GetLastError SizeofResource LoadLibraryW GetProcAddress FreeLibrary lstrlenW FindResourceExW FindResourceW LoadResource LockResource FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringA InitializeCriticalSectionAndSpinCount LoadLibraryA GetConsoleMode GetConsoleCP SetFilePointer GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount HeapReAlloc LCMapStringW HeapSize FlsAlloc FlsFree FlsGetValue DecodePointer EncodePointer IsValidCodePage GetOEMCP GetACP GetCPInfo GetModuleFileNameA GetStdHandle ExitProcess HeapDestroy HeapCreate HeapSetInformation GetCommandLineA FlsSetValue ExitThread RtlPcToFileHeader HeapFree HeapAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlUnwindEx GetProcessHeap

user32

CharNextW

advapi32

RegisterEventSourceW ReportEventW DeregisterEventSource LsaNtStatusToWinError EqualSid FreeSid RegEnumValueW OpenThreadToken OpenProcessToken GetTokenInformation RegQueryInfoKeyW RegDeleteValueW RegDeleteKeyW RegEnumKeyExW RegEnumKeyW RegOpenKeyW RegSetValueExW RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey

shell32

SHGetIconOverlayIndexW ord192

ole32

CoTaskMemFree CoTaskMemRealloc StringFromGUID2 CoTaskMemAlloc CoCreateGuid CoCreateInstance StringFromCLSID

oleaut32

SysStringLen LoadRegTypeLi VarUI4FromStr SysFreeString RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysAllocString

shlwapi

SHDeleteKeyW SHDeleteEmptyKeyW

x64/cbfsconnectNetRdr2017.dll

IMPHASH 411249db573fa4cd403ea4fc200a9321
SHA256 6f9d912b472fa06fc0f97af0ef04bcb7d3d1747e289c48841b1623eabd731373
MD5 6020ce34833336887799181bd70c035c
SHA1 14b222684e40ee4fe58e0e13c5cc8bf6923f0c09
SHA512 fe94064a31ce4dc8147285702ad37cf385ec5776ce6c086d480897425a604c3e9fe0ec00a9deff1841bc8285afbe8e833c6e98394662c950094bead6516d81d1
SSDEEP 6144:1CXqgXl+669T3C4I05qmKylM9WCUoMhoJw7tNdv:1ml+tSCqmsyoJEv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Digest

35:26:ac:10:b9:60:7d:55:bb:0e:b5:37:1d:2e:94:0c:a4:22:86:ac

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 2, 2020

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=1572249,CN=Callback Technologies\, Inc.,O=Callback Technologies\, Inc.,L=Chapel Hill,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130e4e6f727468204361726f6c696e61,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

03:df:08:a3:c3:bd:af:27:16:c1:91:29:d0:bd:29:e6

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 29, 2017 - Sep 1, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

2

Major OS version

5

Entry point

97116

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

c:\Projects\CBFSConnect\umode\NetRdr\x64\Release\CBFSConnectNetRdr2017.pdb

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

kernel32

CreateFileMappingW GetFileSize QueryDosDeviceW InitializeCriticalSection WaitForMultipleObjects LeaveCriticalSection EnterCriticalSection MapViewOfFile DeviceIoControl GetLogicalDrives LocalFree CreateThread CreateEventW GetComputerNameW UnmapViewOfFile GetFileInformationByHandle DeleteFileW MoveFileExW GetFileAttributesW SetFileAttributesW CopyFileW GetCurrentThread GetCurrentProcess lstrlenW lstrcpyW lstrcatW Sleep lstrcpyA WideCharToMultiByte lstrcatA FindNextFileW CreateFileW WriteFile MultiByteToWideChar CreateMailslotW WaitForSingleObject ReadFile GetExitCodeProcess CloseHandle FindFirstFileW FindClose GetModuleHandleW GetTempPathW CreateDirectoryW GetWindowsDirectoryW GetFullPathNameW GetSystemDirectoryW LoadLibraryW GetProcAddress FreeLibrary GetModuleFileNameW GetLastError SetLastError CreateFileA CompareStringA CompareStringW SetEnvironmentVariableA SetEvent GetTimeZoneInformation SetStdHandle GetConsoleOutputCP WriteConsoleA SetFilePointer GetLocaleInfoW HeapSize HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetTimeFormatA GetDateFormatA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA FlushFileBuffers GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount LoadLibraryA FatalAppExitA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter HeapFree HeapAlloc WriteConsoleW GetFileType GetStdHandle DebugBreak GetCurrentThreadId FlsSetValue GetCommandLineA HeapSetInformation HeapCreate HeapDestroy ExitProcess GetModuleFileNameA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SetConsoleCtrlHandler GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer TlsAlloc FlsGetValue FlsFree FlsAlloc SetHandleCount GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW RtlUnwindEx

advapi32

AllocateAndInitializeSid SetEntriesInAclW LsaNtStatusToWinError CreateServiceW GetLengthSid InitializeAcl AddAccessAllowedAce InitializeSecurityDescriptor SetSecurityDescriptorDacl SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorSacl InitiateSystemShutdownW LookupPrivilegeValueW AdjustTokenPrivileges LookupPrivilegeNameW GetTokenInformation EqualSid FreeSid OpenThreadToken OpenProcessToken QueryServiceConfigW ControlService StartServiceW QueryServiceStatus OpenSCManagerW OpenServiceW DeleteService CloseServiceHandle RegEnumValueA RegDeleteValueA RegEnumValueW RegDeleteValueW RegOpenKeyW RegEnumKeyExW RegisterEventSourceW ReportEventW DeregisterEventSource RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey

shell32

SHFileOperationW

setupapi

SetupDiGetINFClassW SetupIterateCabinetW SetupGetSourceFileLocationW SetupGetSourceInfoW SetupDiSetClassInstallParamsW SetupDiGetDeviceInstallParamsW SetupDiCreateDeviceInfoList SetupDiCreateDeviceInfoW SetupDiSetDeviceRegistryPropertyW SetupDiCallClassInstaller SetupDiGetDeviceInstanceIdW SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetDeviceRegistryPropertyW SetupGetIntField SetupDiGetActualSectionToInstallW SetupOpenInfFileW SetupFindFirstLineW SetupGetStringFieldW SetupFindNextLine SetupCloseInfFile

netapi32

NetShareAdd NetShareDel

x64/vpnpbus.cat

SHA256 2f3693badee8418c839eb4f2b132ec2b6d6c90f1e3bf02539dd28234ec3e58f9
MD5 a548eda0fa9abd3803a000927414b17a
SHA1 2bf473760f115b3180d61a736e2a84d615441f6e
SHA512 a22d1b1308e85af3f79056b10d907b906b5c5c86933d69d632b2971f303bee2f0ab9e9c7601f6ebac6cb88a41d1dd5eada2b404b657696d8fcee6e5f1ad1714e
SSDEEP 192:86a3e3S3t3G/JC4Z39JnxrEwJqKkhYCsH6F5qAAqnajo/JX:Z7DJxXxkh3sH6ylM/JX
MD5 SHA1 SHA512 SSDEEP

x64/vpnpbus.inf

SHA256 586cc28d61aed1819c321014fa757623693d49b327ecbae3bd77d288850de84f
MD5 1d992ea7dd85d14453fce31efccd880b
SHA1 158f0140bb1511d22845177f7995cc2a153be819
SHA512 435b5a496c452082ba8782c4d299e8d0d262b28c98356170f5eba5db0d6bdef79037781a9d862d0dad5620deb3310d96f9f4ce62feff705985abf1f6715e5215
MD5 SHA1 SHA512

x64/vpnpbus.sys

IMPHASH c6197237988fbc167f360d26ca736f7c
SHA256 91cff55ed450b6c899f41a1b0eedf6d26d3759ea0fec752ac168c690198c893f
MD5 6826f756f2819b085306ea86f8af47fc
SHA1 b31cacb0aeb8b282931689964f6278bbd63c92b5
SHA512 04d1b702d2a5647e76bcb4131dc58f0b384cbc95e77f990a71bebac47af714ac172dbf0ae1ea87280c0d346fe38ba3bfb0f9a32a39460338f5b9f89f317a2f4b
SSDEEP 384:mWS40m1t/RzYoSb4vBMsuu45DtJxXxkh3clMG0:f31xxYD4Cs2JtJxh6300
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

2f:97:17:dc:f3:f9:01:fb:d2:02:95:13:5f:56:e2:21:ca:89:70:15:ee:85:ae:ff:9e:5b:ae:72:fc:b8:6b:1f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 10, 2024

Minor OS version

1

Major OS version

6

Entry point

24900

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

c:\projects\driverlibraries\vpnpbus\bin\wnet\fre\amd64\vpnpbus.pdb

Name

.text

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

632B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

216B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

952B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

cbfs64.dll

IMPHASH 5d74610b714e149e647f4740c17a33f4
SHA256 7ca5d98db5190004ee559b45529a963355d3989c947374545890068d47f16df1
MD5 0a677292d9239637a9570eaf4cfc0947
SHA1 a4e2cc00c43d50c9fbea66a3a0f4b0c3c4ba8ef5
SHA512 c43cfb7dbbee8bb36ecaa0420fa6142812ab557112abe3b9f981cc524ab8e3cd4e5a8b5e7e81d39f9a8dca43898c63aedde70c823895cc2202d899ed12b2a9c2
SSDEEP 6144:46fNnwok2XnEpLHFh/YOpoIJeNHPGXRPxGawXjK/SOca6thmMD6B2DUv3MzU/9sy:4mBDk2XExUO8vGXRPxGawXjK/SOca6t+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Digest

ef:de:66:a8:ca:08:c9:a8:59:3b:d5:83:ed:ca:22:58:ce:7c:59:57:90:fe:8c:78:56:cd:7b:1f:af:d1:87:3c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

78:30:73:4a:59:01:bb:64:a0:5c:2b:1b:be:eb:e0:19:48:0b:e5:f2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

2

Major OS version

5

Entry point

207984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

kernel32

CreateMailslotW lstrcatW lstrcpyW lstrlenW GetCurrentProcess CopyFileW SetFileAttributesW GetFileAttributesW MoveFileExW GetFileInformationByHandle UnmapViewOfFile MapViewOfFile CreateFileMappingW GetFileSize QueryDosDeviceW MultiByteToWideChar WaitForMultipleObjects LeaveCriticalSection EnterCriticalSection CreateEventW SetEvent GetLogicalDrives LocalFree GetComputerNameW GetSystemInfo DeleteCriticalSection TerminateThread VirtualFree VirtualAlloc VirtualUnlock FindClose GetModuleHandleW lstrcpyA WideCharToMultiByte lstrcatA GetWindowsDirectoryW FindFirstFileW FindNextFileW GetFullPathNameW GetSystemDirectoryW LoadLibraryW GetProcAddress FreeLibrary CreateMutexW GetVersionExW TlsSetValue ReleaseMutex CreateThread ResumeThread GetCurrentThread GetThreadPriority GetThreadPriorityBoost SetThreadPriority SetThreadPriorityBoost Sleep GetCurrentThreadId TlsGetValue OpenEventW TlsAlloc GetTempPathW GetTempFileNameW DeleteFileW CreateDirectoryW CreatePipe SetHandleInformation CreateProcessW WriteFile ReadFile WaitForSingleObject GetExitCodeProcess CreateFileW DeviceIoControl GetLastError CloseHandle SetLastError CreateFileA InitializeCriticalSection SetStdHandle GetConsoleOutputCP WriteConsoleA SetFilePointer HeapSize HeapReAlloc GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA FlushFileBuffers GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount LoadLibraryA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter HeapFree HeapAlloc WriteConsoleW GetFileType GetStdHandle DebugBreak GetModuleFileNameW RtlUnwindEx FlsSetValue GetCommandLineA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapSetInformation HeapCreate HeapDestroy ExitProcess GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW

advapi32

FreeSid AllocateAndInitializeSid SetEntriesInAclW LsaNtStatusToWinError InitializeAcl AddAccessAllowedAce InitializeSecurityDescriptor SetSecurityDescriptorDacl SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorSacl InitiateSystemShutdownW LookupPrivilegeValueW AdjustTokenPrivileges LookupPrivilegeNameW GetTokenInformation OpenThreadToken OpenProcessToken QueryServiceConfigW ControlService StartServiceW QueryServiceStatus OpenServiceW DeleteService OpenSCManagerW CreateServiceW CloseServiceHandle RegEnumValueA RegDeleteValueA RegEnumValueW RegOpenKeyW RegEnumKeyExW RegDeleteValueW RegisterEventSourceW ReportEventW DeregisterEventSource RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey IsValidSid CopySid EqualSid GetLengthSid GetSecurityDescriptorLength GetSecurityDescriptorControl GetSecurityDescriptorOwner GetSecurityDescriptorGroup

shell32

SHFileOperationW

setupapi

SetupDiGetINFClassW SetupIterateCabinetW SetupGetSourceFileLocationW SetupGetSourceInfoW SetupDiSetClassInstallParamsW SetupDiGetDeviceInstallParamsW SetupDiCreateDeviceInfoList SetupDiCreateDeviceInfoW SetupDiSetDeviceRegistryPropertyW SetupDiCallClassInstaller SetupDiGetDeviceInstanceIdW SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiGetDeviceRegistryPropertyW SetupGetIntField SetupDiGetActualSectionToInstallW SetupOpenInfFileW SetupFindFirstLineW SetupGetStringFieldW SetupFindNextLine SetupCloseInfFile

netapi32

NetShareAdd NetShareDel

CbFsAddAccessDeniedProcessById CbFsAddAccessDeniedProcessByName CbFsAddAccessGrantedProcessById CbFsAddAccessGrantedProcessByName CbFsAddProcessRestrictionById CbFsAddProcessRestrictionByName CbFsAllocateVcb CbFsCcbToFcb CbFsCcbToVcb CbFsCheckProcessRestriction CbFsClearICachePolicy CbFsComposeControlDeviceName CbFsComposeTerminationEventName CbFsConvertWin32ToNtName CbFsCreateOpenedFilesSnapshot CbFsCreateSimpleSymLink CbFsCreateStorage CbFsCreateSymLink CbFsDeleteSymLink CbFsDeregisterCallback CbFsDestroyStorage CbFsDisableMetaDataCache CbFsDisableNonexistentFilesCache CbFsDisableRouteCache CbFsEnableProcessRestriction CbFsEnableRouteCache CbFsFcbToVcb CbFsFreeVcb CbFsGetAccessDeniedProcessById CbFsGetAccessDeniedProcessByName CbFsGetAccessDeniedProcessesByIdCount CbFsGetAccessDeniedProcessesByNameCount CbFsGetAccessGrantedProcessById CbFsGetAccessGrantedProcessByName CbFsGetAccessGrantedProcessesByIdCount CbFsGetAccessGrantedProcessesByNameCount CbFsGetCcb CbFsGetCreatorProcessId CbFsGetCreatorProcessName CbFsGetCreatorThreadId CbFsGetCreatorToken CbFsGetICacheType CbFsGetIconData CbFsGetMetaData CbFsGetModuleStatus CbFsGetNextOpenedFileInformation CbFsGetOpenedFileCount CbFsGetOriginatorProcessId CbFsGetOriginatorProcessName CbFsGetOriginatorThreadId CbFsGetOriginatorToken CbFsGetProcessRestrictionById CbFsGetProcessRestrictionByName CbFsGetStorageCharacteristics CbFsGetStorageDestroyedEvent CbFsGetStorageGuid CbFsGetStorageIdByIndex CbFsGetStorageIdByName CbFsGetStorageSectorSize CbFsGetStorageType CbFsGetStoragesCount CbFsGetSymLink CbFsGetSymLinksCount CbFsIconInstalled CbFsInitialize CbFsInitializeICacheUserModeCache CbFsInstall CbFsInstallIcon CbFsInstallWow64 CbFsIsCallbackFsVolume CbFsIsCallbackRegistered CbFsIsDestroyStorageOnProcessTerminated CbFsIsICachePolicySet CbFsIsMatchMask CbFsIsZeroGuid CbFsMangleProductGuid CbFsMountCB CbFsNotifyChangeFileOutside CbFsNotifyChangeFileOutsideAsync CbFsPrepareToUnload CbFsRegisterCallback CbFsReleaseUnusedFiles CbFsReleaseUnusedFilesAsync CbFsRemoveAccessDeniedProcessById CbFsRemoveAccessDeniedProcessByName CbFsRemoveAccessGrantedProcessById CbFsRemoveAccessGrantedProcessByName CbFsRemoveProcessRestrictionById CbFsRemoveProcessRestrictionByName CbFsResetIcon CbFsResetTimeout CbFsRouteToFile CbFsSetDestroyStorageOnProcessTerminated CbFsSetICachePolicy CbFsSetICacheType CbFsSetIcon CbFsSetIconData CbFsSetMaxFileSize CbFsSetMaxReadBlockSize CbFsSetMaxWriteBlockSize CbFsSetMetaData CbFsSetOrClearICachePolicy CbFsSetStorageDestroyedNotification CbFsStorageDeviceIoControl CbFsTerminateICacheUserModeCache CbFsTlsCcbIndex CbFsUcbExit CbFsUcbRequest CbFsUcbWorkerThreadInitializing CbFsUcbWorkerThreadTerminating CbFsUninstall CbFsUninstallIcon CbFsUnmountCB CbFsUnsetStorageDestroyedNotification CbFsiRegisterCallback DsShutdownSystem EvtLogSourceName StorLibBusGuid

fat12.dll

IMPHASH 4d16433f8cba350153114f9a47c0f85f
SHA256 2301186b820fe70bcfcdc2677181681eadb44c8e2fc8ca5fbf06a74789dafbdd
MD5 12656311536409eac6f061894cd54ee0
SHA1 f30298777ae5326cd299d9e44a6f394f37cf5e8d
SHA512 26d547f71bc9b71d7299cef9a73d0dd69a40388c866ae34a38204b0b404f0f2f642ed4a34070e1264ce2bd2be2a7102161602f5e10e442c6e43daa5374dc96cf
SSDEEP 6144:T3Z3PSusXKCfHPYuwcY7Af3P8J2st0HwHYv:T3Z/nsPfHuDWP8kste6u
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

0a:0a:49:1d:fd:61:77:e1:95:f5:3f:4c:c6:f6:16:37:b8:58:a9:f0:98:48:91:36:b6:ae:7e:53:6e:11:f3:29

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

63:8b:90:fe:72:a5:96:a9:01:4f:74:94:c9:cc:a5:a4:56:58:55:7b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

1

Major OS version

5

Entry point

51194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

WideCharToMultiByte MultiByteToWideChar QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RaiseException InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameA HeapFree HeapAlloc HeapReAlloc HeapSize FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode LCMapStringW GetStdHandle GetFileType GetACP FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap GetStringTypeW SetStdHandle SetFilePointerEx WriteConsoleW CreateFileW CloseHandle EncodePointer DecodePointer

advapi32

CryptHashData CryptReleaseContext CryptDestroyHash CryptAcquireContextW CryptCreateHash CryptGetHashParam

fat16.dll

IMPHASH 6f82bfce659ea15e1597d479240032b5
SHA256 b5f37a5605f0b74d72997fdcf1076086e2325e6cc18dc366b84c253a80a33e92
MD5 dbaec21c502555e021f656955e647f67
SHA1 d9ef317faa9fc3c17478de70e1d11676b73f1764
SHA512 438f2e949949e14bc3ff85b2beb375385bb95642c2c689c32789c0d3cd5e1125d665b25c38d78886ded518af66767c4269b8e1348552a413b196859c806cc846
SSDEEP 6144:leMJNpCaCdmR5RuVz2H0j8EeQ5zPgTYDgctRlFKLcxnHHAHx:leMsaCwJUjx5zPgTYDgcLlFtHqx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Digest

54:d1:dc:90:3b:53:6d:1e:db:a7:c5:e7:39:94:98:8c:ec:52:c6:5e:71:3b:cb:ba:78:f7:1a:15:0c:f0:0b:d5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

7e:94:14:4f:53:e0:6a:4e:f8:aa:ea:d3:39:52:0c:b0:bc:d5:b3:21

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

2

Major OS version

5

Entry point

35984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

WideCharToMultiByte MultiByteToWideChar QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlPcToFileHeader RaiseException RtlUnwindEx InterlockedFlushSList GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetCurrentProcess TerminateProcess ExitProcess GetModuleHandleExW GetModuleFileNameA GetModuleFileNameW HeapFree HeapAlloc HeapReAlloc HeapSize FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode LCMapStringW GetStdHandle GetFileType GetACP FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap GetStringTypeW SetStdHandle SetFilePointerEx WriteConsoleW CreateFileW CloseHandle VirtualQuery EncodePointer

advapi32

CryptHashData CryptReleaseContext CryptDestroyHash CryptAcquireContextW CryptCreateHash CryptGetHashParam

Name

.text

Size

194KB

Virtual Size

194KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

216B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

fsm.ini

SHA256 4ac72e339e2c480c239ae222fbfecaaacad673aa55c527178c922cfcf8ee993a
MD5 5dfac9c47925fd909f012e9f4e3a46d4
SHA1 a5b0400f6545e0d190e00c0f535b4ce3e3667239
SHA512 0b76e35dc280562c7364a4b5f11c5742124f9c0489a3a2aaeefeff29dde304af6615d198fa29346cb2f455e9fce2bc4aa3a9c7a6a80dbc9781310082c287c8ff
MD5 SHA1 SHA512

ippcp.dll

IMPHASH 07b48281775ec08a0602a20a04cfc132
SHA256 64a6c8e4b17a41e3e63dc81b0cfc7d533674bf295db081a87cea5e97d5c66eca
MD5 2a9e5d0b6a5beb2fd06042fd5a04ea13
SHA1 5501e91a12bb0440983f8fc4e816b27d2e566824
SHA512 2accd5325c6d6dccd03f824a015f6fd3063a65574adda4a940cfbd57344d171a4f8620490c8a872c6877095b81a75c5e19abfa3b3db54bb9c8e4feb523fc3e98
SSDEEP 12288:u4Y+EGa4cp4/9phnR0NMcjMPDYiSxM0whnNTNTNTNTNQhJSf1:BY1GENMcM7Yi6M0in5555ChJSf1
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

2e:07:54:38:1c:76:49:ff:a6:04:13:fd:9a:ed:7c:45:a6:07:56:61:b4:63:cd:e0:c5:ec:ea:d4:e9:01:fa:0d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

94:c2:83:79:28:79:0a:a9:87:58:29:04:d4:27:ed:27:cf:56:73:cd

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

476240

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

499KB

Virtual Size

499KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

IPPCODE

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

138KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

IPPDATA

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

jt.dll

IMPHASH fa19e76d26017b15d845e5fffdf92290
SHA256 fd8673271f05f1b6c512c254547b173533433983ed8ff5cdea2930702c96a712
MD5 3a7cfad30156c85300a901c64e5965f1
SHA1 a58f854f64d109d602fe5b9e2f73811b26fa56d1
SHA512 f50e3ed36eb60969095ceda07f023cbb798304d836482e250ce2ccb5256107ab9744fb43e4b0200ff3a38ed2fb91063760673d943da82275b4705220a14b10e0
SSDEEP 6144:iZs1TS5NC+l/dj/bYgp2aWKWjjQ4aCHHIUHe:lQJbbYN1KWNo+e
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

f7:20:00:3f:91:7e:b9:52:e0:20:9f:94:95:3a:1e:b2:08:05:86:33:5a:f5:20:c7:0b:f1:26:7a:bc:43:97:f6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

e8:fe:53:09:21:a4:ab:61:19:cf:34:94:18:a2:77:ba:0b:4b:e3:73

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

5

Entry point

231067

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

jcopy_block_row jcopy_sample_rows jdiv_round_up jinit_1pass_quantizer jinit_2pass_quantizer jinit_c_coef_controller jinit_c_main_controller jinit_c_master_control jinit_c_prep_controller jinit_color_converter jinit_color_deconverter jinit_compress_master jinit_d_coef_controller jinit_d_main_controller jinit_d_post_controller jinit_downsampler jinit_forward_dct jinit_huff_decoder jinit_huff_encoder jinit_input_controller jinit_inverse_dct jinit_marker_reader jinit_marker_writer jinit_master_decompress jinit_memory_mgr jinit_merged_upsampler jinit_phuff_decoder jinit_phuff_encoder jinit_upsampler jpeg_CreateCompress jpeg_CreateDecompress jpeg_abort jpeg_abort_compress jpeg_abort_decompress jpeg_add_quant_table jpeg_alloc_huff_table jpeg_alloc_quant_table jpeg_calc_output_dimensions jpeg_consume_input jpeg_copy_critical_parameters jpeg_default_colorspace jpeg_destroy jpeg_destroy_compress jpeg_destroy_decompress jpeg_fdct_float jpeg_fdct_ifast jpeg_fdct_islow jpeg_fill_bit_buffer jpeg_finish_compress jpeg_finish_decompress jpeg_finish_output jpeg_free_large jpeg_free_small jpeg_gen_optimal_table jpeg_get_large jpeg_get_small jpeg_has_multiple_scans jpeg_huff_decode jpeg_idct_1x1 jpeg_idct_2x2 jpeg_idct_4x4 jpeg_idct_float jpeg_idct_ifast jpeg_idct_islow jpeg_input_complete jpeg_make_c_derived_tbl jpeg_make_d_derived_tbl jpeg_mem_available jpeg_mem_dest jpeg_mem_init jpeg_mem_src jpeg_mem_term jpeg_new_colormap jpeg_open_backing_store jpeg_quality_scaling jpeg_read_coefficients jpeg_read_header jpeg_read_raw_data jpeg_read_scanlines jpeg_resync_to_restart jpeg_save_markers jpeg_set_colorspace jpeg_set_defaults jpeg_set_linear_quality jpeg_set_marker_processor jpeg_set_quality jpeg_simple_progression jpeg_start_compress jpeg_start_decompress jpeg_start_output jpeg_std_error jpeg_stdio_dest jpeg_stdio_src jpeg_suppress_tables jpeg_write_coefficients jpeg_write_m_byte jpeg_write_m_header jpeg_write_marker jpeg_write_raw_data jpeg_write_scanlines jpeg_write_tables jround_up jzero_far

libraw.dll

IMPHASH 9047f2776af334f6d428227d3eedc138
SHA256 eb0cad5bec16c2b20b4e36e26786ca352646ed342f9a8c7c40d7de8e1f5ce149
MD5 c46a8891b1a0bad348291598aa25ea13
SHA1 dbc3d9078fd827fc1d2a4801d2937ae7d698e325
SHA512 677ee0551303cc0684c1e86b1a41f0b9b2c4866b1dc1e5132f5e31f698c9c41717fc488221e63bb9d1db9f10a674d94955309b16e544924304ac66cfe0983601
SSDEEP 12288:QlGNgEM/vBGvx1f61j4Uko5f2NceauRY1EzEl/c5q03mbtZK5Tzjp1Cdl4AkI8xM:QvEMge5+Ncz0WbtZKJUKXb9pu5QQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

6c:8d:c3:17:7d:92:ff:d1:76:9f:6c:d0:e3:ac:d3:04:c7:05:78:07:43:34:0c:86:cc:39:1e:34:86:87:57:b8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

40:5b:c1:c1:9c:95:cf:27:bd:84:f4:e3:fc:98:cc:af:96:66:fb:12

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

1

Major OS version

5

Entry point

529758

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

UnmapViewOfFile CloseHandle CreateFileW InterlockedExchange CreateFileMappingW MapViewOfFile SetEndOfFile WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent SetEvent ResetEvent WaitForSingleObjectEx IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RaiseException RtlUnwind GetLastError FreeLibrary LoadLibraryExW GetModuleFileNameW InterlockedFlushSList ReadFile GetDriveTypeW GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime HeapAlloc HeapFree HeapReAlloc ExitProcess GetModuleHandleExW GetModuleFileNameA GetStdHandle GetACP GetConsoleMode ReadConsoleW WriteFile GetConsoleCP GetTimeZoneInformation IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers SetFilePointerEx GetCurrentDirectoryW GetFullPathNameW SetStdHandle GetProcessHeap FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA WriteConsoleW HeapSize GetFileSizeEx

ws2_32

htons htonl ntohs ntohl

advapi32

SystemFunction036

??0?$auto_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@std@@QAE@AAV01@@Z ??0?$auto_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??0?$auto_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@std@@QAE@U?$auto_ptr_ref@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@1@@Z ??0?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAE@$$QAV01@@Z ??0?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAE@$$T@Z ??0?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@$$QAU?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@1@@Z ??0?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??0?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@ABU?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@1@@Z ??0?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAE@XZ ??0LibRaw@@QAE@ABV0@@Z ??0LibRaw@@QAE@I@Z ??0LibRaw_abstract_datastream@@QAE@ABV0@@Z ??0LibRaw_abstract_datastream@@QAE@XZ ??0LibRaw_bigfile_datastream@@QAE@ABV0@@Z ??0LibRaw_bigfile_datastream@@QAE@PBD@Z ??0LibRaw_bigfile_datastream@@QAE@PB_W@Z ??0LibRaw_buffer_datastream@@QAE@ABV0@@Z ??0LibRaw_buffer_datastream@@QAE@PAXI@Z ??0LibRaw_file_datastream@@QAE@AAV0@@Z ??0LibRaw_file_datastream@@QAE@PBD@Z ??0LibRaw_file_datastream@@QAE@PB_W@Z ??0LibRaw_windows_datastream@@QAE@ABV0@@Z ??0LibRaw_windows_datastream@@QAE@PAX@Z ??0LibRaw_windows_datastream@@QAE@PB_W@Z ??0libraw_memmgr@@QAE@I@Z ??1?$auto_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@std@@QAE@XZ ??1?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAE@XZ ??1LibRaw@@UAE@XZ ??1LibRaw_abstract_datastream@@UAE@XZ ??1LibRaw_bigfile_datastream@@UAE@XZ ??1LibRaw_buffer_datastream@@UAE@XZ ??1LibRaw_file_datastream@@UAE@XZ ??1LibRaw_windows_datastream@@UAE@XZ ??1libraw_memmgr@@QAE@XZ ??4?$_Unique_ptr_base@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAEAAV01@$$QAV01@@Z ??4?$_Unique_ptr_base@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAEAAV01@ABV01@@Z ??4?$auto_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@std@@QAEAAV01@AAV01@@Z ??4?$auto_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@std@@QAEAAV01@U?$auto_ptr_ref@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@1@@Z ??4?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAEAAV01@$$QAV01@@Z ??4?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAEAAV01@$$T@Z ??4LibRaw@@QAEAAV0@ABV0@@Z ??4LibRaw_abstract_datastream@@QAEAAV0@ABV0@@Z ??4LibRaw_bigfile_datastream@@QAEAAV0@ABV0@@Z ??4LibRaw_buffer_datastream@@QAEAAV0@ABV0@@Z ??4LibRaw_file_datastream@@QAEAAV0@AAV0@@Z ??4LibRaw_windows_datastream@@QAEAAV0@ABV0@@Z ??4libraw_memmgr@@QAEAAV0@ABV0@@Z ??B?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QBE_NXZ ??C?$auto_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@1@XZ ??C?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@1@XZ ??D?$auto_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@std@@QBEAAV?$basic_streambuf@DU?$char_traits@D@std@@@1@XZ ??D?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QBEAAV?$basic_streambuf@DU?$char_traits@D@std@@@1@XZ ??_7LibRaw@@6B@ ??_7LibRaw_abstract_datastream@@6B@ ??_7LibRaw_bigfile_datastream@@6B@ ??_7LibRaw_buffer_datastream@@6B@ ??_7LibRaw_file_datastream@@6B@ ??_7LibRaw_windows_datastream@@6B@ ??_F?$auto_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ ??_FLibRaw@@QAEXXZ ?COLOR@LibRaw@@QAEHHH@Z ?Canon_CameraSettings@LibRaw@@IAEXI@Z ?Canon_D30_linenums_2_StdWBi@LibRaw@@1Vlibraw_static_table_t@@A ?Canon_G9_linenums_2_StdWBi@LibRaw@@1Vlibraw_static_table_t@@A ?Canon_KeyIs0x0410_Len2048_linenums_2_StdWBi@LibRaw@@1Vlibraw_static_table_t@@A ?Canon_KeyIs0x0410_Len3072_linenums_2_StdWBi@LibRaw@@1Vlibraw_static_table_t@@A ?Canon_KeyIsZero_Len2048_linenums_2_StdWBi@LibRaw@@1Vlibraw_static_table_t@@A ?Canon_WBCTpresets@LibRaw@@IAEXF@Z ?Canon_WBpresets@LibRaw@@IAEXHH@Z ?Canon_wbi2std@LibRaw@@1Vlibraw_static_table_t@@A ?FC@LibRaw@@QAEHHH@Z ?FCF@LibRaw@@IAEHHH@Z ?FujiCCT_K@LibRaw@@1Vlibraw_static_table_t@@A ?Fuji_wb_list1@LibRaw@@1Vlibraw_static_table_t@@A ?Fuji_wb_list2@LibRaw@@1Vlibraw_static_table_t@@A ?GetNormalizedModel@LibRaw@@IAEXXZ ?HassyRawFormat_idx2HR@LibRaw@@IAEPBDI@Z ?KodakIllumMatrix@LibRaw@@IAEFIPAM@Z ?Kodak_DCR_WBtags@LibRaw@@IAEXHIH@Z ?Kodak_KDC_WBtags@LibRaw@@IAEXHH@Z ?Nikon_NRW_WBtag@LibRaw@@IAEXHH@Z ?Oly_wb_list1@LibRaw@@1Vlibraw_static_table_t@@A ?Oly_wb_list2@LibRaw@@1Vlibraw_static_table_t@@A ?Open@LibRaw_windows_datastream@@IAEXPAX@Z ?PentaxISO@LibRaw@@IAEXG@Z ?PentaxLensInfo@LibRaw@@IAEX_KI@Z ?Pentax_wb_list1@LibRaw@@1Vlibraw_static_table_t@@A ?Pentax_wb_list2@LibRaw@@1Vlibraw_static_table_t@@A ?SetStandardIlluminants@LibRaw@@IAEXIPBD@Z ?Sony_SR2_wb_list1@LibRaw@@1Vlibraw_static_table_t@@A ?Sony_SR2_wb_list@LibRaw@@1Vlibraw_static_table_t@@A ?Sony_SRF_wb_list@LibRaw@@1Vlibraw_static_table_t@@A ?_CanonConvertAperture@LibRaw@@KAMG@Z ?_Myptr@?$_Unique_ptr_base@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAEAAPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?_Myptr@?$_Unique_ptr_base@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QBEABQAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?aRGB_coeff@LibRaw@@IAEXQAY02N@Z ?aahd_interpolate@LibRaw@@IAEXXZ ?adjust_bl@LibRaw@@IAEXXZ ?adjust_maximum@LibRaw@@QAEHXZ ?adjust_sizes_info_only@LibRaw@@QAEHXZ ?adobe_coeff@LibRaw@@UAEHIPBDH@Z ?adobe_copy_pixel@LibRaw@@IAEXIIPAPAG@Z ?ahd_interpolate@LibRaw@@IAEXXZ ?ahd_interpolate_build_homogeneity_map@LibRaw@@IAEXHHPAY2CAA@CAA@2FPAY1CAA@1D@Z ?ahd_interpolate_combine_homogeneous_pixels@LibRaw@@IAEXHHPAY2CAA@CAA@2GPAY1CAA@1D@Z ?ahd_interpolate_green_h_and_v@LibRaw@@IAEXHHPAY2CAA@CAA@2G@Z ?ahd_interpolate_r_and_b_and_convert_to_cielab@LibRaw@@IAEXHHPAY2CAA@CAA@2GPAY2CAA@CAA@2F@Z ?ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab@LibRaw@@IAEXHHPAY1CAA@2GPAY1CAA@2F@Z ?android_loose_load_raw@LibRaw@@IAEXXZ ?android_tight_load_raw@LibRaw@@IAEXXZ ?apply_tiff@LibRaw@@IAEXXZ ?bad_pixels@LibRaw@@IAEXPBD@Z ?blend_highlights@LibRaw@@IAEXXZ ?border_interpolate@LibRaw@@IAEXH@Z ?broadcom_load_raw@LibRaw@@IAEXXZ ?buffering_off@LibRaw_abstract_datastream@@UAEXXZ ?calloc@LibRaw@@IAEPAXII@Z ?calloc@libraw_memmgr@@QAEPAXII@Z ?cam_xyz_coeff@LibRaw@@IAEXQAY03MQAY02N@Z ?cameraCount@LibRaw@@SAHXZ ?cameraList@LibRaw@@SAPAPBDXZ ?cameramakeridx2maker@LibRaw@@SAPBDI@Z ?canon_600_auto_wb@LibRaw@@IAEXXZ ?canon_600_coeff@LibRaw@@IAEXXZ ?canon_600_color@LibRaw@@IAEHQAHH@Z ?canon_600_correct@LibRaw@@IAEXXZ ?canon_600_fixed_wb@LibRaw@@IAEXH@Z ?canon_600_load_raw@LibRaw@@IAEXXZ ?canon_has_lowbits@LibRaw@@IAEHXZ ?canon_load_raw@LibRaw@@IAEXXZ ?canon_rmf_load_raw@LibRaw@@IAEXXZ ?canon_s2is@LibRaw@@IAEHXZ ?canon_sraw_load_raw@LibRaw@@IAEXXZ ?capabilities@LibRaw@@SAIXZ ?checkCancel@LibRaw@@IAEXXZ ?cielab@LibRaw@@IAEXQAGQAF@Z ?ciff_block_1030@LibRaw@@IAEXXZ ?cleanup@libraw_memmgr@@QAEXXZ ?clearCancelFlag@LibRaw@@UAEXXZ ?convertFloatToInt@LibRaw@@QAEXMMM@Z ?convert_to_rgb@LibRaw@@IAEXXZ ?convert_to_rgb_loop@LibRaw@@MAEXQAY03M@Z ?copy_bayer@LibRaw@@MAEXQAGPAG@Z ?copy_fuji_uncropped@LibRaw@@MAEXQAGPAG@Z ?copy_line_to_bayer@LibRaw@@IAEXPAUfuji_compressed_block@@HHH@Z ?copy_line_to_xtrans@LibRaw@@IAEXPAUfuji_compressed_block@@HHH@Z ?copy_mem_image@LibRaw@@QAEHPAXHH@Z ?crop_masked_pixels@LibRaw@@IAEXXZ ?crw_init_tables@LibRaw@@IAEXIQAPAG@Z ?crxConvertPlaneLineDf@LibRaw@@IAEXPAXH@Z ?crxDecodePlane@LibRaw@@IAEHPAXI@Z ?crxLoadDecodeLoop@LibRaw@@MAEXPAXH@Z ?crxLoadFinalizeLoopE3@LibRaw@@MAEXPAXH@Z ?crxLoadRaw@LibRaw@@IAEXXZ ?crxParseImageHeader@LibRaw@@IAEHPAEH@Z ?cubic_spline@LibRaw@@IAEXPBH0H@Z ?dcb@LibRaw@@IAEXHH@Z ?dcb_color2@LibRaw@@IAEXPAY02M@Z ?dcb_color3@LibRaw@@IAEXPAY02M@Z ?dcb_color@LibRaw@@IAEXXZ ?dcb_color_full@LibRaw@@IAEXXZ ?dcb_copy_to_buffer@LibRaw@@IAEXPAY02M@Z ?dcb_correction2@LibRaw@@IAEXXZ ?dcb_correction@LibRaw@@IAEXXZ ?dcb_decide@LibRaw@@IAEXPAY02M0@Z ?dcb_hor@LibRaw@@IAEXPAY02M@Z ?dcb_map@LibRaw@@IAEXXZ ?dcb_nyquist@LibRaw@@IAEXXZ ?dcb_pp@LibRaw@@IAEXXZ ?dcb_refinement@LibRaw@@IAEXXZ ?dcb_restore_from_buffer@LibRaw@@IAEXPAY02M@Z ?dcb_ver@LibRaw@@IAEXPAY02M@Z ?dcraw_clear_mem@LibRaw@@SAXPAUlibraw_processed_image_t@@@Z ?dcraw_make_mem_image@LibRaw@@UAEPAUlibraw_processed_image_t@@PAH@Z ?dcraw_make_mem_thumb@LibRaw@@UAEPAUlibraw_processed_image_t@@PAH@Z ?dcraw_ppm_tiff_writer@LibRaw@@QAEHPBD@Z ?dcraw_process@LibRaw@@QAEHXZ ?dcraw_thumb_writer@LibRaw@@QAEHPBD@Z ?deflate_dng_load_raw@LibRaw@@IAEXXZ ?derror@LibRaw@@IAEXXZ ?dht_interpolate@LibRaw@@IAEXXZ ?eight_bit_load_raw@LibRaw@@IAEXXZ ?eof@LibRaw_bigfile_datastream@@UAEHXZ ?eof@LibRaw_buffer_datastream@@UAEHXZ ?eof@LibRaw_file_datastream@@UAEHXZ ?error_count@LibRaw@@QAEHXZ ?exp_bef@LibRaw@@IAEXMM@Z ?fbdd@LibRaw@@IAEXH@Z ?fbdd_correction2@LibRaw@@IAEXPAY02N@Z ?fbdd_correction@LibRaw@@IAEXXZ ?fbdd_green@LibRaw@@IAEXXZ ?fcol@LibRaw@@QAEHHH@Z ?fill_holes@LibRaw@@IAEXH@Z ?find_green@LibRaw@@IAEMHHHH@Z ?find_ifd_by_offset@LibRaw@@IAEHH@Z ?fix_after_rawspeed@LibRaw@@IAEXH@Z ?fixupArri@LibRaw@@IAEXXZ ?flip_index@LibRaw@@IAEHHH@Z ?float_dng_load_raw_placeholder@LibRaw@@IAEXXZ ?fname@LibRaw_abstract_datastream@@UAEPBDXZ ?fname@LibRaw_bigfile_datastream@@UAEPBDXZ ?fname@LibRaw_file_datastream@@UAEPBDXZ ?forget_ptr@libraw_memmgr@@AAEXPAX@Z ?free@LibRaw@@IAEXPAX@Z ?free@libraw_memmgr@@QAEXPAX@Z ?free_image@LibRaw@@QAEXXZ ?fuji_14bit_load_raw@LibRaw@@IAEXXZ ?fuji_bayer_decode_block@LibRaw@@IAEXPAUfuji_compressed_block@@PBUfuji_compressed_params@@H@Z ?fuji_compressed_load_raw@LibRaw@@IAEXXZ ?fuji_decode_loop@LibRaw@@MAEXPBUfuji_compressed_params@@HPA_JPAI@Z ?fuji_decode_strip@LibRaw@@IAEXPBUfuji_compressed_params@@H_JI@Z ?fuji_rotate@LibRaw@@MAEXXZ ?gamma_curve@LibRaw@@IAEXNNHH@Z ?get2@LibRaw@@IAEGXZ ?get4@LibRaw@@IAEIXZ ?get@?$auto_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?get@?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?getOlympus_CameraType2@LibRaw@@IAEXXZ ?getOlympus_SensorTemperature@LibRaw@@IAEXI@Z ?get_char@LibRaw_bigfile_datastream@@UAEHXZ ?get_char@LibRaw_buffer_datastream@@UAEHXZ ?get_char@LibRaw_file_datastream@@UAEHXZ ?get_decoder_info@LibRaw@@UAEHPAUlibraw_decoder_info_t@@@Z ?get_deleter@?$_Unique_ptr_base@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAEAAU?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@XZ ?get_deleter@?$_Unique_ptr_base@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QBEABU?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@XZ ?get_internal_data_pointer@LibRaw@@QAEPAUlibraw_internal_data_t@@XZ ?get_mem_image_format@LibRaw@@QBEXPAH000@Z ?get_timestamp@LibRaw@@IAEXH@Z ?getbithuff@LibRaw@@IAEIHPAG@Z ?getint@LibRaw@@IAEIH@Z ?getreal@LibRaw@@IAENH@Z ?gets@LibRaw_bigfile_datastream@@UAEPADPADH@Z ?gets@LibRaw_buffer_datastream@@UAEPADPADH@Z ?gets@LibRaw_file_datastream@@UAEPADPADH@Z ?getwords@LibRaw@@KAHPADQAPADHH@Z ?green_matching@LibRaw@@IAEXXZ ?guess_byte_order@LibRaw@@IAEFH@Z ?hasselblad_full_load_raw@LibRaw@@IAEXXZ ?hasselblad_load_raw@LibRaw@@IAEXXZ ?hat_transform@LibRaw@@IAEXPAM0HHH@Z ?have_fpdata@LibRaw@@QAEHXZ ?identify@LibRaw@@IAEXXZ ?identify_finetune_by_filesize@LibRaw@@IAEXH@Z ?identify_finetune_dcr@LibRaw@@IAEXQADHH@Z ?identify_finetune_pentax@LibRaw@@IAEXXZ ?identify_process_dng_fields@LibRaw@@IAEXXZ ?imacon_full_load_raw@LibRaw@@IAEXXZ ?init_fuji_block@LibRaw@@IAEXPAUfuji_compressed_block@@PBUfuji_compressed_params@@_JI@Z ?init_fuji_compr@LibRaw@@IAEXPAUfuji_compressed_params@@@Z ?initdata@LibRaw@@IAEXXZ ?int_to_float@LibRaw@@IAEMH@Z ?is_canon_600@LibRaw@@MAEHXZ ?is_coolscan_nef@LibRaw@@QAEHXZ ?is_curve_linear@LibRaw@@IAEHXZ ?is_floating_point@LibRaw@@QAEHXZ ?is_fuji_rotated@LibRaw@@QAEHXZ ?is_jpeg_thumb@LibRaw@@QAEHXZ ?is_nikon_sraw@LibRaw@@QAEHXZ ?is_phaseone_compressed@LibRaw@@MAEHXZ ?is_sraw@LibRaw@@QAEHXZ ?jpeg_src@LibRaw_abstract_datastream@@UAEHPAX@Z ?jpeg_src@LibRaw_buffer_datastream@@UAEHPAX@Z ?jpeg_thumb@LibRaw@@IAEXXZ ?jpeg_thumb_writer@LibRaw@@IAEXPAU_iobuf@@PADH@Z ?kodak_262_load_raw@LibRaw@@IAEXXZ ?kodak_65000_decode@LibRaw@@IAEHPAFH@Z ?kodak_65000_load_raw@LibRaw@@IAEXXZ ?kodak_c330_load_raw@LibRaw@@IAEXXZ ?kodak_c603_load_raw@LibRaw@@IAEXXZ ?kodak_dc120_load_raw@LibRaw@@IAEXXZ ?kodak_jpeg_load_raw@LibRaw@@IAEXXZ ?kodak_radc_load_raw@LibRaw@@IAEXXZ ?kodak_rgb_load_raw@LibRaw@@IAEXXZ ?kodak_thumb_load_raw@LibRaw@@IAEXXZ ?kodak_thumb_loader@LibRaw@@IAEXXZ ?kodak_ycbcr_load_raw@LibRaw@@IAEXXZ ?layer_thumb@LibRaw@@IAEXXZ ?lch_to_rgb@LibRaw@@IAEXPAY02N@Z ?leaf_hdr_load_raw@LibRaw@@IAEXXZ ?libraw_powf64l@LibRaw@@SAMMM@Z ?lin_interpolate@LibRaw@@IAEXXZ ?lin_interpolate_loop@LibRaw@@MAEXPAHH@Z ?linear_table@LibRaw@@IAEXI@Z ?ljpeg_diff@LibRaw@@IAEHPAG@Z ?ljpeg_end@LibRaw@@IAEXPAUjhead@@@Z ?ljpeg_idct@LibRaw@@IAEXPAUjhead@@@Z ?ljpeg_row@LibRaw@@IAEPAGHPAUjhead@@@Z ?ljpeg_row_unrolled@LibRaw@@IAEPAGHPAUjhead@@@Z ?ljpeg_start@LibRaw@@IAEHPAUjhead@@H@Z ?lock@LibRaw_abstract_datastream@@UAEHXZ ?lossless_dng_load_raw@LibRaw@@IAEXXZ ?lossless_jpeg_load_raw@LibRaw@@IAEXXZ ?lossy_dng_load_raw@LibRaw@@IAEXXZ ?make_decoder@LibRaw@@IAEPAGPBE@Z ?make_decoder_ref@LibRaw@@IAEPAGPAPBE@Z ?make_jas_stream@LibRaw_bigfile_datastream@@UAEPAXXZ ?make_jas_stream@LibRaw_buffer_datastream@@UAEPAXXZ ?make_jas_stream@LibRaw_file_datastream@@UAEPAXXZ ?malloc@LibRaw@@IAEPAXI@Z ?malloc@libraw_memmgr@@QAEPAXI@Z ?median4@LibRaw@@IAEHPAH@Z ?median_filter@LibRaw@@IAEXXZ ?mem_ptr@libraw_memmgr@@AAEXPAX@Z ?memmem@LibRaw@@KAPAXPADI0I@Z ?merror@LibRaw@@IAEXPAXPBD@Z ?minolta_rd175_load_raw@LibRaw@@IAEXXZ ?minolta_z2@LibRaw@@IAEHXZ ?nikon_14bit_load_raw@LibRaw@@IAEXXZ ?nikon_3700@LibRaw@@IAEXXZ ?nikon_coolscan_load_raw@LibRaw@@IAEXXZ ?nikon_e2100@LibRaw@@IAEHXZ ?nikon_e995@LibRaw@@IAEHXZ ?nikon_load_padded_packed_raw@LibRaw@@IAEXXZ ?nikon_load_raw@LibRaw@@IAEXXZ ?nikon_load_sraw@LibRaw@@IAEXXZ ?nikon_load_striped_packed_raw@LibRaw@@IAEXXZ ?nikon_read_curve@LibRaw@@IAEXXZ ?nikon_yuv_load_raw@LibRaw@@IAEXXZ ?nokia_load_raw@LibRaw@@IAEXXZ ?olympus_load_raw@LibRaw@@IAEXXZ ?open_bayer@LibRaw@@UAEHPAEIGGGGGGEEIII@Z ?open_buffer@LibRaw@@QAEHPAXI@Z ?open_datastream@LibRaw@@UAEHPAVLibRaw_abstract_datastream@@@Z ?open_file@LibRaw@@QAEHPBD_J@Z ?open_file@LibRaw@@QAEHPB_W_J@Z ?output_params_ptr@LibRaw@@QAEPAUlibraw_output_params_t@@XZ ?own_filtering_supported@LibRaw@@IAEHXZ ?p1raw@LibRaw@@IAEHII@Z ?packed_dng_load_raw@LibRaw@@IAEXXZ ?packed_load_raw@LibRaw@@IAEXXZ ?pana_data@LibRaw@@IAEIHPAI@Z ?panasonicC6_load_raw@LibRaw@@IAEXXZ ?panasonicC7_load_raw@LibRaw@@IAEXXZ ?panasonic_load_raw@LibRaw@@IAEXXZ ?parseAdobePanoMakernote@LibRaw@@IAEXXZ ?parseAdobeRAFMakernote@LibRaw@@IAEXXZ ?parseCR3@LibRaw@@IAEH_K0AAFPAD11@Z ?parseCanonMakernotes@LibRaw@@IAEXIIII@Z ?parseEpsonMakernote@LibRaw@@IAEXHHI@Z ?parseFujiMakernotes@LibRaw@@IAEXIIII@Z ?parseHassyModel@LibRaw@@IAEXXZ ?parseLeicaInternalBodySerial@LibRaw@@IAEHI@Z ?parseLeicaLensID@LibRaw@@IAEXXZ ?parseLeicaLensName@LibRaw@@IAEHI@Z ?parseLeicaMakernote@LibRaw@@IAEXHHI@Z ?parseNikonMakernote@LibRaw@@IAEXHHI@Z ?parseOlympus_CameraSettings@LibRaw@@IAEXHIIII@Z ?parseOlympus_Equipment@LibRaw@@IAEXIIII@Z ?parseOlympus_ImageProcessing@LibRaw@@IAEXIIII@Z ?parseOlympus_RawInfo@LibRaw@@IAEXIIII@Z ?parsePentaxMakernotes@LibRaw@@IAEXHIIII@Z ?parseRicohMakernotes@LibRaw@@IAEXHIIII@Z ?parseSamsungMakernotes@LibRaw@@IAEXHIIII@Z ?parseSigmaMakernote@LibRaw@@IAEXHHI@Z ?parseSonyLensFeatures@LibRaw@@IAEXEE@Z ?parseSonyLensType2@LibRaw@@IAEXEE@Z ?parseSonyMakernotes@LibRaw@@IAEXHIIIIAAPAEAAG0101010101010101@Z ?parseSonySR2@LibRaw@@IAEXPAEIII@Z ?parseSonySRF@LibRaw@@IAEXI@Z ?parse_broadcom@LibRaw@@IAEXXZ ?parse_ciff@LibRaw@@IAEXHHH@Z ?parse_cine@LibRaw@@IAEXXZ ?parse_custom_cameras@LibRaw@@IAEIIQAUlibraw_custom_camera_t@@PAPAD@Z ?parse_exif@LibRaw@@IAEXH@Z ?parse_exif_interop@LibRaw@@IAEXH@Z ?parse_fuji@LibRaw@@IAEXH@Z ?parse_fuji_compressed_header@LibRaw@@IAEXXZ ?parse_gps@LibRaw@@IAEXH@Z ?parse_gps_libraw@LibRaw@@IAEXH@Z ?parse_jpeg@LibRaw@@IAEHH@Z ?parse_kodak_ifd@LibRaw@@IAEXH@Z ?parse_kyocera@LibRaw@@IAEXXZ ?parse_makernote@LibRaw@@IAEXHH@Z ?parse_makernote_0xc634@LibRaw@@IAEXHHI@Z ?parse_minolta@LibRaw@@IAEXH@Z ?parse_mos@LibRaw@@IAEXH@Z ?parse_phase_one@LibRaw@@IAEXH@Z ?parse_qt@LibRaw@@IAEXH@Z ?parse_raspberrypi@LibRaw@@IAEXXZ ?parse_redcine@LibRaw@@IAEXXZ ?parse_riff@LibRaw@@IAEXXZ ?parse_rollei@LibRaw@@IAEXXZ ?parse_sinar_ia@LibRaw@@IAEXXZ ?parse_smal@LibRaw@@IAEXHH@Z ?parse_thumb_note@LibRaw@@IAEXHII@Z ?parse_tiff@LibRaw@@IAEHH@Z ?parse_tiff_ifd@LibRaw@@IAEHH@Z ?parse_x3f@LibRaw@@IAEXXZ ?pentax_4shot_load_raw@LibRaw@@IAEXXZ ?pentax_load_raw@LibRaw@@IAEXXZ ?ph1_bithuff@LibRaw@@IAEIHPAG@Z ?phase_one_allocate_tempbuffer@LibRaw@@IAEXXZ ?phase_one_correct@LibRaw@@QAEHXZ ?phase_one_flat_field@LibRaw@@IAEXHH@Z ?phase_one_free_tempbuffer@LibRaw@@IAEXXZ ?phase_one_load_raw@LibRaw@@IAEXXZ ?phase_one_load_raw_c@LibRaw@@IAEXXZ ?phase_one_subtract_black@LibRaw@@QAEHPAG0@Z ?powf_lim@LibRaw@@SAMMMM@Z ?ppg_interpolate@LibRaw@@IAEXXZ ?ppm16_thumb@LibRaw@@IAEXXZ ?ppm_thumb@LibRaw@@IAEXXZ ?pre_interpolate@LibRaw@@IAEXXZ ?processCanonCameraInfo@LibRaw@@IAEX_KPAEIII@Z ?processNikonLensData@LibRaw@@IAEXPAEI@Z ?process_Hassy_Lens@LibRaw@@IAEXH@Z ?process_Sony_0x0116@LibRaw@@IAEXPAEG_K@Z ?process_Sony_0x2010@LibRaw@@IAEXPAEG@Z ?process_Sony_0x9050@LibRaw@@IAEXPAEG_K@Z ?process_Sony_0x9400@LibRaw@@IAEXPAEG_K@Z ?process_Sony_0x9402@LibRaw@@IAEXPAEG@Z ?process_Sony_0x9403@LibRaw@@IAEXPAEG@Z ?process_Sony_0x9406@LibRaw@@IAEXPAEG@Z ?process_Sony_0x940c@LibRaw@@IAEXPAEG@Z ?process_Sony_0x940e@LibRaw@@IAEXPAEG_K@Z ?pseudoinverse@LibRaw@@IAEXPAY02N0H@Z ?quicktake_100_load_raw@LibRaw@@IAEXXZ ?raw2image@LibRaw@@QAEHXZ ?raw2image_ex@LibRaw@@QAEHH@Z ?raw2image_start@LibRaw@@QAEXXZ ?raw_was_read@LibRaw@@IAEHXZ ?read@LibRaw_bigfile_datastream@@UAEHPAXII@Z ?read@LibRaw_buffer_datastream@@UAEHPAXII@Z ?read@LibRaw_file_datastream@@UAEHPAXII@Z ?read_shorts@LibRaw@@IAEXPAGI@Z ?realloc@LibRaw@@IAEPAXPAXI@Z ?realloc@libraw_memmgr@@QAEPAXPAXI@Z ?reconstruct_base@LibRaw_windows_datastream@@IAEXXZ ?recover_highlights@LibRaw@@IAEXXZ ?recycle@LibRaw@@QAEXXZ ?recycle_datastream@LibRaw@@QAEXXZ ?redcine_load_raw@LibRaw@@IAEXXZ ?release@?$auto_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?release@?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?removeExcessiveSpaces@LibRaw@@KAXPAD@Z ?remove_caseSubstr@LibRaw@@KAXPAD0@Z ?remove_trailing_spaces@LibRaw@@KAXPADI@Z ?remove_zeroes@LibRaw@@IAEXXZ ?reset@?$auto_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@std@@QAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@@Z ?reset@?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@@Z ?rgb_to_lch@LibRaw@@IAEXPAY02N@Z ?rollei_load_raw@LibRaw@@IAEXXZ ?rollei_thumb@LibRaw@@IAEXXZ ?romm_coeff@LibRaw@@IAEXQAY02M@Z ?rpi_load_raw12@LibRaw@@IAEXXZ ?rpi_load_raw14@LibRaw@@IAEXXZ ?rpi_load_raw16@LibRaw@@IAEXXZ ?rpi_load_raw8@LibRaw@@IAEXXZ ?samsung2_load_raw@LibRaw@@IAEXXZ ?samsung3_load_raw@LibRaw@@IAEXXZ ?samsung_load_raw@LibRaw@@IAEXXZ ?scale_colors@LibRaw@@IAEXXZ ?scale_colors_loop@LibRaw@@MAEXQAM@Z ?scanf_one@LibRaw_bigfile_datastream@@UAEHPBDPAX@Z ?scanf_one@LibRaw_buffer_datastream@@UAEHPBDPAX@Z ?scanf_one@LibRaw_file_datastream@@UAEHPBDPAX@Z ?seek@LibRaw_bigfile_datastream@@UAEH_JH@Z ?seek@LibRaw_buffer_datastream@@UAEH_JH@Z ?seek@LibRaw_file_datastream@@UAEH_JH@Z ?selectCRXTrack@LibRaw@@IAEXF@Z ?setCancelFlag@LibRaw@@UAEXXZ ?setCanonBodyFeatures@LibRaw@@IAEX_K@Z ?setLeicaBodyFeatures@LibRaw@@IAEXH@Z ?setMakeFromIndex@LibRaw@@QAEHI@Z ?setOlympusBodyFeatures@LibRaw@@IAEX_K@Z ?setPentaxBodyFeatures@LibRaw@@IAEX_K@Z ?setPhaseOneFeatures@LibRaw@@IAEX_K@Z ?setSonyBodyFeatures@LibRaw@@IAEX_K@Z ?set_dataerror_handler@LibRaw@@QAEXP6AXPAXPBDH@Z0@Z ?set_dng_host@LibRaw@@QAEXPAX@Z ?set_exifparser_handler@LibRaw@@QAEXP6AXPAXHHHI0_J@Z0@Z ?set_memerror_handler@LibRaw@@QAEXP6AXPAXPBD1@Z0@Z ?set_progress_handler@LibRaw@@QAEXP6AHPAXW4LibRaw_progress@@HH@Z0@Z ?set_rawspeed_camerafile@LibRaw@@QAEHPAD@Z ?sget2@LibRaw@@IAEGPAE@Z ?sget2Rev@LibRaw@@IAEGPAE@Z ?sget4@LibRaw@@IAEIPAE@Z ?sgetn@LibRaw@@SAIHPAE@Z ?sgetreal@LibRaw@@IAENHPAE@Z ?simple_coeff@LibRaw@@IAEXH@Z ?sinar_4shot_load_raw@LibRaw@@IAEXXZ ?size@LibRaw_bigfile_datastream@@UAE_JXZ ?size@LibRaw_buffer_datastream@@UAE_JXZ ?size@LibRaw_file_datastream@@UAE_JXZ ?size@LibRaw_windows_datastream@@UAE_JXZ ?smal_decode_segment@LibRaw@@IAEXQAY01IH@Z ?smal_v6_load_raw@LibRaw@@IAEXXZ ?smal_v9_load_raw@LibRaw@@IAEXXZ ?sony_arq_load_raw@LibRaw@@IAEXXZ ?sony_arw2_load_raw@LibRaw@@IAEXXZ ?sony_arw_load_raw@LibRaw@@IAEXXZ ?sony_decrypt@LibRaw@@IAEXPAIHHH@Z ?sony_load_raw@LibRaw@@IAEXXZ ?sraw_midpoint@LibRaw@@QAEHXZ ?strcasestr@LibRaw@@KAPADPADPBD@Z ?stread@LibRaw@@KAHPADIPAVLibRaw_abstract_datastream@@@Z ?strerror@LibRaw@@SAPBDH@Z ?stretch@LibRaw@@IAEXXZ ?strnlen@LibRaw@@KAIPBDI@Z ?strprogress@LibRaw@@SAPBDW4LibRaw_progress@@@Z ?subtract@LibRaw@@IAEXPBD@Z ?subtract_black@LibRaw@@QAEHXZ ?subtract_black_internal@LibRaw@@QAEHXZ ?swap@?$unique_ptr@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@U?$default_delete@V?$basic_streambuf@DU?$char_traits@D@std@@@std@@@2@@std@@QAEXAAV12@@Z ?tagtype_dataunit_bytes@LibRaw@@1Vlibraw_static_table_t@@A ?tell@LibRaw_bigfile_datastream@@UAE_JXZ ?tell@LibRaw_buffer_datastream@@UAE_JXZ ?tell@LibRaw_file_datastream@@UAE_JXZ ?thumbOK@LibRaw@@QAEH_J@Z ?tiff_get@LibRaw@@IAEXIPAI000@Z ?tiff_head@LibRaw@@IAEXPAUtiff_hdr@@H@Z ?tiff_set@LibRaw@@IAEXPAUtiff_hdr@@PAGGGHH@Z ?tiff_sget@LibRaw@@IAEFIPAEIPA_JPAI212PAH@Z ?trimSpaces@LibRaw@@KAXPAD@Z ?try_dngsdk@LibRaw@@IAEHXZ ?try_rawspeed@LibRaw@@IAEHXZ ?unlock@LibRaw_abstract_datastream@@UAEXXZ ?unpack@LibRaw@@QAEHXZ ?unpack_function_name@LibRaw@@QAEPBDXZ ?unpack_thumb@LibRaw@@QAEHXZ ?unpacked_load_raw@LibRaw@@IAEXXZ ?unpacked_load_raw_FujiDBP@LibRaw@@IAEXXZ ?unpacked_load_raw_fuji_f700s20@LibRaw@@IAEXXZ ?unpacked_load_raw_reversed@LibRaw@@IAEXXZ ?valid@LibRaw_bigfile_datastream@@UAEHXZ ?valid@LibRaw_buffer_datastream@@UAEHXZ ?valid@LibRaw_file_datastream@@UAEHXZ ?valid_for_dngsdk@LibRaw@@IAEHXZ ?vc5_dng_load_raw_placeholder@LibRaw@@IAEXXZ ?version@LibRaw@@SAPBDXZ ?versionNumber@LibRaw@@SAHXZ ?vng_interpolate@LibRaw@@IAEXXZ ?wavelet_denoise@LibRaw@@IAEXXZ ?wfname@LibRaw_abstract_datastream@@UAEPB_WXZ ?wfname@LibRaw_bigfile_datastream@@UAEPB_WXZ ?wfname@LibRaw_file_datastream@@UAEPB_WXZ ?write_ppm_tiff@LibRaw@@IAEXXZ ?x3f_dpq_interpolate_af@LibRaw@@IAEXHHH@Z ?x3f_dpq_interpolate_af_sd@LibRaw@@IAEXHHHHHHH@Z ?x3f_dpq_interpolate_rg@LibRaw@@IAEXXZ ?x3f_load_raw@LibRaw@@IAEXXZ ?x3f_thumb_loader@LibRaw@@IAEXXZ ?x3f_thumb_size@LibRaw@@IAE_JXZ ?xtrans_decode_block@LibRaw@@IAEXPAUfuji_compressed_block@@PBUfuji_compressed_params@@H@Z ?xtrans_interpolate@LibRaw@@IAEXH@Z default_data_callback default_memory_callback libraw_COLOR libraw_adjust_sizes_info_only libraw_cameraCount libraw_cameraList libraw_capabilities libraw_close libraw_dcraw_clear_mem libraw_dcraw_make_mem_image libraw_dcraw_make_mem_thumb libraw_dcraw_ppm_tiff_writer libraw_dcraw_process libraw_dcraw_thumb_writer libraw_free_image libraw_get_cam_mul libraw_get_color_maximum libraw_get_decoder_info libraw_get_iheight libraw_get_imgother libraw_get_iparams libraw_get_iwidth libraw_get_lensinfo libraw_get_pre_mul libraw_get_raw_height libraw_get_raw_width libraw_get_rgb_cam libraw_init libraw_open_buffer libraw_open_file libraw_open_file_ex libraw_open_wfile libraw_open_wfile_ex libraw_raw2image libraw_recycle libraw_recycle_datastream libraw_set_bright libraw_set_dataerror_handler libraw_set_demosaic libraw_set_exifparser_handler libraw_set_fbdd_noiserd libraw_set_gamma libraw_set_highlight libraw_set_memerror_handler libraw_set_no_auto_bright libraw_set_output_bps libraw_set_output_color libraw_set_output_tif libraw_set_progress_handler libraw_set_user_mul libraw_strerror libraw_strprogress libraw_subtract_black libraw_unpack libraw_unpack_function_name libraw_unpack_thumb libraw_version libraw_versionNumber

Name

.text

Size

677KB

Virtual Size

677KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

226KB

Virtual Size

225KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

269KB

Virtual Size

273KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

388B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

nas32.dll

IMPHASH c09772544c19d690442a3f7954078cd9
SHA256 2716e0a539edcc651a598866d0a5570ffeba68b6ac3bc97f64af3915a28a93ac
MD5 4160e07f149c196d69317769abd1d76c
SHA1 209f6a14549ee83d000884d1400cf4e05c5d2173
SHA512 e4743d472d471db210089d4f7d4df8cee86e600ce3b1deb4e3dd7ac5be024b7683850955141643afdee6c4c7e458013fe33072da31b993b839bacd9c735b06bc
SSDEEP 12288:jN4SqDhQ/pCOSe8dFc1ufc8L2Ex4sluBnzQGNI2tD//TPNEUtPf:jN4Hyn1uk8qsuCIDHTztPf
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

ff:b4:de:23:b8:37:88:3c:26:b9:dd:ea:03:7a:d7:1f:67:b1:d9:9d:6f:42:7e:36:0e:35:61:1d:dc:34:42:44

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

79:4c:77:51:68:44:4a:c8:0f:02:e7:f4:eb:ec:22:5e:27:a5:fe:b2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

247892

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

\\vmware-host\Shared Folders\imgs\nas32.pdb

Name

.text

Size

312KB

Virtual Size

311KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

130KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.voltbl

Size

512B

Virtual Size

137B

Characteristics

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

nas64.dll

IMPHASH 87b12ced34dd62d8eca9e2880b38b414
SHA256 4826cbd23f452ce8bb0d9364f9c3ed7e5058d8c3a700e3af14d0571f7b0f3ff6
MD5 d04d8fd719535aeed4123e622df75112
SHA1 e6885f37362fdf6746462e1e6050df87313fa7e5
SHA512 4817869e2be599d966617818d885b8fe6ce4fd765f7e112d715a60f13cbc8f14992b7b3f440c3ba597dd9e5480c21a37c913ac7181c5cff9bc6ce5ce254e0a6d
SSDEEP 12288:cZOLrAhLHl5EAaU7IQGNI2tDUyTMEwyrg:cZOLr2HlyMoCIDDTXrg
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

b5:bb:a7:dd:ac:53:38:9b:dc:a3:59:46:d5:b0:05:41:50:61:12:e6:9b:5a:fa:73:5a:19:1a:10:b4:20:1c:88

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

7d:15:3d:14:b0:34:78:eb:96:29:fd:06:71:55:a7:b1:32:6d:31:ea

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Mar 14, 2023

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

250312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

\\vmware-host\Shared Folders\imgs\nas64.pdb

Name

.text

Size

308KB

Virtual Size

308KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

147KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

99B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

vmfs_recovery.exe

IMPHASH bbf66a06563977faab758074644d12ea
SHA256 503a9c2557d33440ba13f53324811292f15d5435bdaa30d310e45e2d803b0589
MD5 139144b5237f15819306e4a8e2b37082
SHA1 17a081fe65e796ad6094ed6c240a5dfe53cbcdc3
SHA512 77cc6a01deaa904c68aed10be7c7da2831316172671f6801cf17e50e98239ff0605641d48720006d13f28d717f1eccc972d13452ddb577ea45155d0da25915f9
SSDEEP 393216:zmx1QYqjU4E3nBl5Zc7QENGruentUnMrU3ZCsEFq/gqXMBjTxvYKQ/8OyLno5XuK:o1xq8yCsEFOV+XvbVWAOQ75RwG+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

88:82:16:ca:0e:bd:ff:0b:db:b8:ee:45:97:8b:2e:0b:be:98:c1:b3:5b:f1:7c:44:73:0d:b4:9a:26:fc:f4:91

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Jun 4, 2024

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

f2:c6:bc:56:24:f9:46:f5:69:4e:d4:17:48:17:8e:66:ed:47:e0:ae

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Jun 4, 2024

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

5

Entry point

23577157

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopyInd VariantCopy VariantClear VariantInit GetErrorInfo VariantInit SysFreeString

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey SetSecurityDescriptorSacl SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl ReportEventW RegisterEventSourceW RegSetValueExW RegQueryValueExA RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExA RegOpenKeyExW RegOpenKeyW RegFlushKey RegEnumValueA RegEnumValueW RegEnumKeyExW RegDeleteValueA RegDeleteValueW RegCreateKeyExW RegCloseKey OpenThreadToken OpenProcessToken LookupPrivilegeValueW LookupPrivilegeNameW LookupAccountSidW IsValidSid InitiateSystemShutdownW InitializeSecurityDescriptor InitializeAcl GetTokenInformation GetSecurityDescriptorOwner GetSecurityDescriptorLength GetSecurityDescriptorGroup GetSecurityDescriptorControl GetLengthSid FreeSid EqualSid DeregisterEventSource CopySid AllocateAndInitializeSid AdjustTokenPrivileges AddAccessAllowedAce ConvertStringSidToSidW CryptGenRandom CryptGenKey CryptDeriveKey CryptGetKeyParam CryptSetKeyParam CryptSetProvParam CryptGetProvParam CryptDestroyHash CryptSignHashW CryptGetHashParam CryptSetHashParam CryptVerifySignatureW CryptHashData CryptCreateHash CryptImportKey CryptExportKey CryptReleaseContext CryptDestroyKey CryptGetUserKey CryptContextAddRef CryptAcquireContextW CryptDuplicateKey CryptEncrypt CryptDecrypt StartServiceW QueryServiceStatus QueryServiceConfigW OpenServiceW OpenSCManagerW DeleteService CreateServiceW ControlService CloseServiceHandle SetEntriesInAclW LsaNtStatusToWinError

user32

MessageBoxA CharNextW LoadStringW SetClassLongW GetClassLongW SetWindowLongW GetWindowLongW CreateWindowExW wsprintfW keybd_event WindowFromPoint WaitMessage ValidateRect UpdateWindow UnregisterClassW UnionRect UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenuEx TrackPopupMenu ToAscii SystemParametersInfoW SubtractRect ShowWindowAsync ShowWindow ShowScrollBar ShowOwnedPopups ShowCaret SetWindowRgn SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRectEmpty SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursorPos SetCursor SetClipboardData SetCaretPos SetCapture SetActiveWindow SendNotifyMessageW SendMessageTimeoutW SendMessageA SendMessageW ScrollWindow ScrollDC ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PtInRect PostQuitMessage PostMessageW PeekMessageA PeekMessageW OpenClipboard OffsetRect OemToCharA NotifyWinEvent MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxA MessageBoxW MessageBeep MapWindowPoints MapVirtualKeyW LockWindowUpdate LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsRectEmpty IsMenu IsIconic IsDialogMessageA IsDialogMessageW IsClipboardFormatAvailable IsChild InvertRect InvalidateRect IntersectRect InsertMenuItemA InsertMenuItemW InsertMenuW InflateRect HideCaret GetWindowThreadProcessId GetWindowTextLengthW GetWindowTextW GetWindowRect GetWindowPlacement GetWindowDC GetUpdateRect GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetScrollBarInfo GetPropW GetParent GetWindow GetMessagePos GetMessageExtraInfo GetMessageW GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenuDefaultItem GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetGuiResources GetForegroundWindow GetFocus GetDoubleClickTime GetDlgItem GetDlgCtrlID GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardFormatNameW GetClipboardData GetClientRect GetClassNameW GetClassInfoExW GetClassInfoW GetCapture GetAsyncKeyState GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EqualRect EnumWindows EnumThreadWindows EnumClipboardFormats EnumChildWindows EndPaint EndMenu EndDeferWindowPos EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextExW DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DrawCaption DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DestroyCaret DeleteMenu DeferWindowPos DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIconIndirect CreateIcon CreateCaret CountClipboardFormats CopyImage CloseClipboard ClipCursor ClientToScreen ChildWindowFromPointEx ChildWindowFromPoint CheckMenuItem CharUpperBuffW CharUpperW CharNextW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BringWindowToTop BeginPaint BeginDeferWindowPos CharLowerBuffA CharLowerA CharUpperBuffA CharUpperA AdjustWindowRectEx ActivateKeyboardLayout EnumDisplayMonitors GetMonitorInfoW MonitorFromPoint MonitorFromWindow GetProcessWindowStation GetUserObjectInformationW CharUpperBuffW MessageBoxW GetProcessWindowStation GetUserObjectInformationW

kernel32

Sleep VirtualFree VirtualAlloc lstrlenW VirtualQuery QueryPerformanceCounter GetTickCount GetSystemInfo GetVersion CompareStringW IsDBCSLeadByteEx IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetConsoleOutputCP GetConsoleCP GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwind RaiseException ExitProcess ExitThread SwitchToThread GetCurrentThreadId CreateThread DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose SetCurrentDirectoryW GetCurrentDirectoryW WriteFile SetFilePointer SetEndOfFile ReadFile GetFileType GetFileSize CreateFileW GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue LocalFree LocalAlloc GetModuleHandleW FreeLibrary lstrlenA lstrlenW lstrcpyA lstrcpyW lstrcmpiA lstrcmpiW lstrcmpW lstrcatA lstrcatW WritePrivateProfileStringW WriteFile WinExec WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx WaitForMultipleObjects VirtualUnlock VirtualQueryEx VirtualQuery VirtualProtect VirtualFree VirtualAlloc UnmapViewOfFile TlsSetValue TlsGetValue TlsAlloc TerminateThread TerminateProcess SystemTimeToFileTime SwitchToThread SuspendThread Sleep SizeofResource SetThreadPriorityBoost SetThreadPriority SetThreadLocale SetLastError SetHandleInformation SetFileTime SetFilePointerEx SetFilePointer SetFileAttributesW SetEvent SetErrorMode SetEndOfFile SetDllDirectoryW SetConsoleTitleW SetConsoleScreenBufferSize SetConsoleOutputCP SetConsoleCP ResumeThread ResetEvent RemoveDirectoryW ReleaseSemaphore ReleaseMutex ReadFile RaiseException QueryPerformanceFrequency QueryPerformanceCounter QueryDosDeviceW IsDebuggerPresent OutputDebugStringW OpenProcess OpenFileMappingW OpenEventW MultiByteToWideChar MulDiv MoveFileExW MoveFileW MapViewOfFile LockResource LocalFree LocalFileTimeToFileTime LoadResource LoadLibraryA LoadLibraryW LeaveCriticalSection LCMapStringW IsValidLocale IsValidCodePage IsBadReadPtr InitializeCriticalSection HeapFree HeapDestroy HeapCreate HeapAlloc GlobalUnlock GlobalSize GlobalMemoryStatusEx GlobalHandle GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetWindowsDirectoryW GetVolumeInformationW GetVersionExW GetVersion GetTimeZoneInformation GetTickCount GetThreadPriorityBoost GetThreadPriority GetThreadLocale GetTempPathW GetTempFileNameW GetSystemTime GetSystemInfo GetSystemDirectoryW GetStringTypeExA GetStringTypeExW GetStdHandle GetProcessHeap GetProcAddress GetPrivateProfileStringW GetOverlappedResult GetModuleHandleA GetModuleHandleW GetModuleFileNameW GetLogicalDrives GetLogicalDriveStringsW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileType GetFileSize GetFileInformationByHandle GetFileAttributesExW GetFileAttributesW GetExitCodeThread GetExitCodeProcess GetEnvironmentVariableW GetDriveTypeA GetDriveTypeW GetDiskFreeSpaceExW GetDiskFreeSpaceA GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCurrentDirectoryW GetComputerNameA GetComputerNameW GetCommandLineW GetCPInfoExW GetCPInfo GetACP FreeResource InterlockedIncrement InterlockedExchange InterlockedDecrement InterlockedCompareExchange FreeLibrary FreeConsole FormatMessageW FlushInstructionCache FlushFileBuffers FindResourceW FindNextFileA FindNextFileW FindFirstFileA FindFirstFileW FindClose FileTimeToSystemTime FileTimeToLocalFileTime FileTimeToDosDateTime ExpandEnvironmentStringsW ExitThread EnumSystemLocalesW EnumCalendarInfoW EnterCriticalSection DeviceIoControl DeleteFileW DeleteCriticalSection CreateThread CreateSemaphoreW CreateProcessW CreatePipe CreateMutexW CreateMailslotW CreateFileMappingA CreateFileMappingW CreateFileA CreateFileW CreateEventW CreateDirectoryW CopyFileW CompareStringA CompareStringW CompareFileTime CloseHandle AllocConsole Sleep GetVersionExW VerSetConditionMask VerifyVersionInfoW GetConsoleWindow AttachConsole GetProcessHandleCount GetProcessIoCounters GetFileSizeEx ReadFile VirtualQuery GetSystemTimeAsFileTime GetModuleHandleA CreateEventA GetModuleFileNameW LoadLibraryA TerminateProcess GetCurrentProcess CreateToolhelp32Snapshot Thread32First GetCurrentProcessId GetCurrentThreadId OpenThread Thread32Next CloseHandle SuspendThread ResumeThread WriteProcessMemory GetSystemInfo VirtualAlloc VirtualProtect VirtualFree GetProcessAffinityMask SetProcessAffinityMask GetCurrentThread SetThreadAffinityMask Sleep FreeLibrary GetTickCount SystemTimeToFileTime FileTimeToSystemTime GlobalFree LocalAlloc LocalFree GetProcAddress ExitProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetModuleHandleW LoadResource MultiByteToWideChar FindResourceExW FindResourceExA WideCharToMultiByte GetThreadLocale GetUserDefaultLCID GetSystemDefaultLCID EnumResourceNamesA EnumResourceNamesW EnumResourceLanguagesA EnumResourceLanguagesW EnumResourceTypesA EnumResourceTypesW CreateFileW LoadLibraryW GetLastError FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetCommandLineA RaiseException RtlUnwind HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter HeapReAlloc GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize WriteFile SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount SetStdHandle LocalAlloc LocalFree GetModuleFileNameW GetProcessAffinityMask SetProcessAffinityMask SetThreadAffinityMask Sleep ExitProcess FreeLibrary LoadLibraryA GetModuleHandleA GetProcAddress

wintrust

WinVerifyTrust

gdi32

WidenPath UnrealizeObject TextOutW StrokePath StrokeAndFillPath StretchDIBits StretchBlt StartPage StartDocW SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextCharacterExtra SetTextColor SetTextAlign SetStretchBltMode SetROP2 SetPixelV SetPixel SetPaletteEntries SetMapMode SetGraphicsMode SetEnhMetaFileBits SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetArcDirection SetAbortProc SelectPalette SelectObject SelectClipRgn SelectClipPath SaveDC RoundRect RestoreDC ResizePalette Rectangle RectVisible RealizePalette PtVisible Polyline Polygon PolyBezierTo PolyBezier PlayEnhMetaFile Pie PathToRegion PatBlt OffsetRgn OffsetClipRgn MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWorldTransform GetWindowOrgEx GetWinMetaFileBits GetViewportOrgEx GetTextMetricsA GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentExPointA GetTextExtentExPointW GetTextColor GetTextCharacterExtra GetTextAlign GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectA GetObjectW GetNearestPaletteIndex GetMapMode GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetCurrentPositionEx GetCurrentObject GetClipRgn GetClipBox GetCharABCWidthsA GetCharABCWidthsW GetBrushOrgEx GetBkMode GetBkColor GetBitmapBits GdiFlush FrameRgn ExtTextOutW ExtSelectClipRgn ExtFloodFill ExtCreatePen ExcludeClipRect EnumFontsW EnumFontFamiliesExW EnumEnhMetaFile EndPath EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRoundRectRgn CreateRectRgnIndirect CreateRectRgn CreatePolygonRgn CreatePenIndirect CreatePen CreatePatternBrush CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateEnhMetaFileW CreateEllipticRgnIndirect CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW CombineRgn CloseEnhMetaFile Chord BitBlt BeginPath ArcTo Arc AngleArc GetRandomRgn

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

CoCreateGuid CreateStreamOnHGlobal ReleaseStgMedium OleGetClipboard OleSetClipboard DoDragDrop RevokeDragDrop RegisterDragDrop OleUninitialize OleInitialize CreateDataAdviseHolder CoTaskMemFree CoTaskMemAlloc StringFromCLSID CoCreateInstance CoDisconnectObject CoUninitialize CoInitialize IsEqualGUID CoCreateGuid CLSIDFromString IsEqualGUID

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Copy ImageList_GetIcon ImageList_Remove ImageList_DrawIndirect ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_SetOverlayImage ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls

shell32

SHGetFileInfoA SHGetFileInfoW SHFileOperationA ShellExecuteExA ShellExecuteExW ShellExecuteW Shell_NotifyIconW SHAppBarMessage DragQueryPoint DragQueryFileA DragQueryFileW DragFinish DragAcceptFiles ILFree SHGetSpecialFolderLocation SHGetFolderLocation SHGetPathFromIDListW SHGetMalloc SHGetDesktopFolder SHGetDataFromIDListA SHGetDataFromIDListW SHBrowseForFolderW SHFileOperationW

wininet

InternetReadFile InternetOpenUrlA InternetOpenUrlW InternetOpenA InternetOpenW InternetCloseHandle HttpQueryInfoW

wsock32

__WSAFDIsSet WSACleanup WSAStartup WSASetLastError WSAGetLastError gethostbyname socket shutdown setsockopt sendto send select recvfrom recv ntohs ioctlsocket inet_ntoa inet_addr htons getsockopt getsockname getpeername connect closesocket bind

msvcrt

isxdigit isupper isspace ispunct isprint islower isgraph isdigit iscntrl isalpha isalnum toupper tolower strchr strlen strncmp memset memmove memcpy memcmp

comdlg32

GetSaveFileNameW GetOpenFileNameW

winspool.drv

OpenPrinterW EnumPrintersW DocumentPropertiesW ClosePrinter GetDefaultPrinterW

oleacc

AccessibleObjectFromWindow LresultFromObject

winmm

timeGetTime timeEndPeriod timeBeginPeriod PlaySoundW

gdiplus

GdiplusShutdown GdiplusStartup GdipDrawCachedBitmap GdipSetStringFormatMeasurableCharacterRanges GdipGetStringFormatMeasurableCharacterRangeCount GdipGetStringFormatDigitSubstitution GdipSetStringFormatDigitSubstitution GdipGetStringFormatTabStopCount GdipGetStringFormatTabStops GdipSetStringFormatTabStops GdipGetStringFormatHotkeyPrefix GdipSetStringFormatHotkeyPrefix GdipGetStringFormatTrimming GdipSetStringFormatTrimming GdipGetStringFormatLineAlign GdipSetStringFormatLineAlign GdipGetStringFormatAlign GdipSetStringFormatAlign GdipGetStringFormatFlags GdipSetStringFormatFlags GdipCloneStringFormat GdipDeleteStringFormat GdipCreateStringFormat GdipMeasureDriverString GdipDrawDriverString GdipMeasureCharacterRanges GdipMeasureString GdipDrawString GdipComment GdipGetImageEncoders GdipGetImageEncodersSize GdipEndContainer GdipBeginContainer2 GdipBeginContainerI GdipBeginContainer GdipRestoreGraphics GdipSaveGraphics GdipIsVisibleRectI GdipIsVisibleRect GdipIsVisiblePointI GdipIsVisiblePoint GdipIsVisibleClipEmpty GdipGetVisibleClipBoundsI GdipGetVisibleClipBounds GdipIsClipEmpty GdipGetClipBoundsI GdipGetClipBounds GdipGetClip GdipTranslateClipI GdipTranslateClip GdipResetClip GdipSetClipHrgn GdipSetClipRegion GdipSetClipPath GdipSetClipRectI GdipSetClipRect GdipSetClipGraphics GdipEnumerateMetafileSrcRectDestPointsI GdipEnumerateMetafileSrcRectDestPoints GdipEnumerateMetafileSrcRectDestRectI GdipEnumerateMetafileSrcRectDestRect GdipEnumerateMetafileSrcRectDestPointI GdipEnumerateMetafileSrcRectDestPoint GdipEnumerateMetafileDestPointsI GdipEnumerateMetafileDestPoints GdipEnumerateMetafileDestRectI GdipEnumerateMetafileDestRect GdipEnumerateMetafileDestPointI GdipEnumerateMetafileDestPoint GdipDrawImagePointsRectI GdipDrawImagePointsRect GdipDrawImageRectRectI GdipDrawImageRectRect GdipDrawImagePointRectI GdipDrawImagePointRect GdipDrawImagePointsI GdipDrawImagePoints GdipDrawImageRectI GdipDrawImageRect GdipDrawImageI GdipDrawImage GdipFillRegion GdipFillClosedCurve2I GdipFillClosedCurve2 GdipFillClosedCurveI GdipFillClosedCurve GdipFillPath GdipFillPieI GdipFillPie GdipFillEllipseI GdipFillEllipse GdipFillPolygonI GdipFillPolygon GdipFillRectanglesI GdipFillRectangles GdipFillRectangleI GdipFillRectangle GdipGraphicsClear GdipDrawClosedCurve2I GdipDrawClosedCurve2 GdipDrawClosedCurveI GdipDrawClosedCurve GdipDrawCurve3I GdipDrawCurve3 GdipDrawCurve2I GdipDrawCurve2 GdipDrawCurveI GdipDrawCurve GdipDrawPath GdipDrawPolygonI GdipDrawPolygon GdipDrawPieI GdipDrawPie GdipDrawEllipseI GdipDrawEllipse GdipDrawRectanglesI GdipDrawRectangles GdipDrawRectangleI GdipDrawRectangle GdipDrawBeziersI GdipDrawBeziers GdipDrawBezierI GdipDrawBezier GdipDrawArcI GdipDrawArc GdipDrawLinesI GdipDrawLines GdipDrawLineI GdipDrawLine GdipGetNearestColor GdipTransformPointsI GdipTransformPoints GdipGetDpiY GdipGetDpiX GdipSetPageScale GdipSetPageUnit GdipGetPageScale GdipGetPageUnit GdipGetWorldTransform GdipRotateWorldTransform GdipScaleWorldTransform GdipTranslateWorldTransform GdipMultiplyWorldTransform GdipResetWorldTransform GdipSetWorldTransform GdipGetInterpolationMode GdipSetInterpolationMode GdipGetTextContrast GdipSetTextContrast GdipGetTextRenderingHint GdipSetTextRenderingHint GdipGetPixelOffsetMode GdipSetPixelOffsetMode GdipGetSmoothingMode GdipSetSmoothingMode GdipGetCompositingQuality GdipSetCompositingQuality GdipGetRenderingOrigin GdipSetRenderingOrigin GdipGetCompositingMode GdipSetCompositingMode GdipReleaseDC GdipGetDC GdipDeleteGraphics GdipCreateFromHDC GdipFlush GdipGetImageAttributesAdjustedPalette GdipSetImageAttributesWrapMode GdipSetImageAttributesRemapTable GdipSetImageAttributesOutputChannelColorProfile GdipSetImageAttributesOutputChannel GdipSetImageAttributesColorKeys GdipSetImageAttributesNoOp GdipSetImageAttributesGamma GdipSetImageAttributesThreshold GdipSetImageAttributesColorMatrix GdipResetImageAttributes GdipSetImageAttributesToIdentity GdipDisposeImageAttributes GdipCloneImageAttributes GdipCreateImageAttributes GdipSetPropertyItem GdipRemovePropertyItem GdipGetAllPropertyItems GdipGetPropertySize GdipGetPropertyItem GdipGetPropertyItemSize GdipGetPropertyIdList GdipGetPropertyCount GdipGetImagePaletteSize GdipSetImagePalette GdipGetImagePalette GdipImageRotateFlip GdipImageSelectActiveFrame GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipImageGetFrameDimensionsCount GdipGetEncoderParameterList GdipGetEncoderParameterListSize GdipGetImageThumbnail GdipGetImagePixelFormat GdipGetImageRawFormat GdipGetImageFlags GdipGetImageVerticalResolution GdipGetImageHorizontalResolution GdipGetImageHeight GdipGetImageWidth GdipGetImageType GdipGetImageDimension GdipGetImageBounds GdipSaveAddImage GdipSaveAdd GdipSaveImageToStream GdipSaveImageToFile GdipDisposeImage GdipCloneImage GdipGetCustomLineCapWidthScale GdipSetCustomLineCapWidthScale GdipGetCustomLineCapBaseInset GdipSetCustomLineCapBaseInset GdipGetCustomLineCapBaseCap GdipSetCustomLineCapBaseCap GdipGetCustomLineCapStrokeJoin GdipSetCustomLineCapStrokeJoin GdipGetCustomLineCapStrokeCaps GdipSetCustomLineCapStrokeCaps GdipCloneCustomLineCap GdipDeleteCustomLineCap GdipGetPenCompoundArray GdipSetPenCompoundArray GdipGetPenCompoundCount GdipGetPenDashArray GdipSetPenDashArray GdipGetPenDashCount GdipSetPenDashOffset GdipGetPenDashOffset GdipSetPenDashStyle GdipGetPenDashStyle GdipGetPenFillType GdipGetPenBrushFill GdipSetPenBrushFill GdipGetPenColor GdipSetPenColor GdipRotatePenTransform GdipScalePenTransform GdipTranslatePenTransform GdipMultiplyPenTransform GdipResetPenTransform GdipGetPenTransform GdipSetPenTransform GdipGetPenMode GdipSetPenMode GdipGetPenMiterLimit GdipSetPenMiterLimit GdipGetPenCustomEndCap GdipSetPenCustomEndCap GdipGetPenCustomStartCap GdipSetPenCustomStartCap GdipGetPenLineJoin GdipSetPenLineJoin GdipGetPenDashCap197819 GdipGetPenEndCap GdipGetPenStartCap GdipSetPenDashCap197819 GdipSetPenEndCap GdipSetPenStartCap GdipSetPenLineCap197819 GdipGetPenWidth GdipSetPenWidth GdipDeletePen GdipClonePen GdipCreatePen1 GdipRotateLineTransform GdipScaleLineTransform GdipTranslateLineTransform GdipMultiplyLineTransform GdipResetLineTransform GdipSetLineTransform GdipGetLineTransform GdipGetLineWrapMode GdipSetLineWrapMode GdipSetLineLinearBlend GdipSetLineSigmaBlend GdipSetLinePresetBlend GdipGetLinePresetBlend GdipGetLinePresetBlendCount GdipSetLineBlend GdipGetLineBlend GdipGetLineBlendCount GdipGetLineGammaCorrection GdipSetLineGammaCorrection GdipGetLineRectI GdipGetLineRect GdipGetLineColors GdipSetLineColors GdipGetSolidFillColor GdipSetSolidFillColor GdipCreateSolidFill GdipGetTextureImage GdipGetTextureWrapMode GdipSetTextureWrapMode GdipRotateTextureTransform GdipScaleTextureTransform GdipTranslateTextureTransform GdipMultiplyTextureTransform GdipResetTextureTransform GdipSetTextureTransform GdipGetTextureTransform GdipCreateTexture GdipGetHatchBackgroundColor GdipGetHatchForegroundColor GdipGetHatchStyle GdipCreateHatchBrush GdipGetBrushType GdipDeleteBrush GdipCloneBrush GdipGetRegionScansI GdipGetRegionScans GdipGetRegionScansCount GdipIsVisibleRegionRectI GdipIsVisibleRegionRect GdipIsVisibleRegionPointI GdipIsVisibleRegionPoint GdipGetRegionData GdipGetRegionDataSize GdipIsEqualRegion GdipIsInfiniteRegion GdipIsEmptyRegion GdipGetRegionHRgn GdipGetRegionBoundsI GdipGetRegionBounds GdipTransformRegion GdipTranslateRegionI GdipTranslateRegion GdipCombineRegionRegion GdipCombineRegionPath GdipCombineRegionRectI GdipCombineRegionRect GdipSetEmpty GdipSetInfinite GdipDeleteRegion GdipCloneRegion GdipCreateRegion GdipIsMatrixEqual GdipIsMatrixIdentity GdipIsMatrixInvertible GdipGetMatrixElements GdipVectorTransformMatrixPointsI GdipVectorTransformMatrixPoints GdipTransformMatrixPointsI GdipTransformMatrixPoints GdipInvertMatrix GdipShearMatrix GdipRotateMatrix GdipScaleMatrix GdipTranslateMatrix GdipMultiplyMatrix GdipSetMatrixElements GdipDeleteMatrix GdipCloneMatrix GdipCreateMatrix GdipIsOutlineVisiblePathPointI GdipIsOutlineVisiblePathPoint GdipIsVisiblePathPointI GdipIsVisiblePathPoint GdipGetPathWorldBoundsI GdipGetPathWorldBounds GdipTransformPath GdipWarpPath GdipWidenPath GdipWindingModeOutline GdipFlattenPath GdipAddPathPolygonI GdipAddPathPieI GdipAddPathEllipseI GdipAddPathRectanglesI GdipAddPathRectangleI GdipAddPathClosedCurve2I GdipAddPathClosedCurveI GdipAddPathCurve3I GdipAddPathCurve2I GdipAddPathCurveI GdipAddPathBeziersI GdipAddPathBezierI GdipAddPathArcI GdipAddPathLine2I GdipAddPathLineI GdipAddPathStringI GdipAddPathString GdipAddPathPath GdipAddPathPolygon GdipAddPathPie GdipAddPathEllipse GdipAddPathRectangles GdipAddPathRectangle GdipAddPathClosedCurve2 GdipAddPathClosedCurve GdipAddPathCurve3 GdipAddPathCurve2 GdipAddPathCurve GdipAddPathBeziers GdipAddPathBezier GdipAddPathArc GdipAddPathLine2 GdipAddPathLine GdipGetPathLastPoint GdipReversePath GdipClearPathMarkers GdipSetPathMarker GdipClosePathFigures GdipClosePathFigure GdipStartPathFigure GdipGetPathData GdipSetPathFillMode GdipGetPathFillMode GdipGetPathPointsI GdipGetPathPoints GdipGetPathTypes GdipGetPointCount GdipResetPath GdipDeletePath GdipClonePath GdipCreatePath GdipFree GdipAlloc GdiplusShutdown GdiplusStartup

fat12

f7 f6 f5 f4 f3 f2 f1

crypt32

CertSetCertificateContextProperty CertGetCertificateContextProperty CertOpenStore CertDuplicateCertificateContext CertEnumCertificatesInStore CertDeleteCertificateFromStore CertFreeCertificateContext CertAddEncodedCertificateToStore CertCloseStore CertOpenSystemStoreW

netapi32

NetShareDel NetShareAdd

setupapi

SetupDiGetDeviceInstanceIdW SetupDiGetActualSectionToInstallW SetupDiSetClassInstallParamsW SetupDiGetDeviceInstallParamsW SetupDiSetDeviceRegistryPropertyW SetupDiGetDeviceRegistryPropertyW SetupDiCallClassInstaller SetupDiGetINFClassW SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiCreateDeviceInfoW SetupDiCreateDeviceInfoList SetupGetSourceInfoW SetupGetSourceFileLocationW SetupGetStringFieldW SetupGetIntField SetupIterateCabinetW SetupFindNextLine SetupFindFirstLineW SetupCloseInfFile SetupOpenInfFileW

shlwapi

PathIsNetworkPathW

wtsapi32

WTSSendMessageW

��ٽ/k��M��p��`�� w�>?� ��/��.ˣkB!��M#��pjG�X��Cc3R��X�$*â��`�+�i)�� 1a3$J�y�r-Ŵk��Ӈ�jT鸴{��k'�vtY�J}��0:2��d��|7��=/Z�eJd��7d�|�ygX!��IMFeh}b ��M!�l�%~��m�B11V�Qd�ݝ M��$T��k��dC_|/-��Q�֟A8y�f9Zg��A��<�e8ɔ�V/#�qǈ��{��˝�� 'ޒ��`4��F��2�rVV@< �T�f��Esr<��u��1�K��[�͵��MR��/2?Ո��X��N��$�9M"��zh�f�w��e?��kCr�p��:Mr�W��i�WpBt�� E/��X�N�`�)p��#(} �=��7E9^�xO��X^x��˔��mJ��=�%�9��?P��+��0�b8�/�H_<ɵ�0��דc^�sx�e��U��3��>z`n ��{3,[�7��'^r��F�5��aJMn��/�� `�! ƟB�ծ�{l�� 1��]#��$�݇,��q8�r�4�Qk�n�^��=��:S��J�#ދ[S�%<��G�h�D ��!�r��YM9b��6��v!]�>�J,�>�� P>RsZ[��aN�f[�4�E-��R��r�m�� ^�0.Č.�^��,!:�G;��e� ��TA,�(��P��C��W��թ�A��۩�D%b�cu�Wغ*DXh9kC�]�u�v|��X�!K�D�Q��9�,��9��_Ԑ�C�BI�He�v4�C��`�ڄ��.��l%��d�K��m��rf|��,�Po,_2AF��ڻkX+9��_8�tv�l��H�R�d�v��s�dM��Յ"e�ۥ��V8�� *�9j��;� BG�mM;�1�@��4��vձil��@�%��7ڻPa03�.��k��hGwMbQ�h��Ϯ�1�Iu&��ug��CA��X��*�� Є��(n��*��9�o�^�Z��R��ì3 4��Y9$Mk��0S� C�3q9#sM]�7� �\~�* �� !��@O3�X%词��X�4 a�~e�~�M�A��!T��b)�}v��7��KȂI+�yR�i݆��E�Ҋ�'-�wО�&=ì��\0Rк�� h��5��G�rq�`�v��=A'@�bFj��10��G��U��}��DV��:~�@�z��dX��&`�6۵z�Â��w��t�5kt8n<]�Q��!� ��g��I�R4��܊�00��_ω��nմ��C�F�(�n9��Թ�5�ĀL9��u�/��mΩ. ��(d:_�|� {�-;6_�u��[8�)��Cn��<��]BH. ��i�|o��lz��~ B�Z�!��x��ѵ0Fȿ��0�\դ�}4 ��ݰ�N�<^A^�Ê4wv��M��i�x�w��mo��-�_�w[f�Ĩ�e ��/�-A� �!��JjiR�V;tM��7�[��Q�*�~�J�,fX�z\� +Y��u��K��*�'Kv��e��{��4#��Â�ڇV��`�R��#ƆY�W��k�v��+U&ء��> 8�� F��A[��-bL�*�B��$ɼ�G?��J��P�ԆL��]��W�{VԔ|�nY��>k�&l|$�?zf�Z�4W�i4t��4#��K�a,��~��0l�[��!p[Ev��bH��!�,�a'�r~Q|B�r�|�N�1�2�%8\��Ά��^v�Yi�eF�;Z6��Px��rѵ@VC�;җ\��\�+��*�j��C��H�3�Ĳ��,��U��0y��H�n �=��%}�u<관��ֽ>k�GH�&�<E煣�5^T��)(��ɧ��K�l��!І�Gm %�b��;��s��e��N��c�jB�3vB�B|�\�1<�}uh��k��k$��9�HA/`�Q��s]��:{��@��_�A��ϵ@-@:0�ʱe�ܙ$\��+3�yiX� ��m3�E ��Ǜ�0�Hv ��+� x��iZ٥��z��T��<ߥ��}�%�_�Ã�s��7YҝF�m>~.u��r�{��L��h�7o�$4��i�&�O��Ӆ��N�pђ��;��<�C&�R�N�B�'.T�ko� 띲�>F"P��J�r�3�C�r�G��vo�mԯ��ƻ� R0�h�J��\1�� Q��ܯdW��h��E. :�odܚ*'��zBD3�/8��vd�2QS�� tYǇ��j�a��{k��`}B9��c��1!Y-�d�ܼe��}{U�A6��Kˋ��(+ٴO��>��aO-v��J 16�(P��}��L�}"��_#��bz޼��ս��V*L͎��O��rv��7>��T��k�F��.@qS��4�UtB}6U�a=te4��Nׁy��g�DJMk��B+�S�n�3��E��UnW��#\��uN�W��\z�r�ӁӉ�ޖf��Z�]�}��e!�J�<;Ilj��i)��Ok��osl| �+)��/J�°�?��n��[��q�j`<5�'X�f�u2��<O�2�FT��v�f��f.D��&�l|<�@�oW�^"Ly�B�V�Y �<�1��6�]4+=��5�5��]/��ypV�2�dU�޵�;��uXi-U(�«_2�W�%^k\?5}L��~��IƁ�̿��<\ �^->y6<�ҳ�" r��ٌ"�L��=m��#��O0��(b��7��C,�</"/��W��X

Name

.text

Size

14.3MB

Virtual Size

14.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

167KB

Virtual Size

166KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

960KB

Virtual Size

960KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

854KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

220B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

33B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vmp0

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

JCLDEBUG

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vmp1

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.vmp2

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

vmfs_recovery64.exe

IMPHASH 0b0e1f713f0c046da534a2936ac6e89f
SHA256 bdb6d948b29b0976730c6007b84beb32e17c6634d4160d1676f4404b225bcee3
MD5 3f5d00bf908c834426de1b502c61c450
SHA1 b5bfd9fb1a7d992deacbe98a6d8b1263178e1e19
SHA512 8de37c4e60eb1e32e44debf30740644c16edc4062424164345c3423216c8153e8ea3b5538d62d7a6dda9449fd0d37923ae5ace465b74f4e019bcb13124b816da
SSDEEP 393216:KzoeoRaSs3J9EfgT2XyEvH8Yy/QbWKl2vaS1k75RgWa:kZ9iCEvcYySWDvakk75RgWa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Digest

62:b1:e4:14:1e:5d:29:1e:18:98:4a:ee:ae:ac:ee:49:90:73:d8:b4:0f:b4:79:e8:d8:65:36:25:f2:04:4c:bb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Jun 4, 2024

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Digest

2d:16:0c:1f:0d:68:39:64:90:71:82:c4:75:b1:4a:76:e2:6d:ab:9c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Chains

Jun 4, 2024

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Serial Number

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=DiskInternals,O=DiskInternals,ST=Kyiv,C=UA

Serial Number

bb:5d:bb:a3:0f:17:57:1e:0c:71:50:55:b9:ce:ba:11

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 14, 2023 - Jun 13, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

2

Major OS version

5

Entry point

33920140

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopyInd VariantCopy VariantClear VariantInit GetErrorInfo VariantInit SysFreeString

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegSetValueExW RegQueryValueExA RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExA RegOpenKeyExW RegFlushKey RegEnumKeyExW RegCreateKeyExW RegCloseKey OpenThreadToken OpenProcessToken LookupAccountSidW GetTokenInformation FreeSid EqualSid AllocateAndInitializeSid ConvertStringSidToSidW CryptGenRandom CryptGenKey CryptDeriveKey CryptGetKeyParam CryptSetKeyParam CryptSetProvParam CryptGetProvParam CryptDestroyHash CryptSignHashW CryptGetHashParam CryptSetHashParam CryptVerifySignatureW CryptHashData CryptCreateHash CryptImportKey CryptExportKey CryptReleaseContext CryptDestroyKey CryptGetUserKey CryptContextAddRef CryptAcquireContextW CryptDuplicateKey CryptEncrypt CryptDecrypt

user32

MessageBoxA CharNextW LoadStringW SetClassLongPtrW GetClassLongPtrW SetWindowLongPtrW GetWindowLongPtrW CreateWindowExW wsprintfW keybd_event WindowFromPoint WaitMessage ValidateRect UpdateWindow UnregisterClassW UnionRect UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenuEx TrackPopupMenu ToAscii SystemParametersInfoW SubtractRect ShowWindowAsync ShowWindow ShowScrollBar ShowOwnedPopups ShowCaret SetWindowRgn SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRectEmpty SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursorPos SetCursor SetClipboardData SetCaretPos SetCapture SetActiveWindow SendNotifyMessageW SendMessageTimeoutW SendMessageA SendMessageW ScrollWindow ScrollDC ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PtInRect PostQuitMessage PostMessageW PeekMessageA PeekMessageW OpenClipboard OffsetRect OemToCharA NotifyWinEvent MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxA MessageBoxW MessageBeep MapWindowPoints MapVirtualKeyW LockWindowUpdate LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsRectEmpty IsMenu IsIconic IsDialogMessageA IsDialogMessageW IsClipboardFormatAvailable IsChild InvertRect InvalidateRect IntersectRect InsertMenuItemA InsertMenuItemW InsertMenuW InflateRect HideCaret GetWindowThreadProcessId GetWindowTextLengthW GetWindowTextW GetWindowRect GetWindowPlacement GetWindowDC GetUpdateRect GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetScrollBarInfo GetPropW GetParent GetWindow GetMessagePos GetMessageExtraInfo GetMessageW GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenuDefaultItem GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetGuiResources GetForegroundWindow GetFocus GetDoubleClickTime GetDlgItem GetDlgCtrlID GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardFormatNameW GetClipboardData GetClientRect GetClassNameW GetClassInfoExW GetClassInfoW GetCapture GetAsyncKeyState GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EqualRect EnumWindows EnumThreadWindows EnumClipboardFormats EnumChildWindows EndPaint EndMenu EndDeferWindowPos EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextExW DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DrawCaption DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DestroyCaret DeleteMenu DeferWindowPos DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIconIndirect CreateIcon CreateCaret CountClipboardFormats CopyImage CloseClipboard ClipCursor ClientToScreen ChildWindowFromPointEx ChildWindowFromPoint CheckMenuItem CharUpperBuffW CharUpperW CharNextW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BringWindowToTop BeginPaint BeginDeferWindowPos CharLowerBuffA CharLowerA CharUpperBuffA CharUpperA AdjustWindowRectEx ActivateKeyboardLayout EnumDisplayMonitors GetMonitorInfoW MonitorFromPoint MonitorFromWindow GetUserObjectInformationW CharUpperBuffW MessageBoxW GetProcessWindowStation GetProcessWindowStation GetUserObjectInformationW

kernel32

Sleep VirtualFree VirtualAlloc HeapFree HeapAlloc GetProcessHeap lstrlenW VirtualQuery QueryPerformanceCounter GetTickCount GetSystemInfo GetVersion CompareStringW IsDBCSLeadByteEx IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetConsoleOutputCP GetConsoleCP GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwindEx RtlUnwind RaiseException ExitProcess ExitThread SwitchToThread GetCurrentThreadId CreateThread DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose SetCurrentDirectoryW GetCurrentDirectoryW WriteFile SetFilePointer SetEndOfFile ReadFile GetFileType GetFileSize CreateFileW GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue LocalFree LocalAlloc GetModuleHandleW FreeLibrary lstrlenA lstrlenW lstrcpyA lstrcmpiA lstrcmpiW lstrcmpW lstrcatA WritePrivateProfileStringW WriteFile WinExec WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx WaitForMultipleObjects VirtualQueryEx VirtualQuery VirtualProtect VirtualFree VirtualAlloc UnmapViewOfFile TerminateThread TerminateProcess SystemTimeToFileTime SwitchToThread SuspendThread Sleep SizeofResource SetThreadPriority SetThreadLocale SetLastError SetFileTime SetFilePointerEx SetFilePointer SetFileAttributesW SetEvent SetErrorMode SetEndOfFile SetDllDirectoryW SetConsoleTitleW SetConsoleScreenBufferSize SetConsoleOutputCP SetConsoleCP ResumeThread ResetEvent RemoveDirectoryW ReleaseSemaphore ReleaseMutex ReadFile RaiseException QueryPerformanceFrequency QueryPerformanceCounter QueryDosDeviceW IsDebuggerPresent OutputDebugStringW OpenProcess OpenFileMappingW MultiByteToWideChar MulDiv MoveFileW MapViewOfFile LockResource LocalFree LocalFileTimeToFileTime LoadResource LoadLibraryA LoadLibraryW LeaveCriticalSection LCMapStringW IsValidLocale IsValidCodePage IsBadReadPtr InitializeCriticalSection HeapFree HeapDestroy HeapCreate HeapAlloc GlobalUnlock GlobalSize GlobalMemoryStatusEx GlobalHandle GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVolumeInformationW GetVersionExW GetVersion GetTimeZoneInformation GetTickCount GetThreadPriority GetThreadLocale GetTempPathW GetSystemTime GetSystemInfo GetSystemDirectoryW GetStringTypeExA GetStringTypeExW GetStdHandle GetProcAddress GetPrivateProfileStringW GetOverlappedResult GetModuleHandleA GetModuleHandleW GetModuleFileNameW GetLogicalDriveStringsW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileType GetFileSize GetFileAttributesExW GetFileAttributesW GetExitCodeThread GetExitCodeProcess GetEnvironmentVariableW GetDriveTypeA GetDriveTypeW GetDiskFreeSpaceExW GetDiskFreeSpaceA GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCurrentDirectoryW GetComputerNameA GetComputerNameW GetCommandLineW GetCPInfoExW GetCPInfo GetACP FreeResource FreeLibrary FreeConsole FormatMessageW FlushInstructionCache FlushFileBuffers FindResourceW FindNextFileA FindNextFileW FindFirstFileA FindFirstFileW FindClose FileTimeToSystemTime FileTimeToLocalFileTime FileTimeToDosDateTime ExpandEnvironmentStringsW ExitThread EnumSystemLocalesW EnumCalendarInfoW EnterCriticalSection DeviceIoControl DeleteFileW DeleteCriticalSection CreateThread CreateSemaphoreW CreateProcessW CreatePipe CreateMutexW CreateFileMappingA CreateFileMappingW CreateFileA CreateFileW CreateEventW CreateDirectoryW CompareStringA CompareStringW CompareFileTime CloseHandle AllocConsole Sleep GetVersionExW VerSetConditionMask VerifyVersionInfoW GetConsoleWindow AttachConsole GetProcessHandleCount GetProcessIoCounters GetFileSizeEx ReadFile GetSystemTimeAsFileTime GetModuleHandleA CreateEventA GetModuleFileNameW LoadLibraryA TerminateProcess GetCurrentProcess CreateToolhelp32Snapshot Thread32First GetCurrentProcessId GetCurrentThreadId OpenThread Thread32Next CloseHandle SuspendThread ResumeThread WriteProcessMemory GetSystemInfo VirtualAlloc VirtualProtect VirtualFree GetProcessAffinityMask SetProcessAffinityMask GetCurrentThread SetThreadAffinityMask Sleep FreeLibrary GetTickCount SystemTimeToFileTime FileTimeToSystemTime GlobalFree LocalAlloc LocalFree GetProcAddress ExitProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetModuleHandleW LoadResource MultiByteToWideChar FindResourceExW FindResourceExA WideCharToMultiByte GetThreadLocale GetUserDefaultLCID GetSystemDefaultLCID EnumResourceNamesA EnumResourceNamesW EnumResourceLanguagesA EnumResourceLanguagesW EnumResourceTypesA EnumResourceTypesW CreateFileW LoadLibraryW GetLastError FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext HeapAlloc LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize WriteFile SetFilePointer GetConsoleCP GetConsoleMode HeapReAlloc InitializeCriticalSectionAndSpinCount LocalAlloc LocalFree GetModuleFileNameW GetProcessAffinityMask SetProcessAffinityMask SetThreadAffinityMask Sleep ExitProcess FreeLibrary LoadLibraryA GetModuleHandleA GetProcAddress

wintrust

WinVerifyTrust

gdi32

WidenPath UnrealizeObject TextOutW StrokePath StrokeAndFillPath StretchDIBits StretchBlt StartPage StartDocW SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextCharacterExtra SetTextColor SetTextAlign SetStretchBltMode SetROP2 SetPixelV SetPixel SetPaletteEntries SetMapMode SetGraphicsMode SetEnhMetaFileBits SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetArcDirection SetAbortProc SelectPalette SelectObject SelectClipRgn SelectClipPath SaveDC RoundRect RestoreDC ResizePalette Rectangle RectVisible RealizePalette PtVisible Polyline Polygon PolyBezierTo PolyBezier PlayEnhMetaFile Pie PathToRegion PatBlt OffsetRgn OffsetClipRgn MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWorldTransform GetWindowOrgEx GetWinMetaFileBits GetViewportOrgEx GetTextMetricsA GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentExPointA GetTextExtentExPointW GetTextColor GetTextCharacterExtra GetTextAlign GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectA GetObjectW GetNearestPaletteIndex GetMapMode GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetCurrentPositionEx GetCurrentObject GetClipRgn GetClipBox GetCharABCWidthsA GetCharABCWidthsW GetBrushOrgEx GetBkMode GetBkColor GetBitmapBits GdiFlush FrameRgn ExtTextOutW ExtSelectClipRgn ExtFloodFill ExtCreatePen ExcludeClipRect EnumFontsW EnumFontFamiliesExW EnumEnhMetaFile EndPath EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRoundRectRgn CreateRectRgnIndirect CreateRectRgn CreatePolygonRgn CreatePenIndirect CreatePen CreatePatternBrush CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateEnhMetaFileW CreateEllipticRgnIndirect CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW CombineRgn CloseEnhMetaFile Chord BitBlt BeginPath ArcTo Arc AngleArc GetRandomRgn

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

CoCreateGuid CreateStreamOnHGlobal ReleaseStgMedium OleGetClipboard OleSetClipboard DoDragDrop RevokeDragDrop RegisterDragDrop OleUninitialize OleInitialize CreateDataAdviseHolder CoTaskMemFree CoTaskMemAlloc StringFromCLSID CoCreateInstance CoDisconnectObject CoUninitialize CoInitialize IsEqualGUID CoCreateGuid CLSIDFromString IsEqualGUID

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Copy ImageList_GetIcon ImageList_Remove ImageList_DrawIndirect ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_SetOverlayImage ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls

shell32

SHGetFileInfoA SHGetFileInfoW SHFileOperationA ShellExecuteExA ShellExecuteExW ShellExecuteW Shell_NotifyIconW SHAppBarMessage DragQueryPoint DragQueryFileA DragQueryFileW DragFinish DragAcceptFiles ILFree SHGetSpecialFolderLocation SHGetFolderLocation SHGetPathFromIDListW SHGetMalloc SHGetDesktopFolder SHGetDataFromIDListA SHGetDataFromIDListW SHBrowseForFolderW

wininet

InternetReadFile InternetOpenUrlA InternetOpenUrlW InternetOpenA InternetOpenW InternetCloseHandle HttpQueryInfoW

wsock32

__WSAFDIsSet WSACleanup WSAStartup WSASetLastError WSAGetLastError gethostbyname socket shutdown setsockopt sendto send select recvfrom recv ntohs ioctlsocket inet_ntoa inet_addr htons getsockopt getsockname getpeername connect closesocket bind

msvcrt

isxdigit isupper isspace ispunct isprint islower isgraph isdigit iscntrl isalpha isalnum toupper tolower strchr strlen strncmp strcmp memset memmove memcpy memcmp

comdlg32

ReplaceTextW FindTextW GetSaveFileNameW GetOpenFileNameW

winspool.drv

OpenPrinterW EnumPrintersW DocumentPropertiesW ClosePrinter GetDefaultPrinterW

oleacc

AccessibleObjectFromWindow LresultFromObject

winmm

timeGetTime timeEndPeriod timeBeginPeriod PlaySoundW

gdiplus

GdiplusShutdown GdiplusStartup GdipDrawCachedBitmap GdipSetStringFormatMeasurableCharacterRanges GdipGetStringFormatMeasurableCharacterRangeCount GdipGetStringFormatDigitSubstitution GdipSetStringFormatDigitSubstitution GdipGetStringFormatTabStopCount GdipGetStringFormatTabStops GdipSetStringFormatTabStops GdipGetStringFormatHotkeyPrefix GdipSetStringFormatHotkeyPrefix GdipGetStringFormatTrimming GdipSetStringFormatTrimming GdipGetStringFormatLineAlign GdipSetStringFormatLineAlign GdipGetStringFormatAlign GdipSetStringFormatAlign GdipGetStringFormatFlags GdipSetStringFormatFlags GdipCloneStringFormat GdipDeleteStringFormat GdipCreateStringFormat GdipMeasureDriverString GdipDrawDriverString GdipMeasureCharacterRanges GdipMeasureString GdipDrawString GdipComment GdipGetImageEncoders GdipGetImageEncodersSize GdipEndContainer GdipBeginContainer2 GdipBeginContainerI GdipBeginContainer GdipRestoreGraphics GdipSaveGraphics GdipIsVisibleRectI GdipIsVisibleRect GdipIsVisiblePointI GdipIsVisiblePoint GdipIsVisibleClipEmpty GdipGetVisibleClipBoundsI GdipGetVisibleClipBounds GdipIsClipEmpty GdipGetClipBoundsI GdipGetClipBounds GdipGetClip GdipTranslateClipI GdipTranslateClip GdipResetClip GdipSetClipHrgn GdipSetClipRegion GdipSetClipPath GdipSetClipRectI GdipSetClipRect GdipSetClipGraphics GdipEnumerateMetafileSrcRectDestPointsI GdipEnumerateMetafileSrcRectDestPoints GdipEnumerateMetafileSrcRectDestRectI GdipEnumerateMetafileSrcRectDestRect GdipEnumerateMetafileSrcRectDestPointI GdipEnumerateMetafileSrcRectDestPoint GdipEnumerateMetafileDestPointsI GdipEnumerateMetafileDestPoints GdipEnumerateMetafileDestRectI GdipEnumerateMetafileDestRect GdipEnumerateMetafileDestPointI GdipEnumerateMetafileDestPoint GdipDrawImagePointsRectI GdipDrawImagePointsRect GdipDrawImageRectRectI GdipDrawImageRectRect GdipDrawImagePointRectI GdipDrawImagePointRect GdipDrawImagePointsI GdipDrawImagePoints GdipDrawImageRectI GdipDrawImageRect GdipDrawImageI GdipDrawImage GdipFillRegion GdipFillClosedCurve2I GdipFillClosedCurve2 GdipFillClosedCurveI GdipFillClosedCurve GdipFillPath GdipFillPieI GdipFillPie GdipFillEllipseI GdipFillEllipse GdipFillPolygonI GdipFillPolygon GdipFillRectanglesI GdipFillRectangles GdipFillRectangleI GdipFillRectangle GdipGraphicsClear GdipDrawClosedCurve2I GdipDrawClosedCurve2 GdipDrawClosedCurveI GdipDrawClosedCurve GdipDrawCurve3I GdipDrawCurve3 GdipDrawCurve2I GdipDrawCurve2 GdipDrawCurveI GdipDrawCurve GdipDrawPath GdipDrawPolygonI GdipDrawPolygon GdipDrawPieI GdipDrawPie GdipDrawEllipseI GdipDrawEllipse GdipDrawRectanglesI GdipDrawRectangles GdipDrawRectangleI GdipDrawRectangle GdipDrawBeziersI GdipDrawBeziers GdipDrawBezierI GdipDrawBezier GdipDrawArcI GdipDrawArc GdipDrawLinesI GdipDrawLines GdipDrawLineI GdipDrawLine GdipGetNearestColor GdipTransformPointsI GdipTransformPoints GdipGetDpiY GdipGetDpiX GdipSetPageScale GdipSetPageUnit GdipGetPageScale GdipGetPageUnit GdipGetWorldTransform GdipRotateWorldTransform GdipScaleWorldTransform GdipTranslateWorldTransform GdipMultiplyWorldTransform GdipResetWorldTransform GdipSetWorldTransform GdipGetInterpolationMode GdipSetInterpolationMode GdipGetTextContrast GdipSetTextContrast GdipGetTextRenderingHint GdipSetTextRenderingHint GdipGetPixelOffsetMode GdipSetPixelOffsetMode GdipGetSmoothingMode GdipSetSmoothingMode GdipGetCompositingQuality GdipSetCompositingQuality GdipGetRenderingOrigin GdipSetRenderingOrigin GdipGetCompositingMode GdipSetCompositingMode GdipReleaseDC GdipGetDC GdipDeleteGraphics GdipCreateFromHDC GdipFlush GdipGetImageAttributesAdjustedPalette GdipSetImageAttributesWrapMode GdipSetImageAttributesRemapTable GdipSetImageAttributesOutputChannelColorProfile GdipSetImageAttributesOutputChannel GdipSetImageAttributesColorKeys GdipSetImageAttributesNoOp GdipSetImageAttributesGamma GdipSetImageAttributesThreshold GdipSetImageAttributesColorMatrix GdipResetImageAttributes GdipSetImageAttributesToIdentity GdipDisposeImageAttributes GdipCloneImageAttributes GdipCreateImageAttributes GdipSetPropertyItem GdipRemovePropertyItem GdipGetAllPropertyItems GdipGetPropertySize GdipGetPropertyItem GdipGetPropertyItemSize GdipGetPropertyIdList GdipGetPropertyCount GdipGetImagePaletteSize GdipSetImagePalette GdipGetImagePalette GdipImageRotateFlip GdipImageSelectActiveFrame GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipImageGetFrameDimensionsCount GdipGetEncoderParameterList GdipGetEncoderParameterListSize GdipGetImageThumbnail GdipGetImagePixelFormat GdipGetImageRawFormat GdipGetImageFlags GdipGetImageVerticalResolution GdipGetImageHorizontalResolution GdipGetImageHeight GdipGetImageWidth GdipGetImageType GdipGetImageDimension GdipGetImageBounds GdipSaveAddImage GdipSaveAdd GdipSaveImageToStream GdipSaveImageToFile GdipDisposeImage GdipCloneImage GdipGetCustomLineCapWidthScale GdipSetCustomLineCapWidthScale GdipGetCustomLineCapBaseInset GdipSetCustomLineCapBaseInset GdipGetCustomLineCapBaseCap GdipSetCustomLineCapBaseCap GdipGetCustomLineCapStrokeJoin GdipSetCustomLineCapStrokeJoin GdipGetCustomLineCapStrokeCaps GdipSetCustomLineCapStrokeCaps GdipCloneCustomLineCap GdipDeleteCustomLineCap GdipGetPenCompoundArray GdipSetPenCompoundArray GdipGetPenCompoundCount GdipGetPenDashArray GdipSetPenDashArray GdipGetPenDashCount GdipSetPenDashOffset GdipGetPenDashOffset GdipSetPenDashStyle GdipGetPenDashStyle GdipGetPenFillType GdipGetPenBrushFill GdipSetPenBrushFill GdipGetPenColor GdipSetPenColor GdipRotatePenTransform GdipScalePenTransform GdipTranslatePenTransform GdipMultiplyPenTransform GdipResetPenTransform GdipGetPenTransform GdipSetPenTransform GdipGetPenMode GdipSetPenMode GdipGetPenMiterLimit GdipSetPenMiterLimit GdipGetPenCustomEndCap GdipSetPenCustomEndCap GdipGetPenCustomStartCap GdipSetPenCustomStartCap GdipGetPenLineJoin GdipSetPenLineJoin GdipGetPenDashCap197819 GdipGetPenEndCap GdipGetPenStartCap GdipSetPenDashCap197819 GdipSetPenEndCap GdipSetPenStartCap GdipSetPenLineCap197819 GdipGetPenWidth GdipSetPenWidth GdipDeletePen GdipClonePen GdipCreatePen1 GdipRotateLineTransform GdipScaleLineTransform GdipTranslateLineTransform GdipMultiplyLineTransform GdipResetLineTransform GdipSetLineTransform GdipGetLineTransform GdipGetLineWrapMode GdipSetLineWrapMode GdipSetLineLinearBlend GdipSetLineSigmaBlend GdipSetLinePresetBlend GdipGetLinePresetBlend GdipGetLinePresetBlendCount GdipSetLineBlend GdipGetLineBlend GdipGetLineBlendCount GdipGetLineGammaCorrection GdipSetLineGammaCorrection GdipGetLineRectI GdipGetLineRect GdipGetLineColors GdipSetLineColors GdipGetSolidFillColor GdipSetSolidFillColor GdipCreateSolidFill GdipGetTextureImage GdipGetTextureWrapMode GdipSetTextureWrapMode GdipRotateTextureTransform GdipScaleTextureTransform GdipTranslateTextureTransform GdipMultiplyTextureTransform GdipResetTextureTransform GdipSetTextureTransform GdipGetTextureTransform GdipCreateTexture GdipGetHatchBackgroundColor GdipGetHatchForegroundColor GdipGetHatchStyle GdipCreateHatchBrush GdipGetBrushType GdipDeleteBrush GdipCloneBrush GdipGetRegionScansI GdipGetRegionScans GdipGetRegionScansCount GdipIsVisibleRegionRectI GdipIsVisibleRegionRect GdipIsVisibleRegionPointI GdipIsVisibleRegionPoint GdipGetRegionData GdipGetRegionDataSize GdipIsEqualRegion GdipIsInfiniteRegion GdipIsEmptyRegion GdipGetRegionHRgn GdipGetRegionBoundsI GdipGetRegionBounds GdipTransformRegion GdipTranslateRegionI GdipTranslateRegion GdipCombineRegionRegion GdipCombineRegionPath GdipCombineRegionRectI GdipCombineRegionRect GdipSetEmpty GdipSetInfinite GdipDeleteRegion GdipCloneRegion GdipCreateRegion GdipIsMatrixEqual GdipIsMatrixIdentity GdipIsMatrixInvertible GdipGetMatrixElements GdipVectorTransformMatrixPointsI GdipVectorTransformMatrixPoints GdipTransformMatrixPointsI GdipTransformMatrixPoints GdipInvertMatrix GdipShearMatrix GdipRotateMatrix GdipScaleMatrix GdipTranslateMatrix GdipMultiplyMatrix GdipSetMatrixElements GdipDeleteMatrix GdipCloneMatrix GdipCreateMatrix GdipIsOutlineVisiblePathPointI GdipIsOutlineVisiblePathPoint GdipIsVisiblePathPointI GdipIsVisiblePathPoint GdipGetPathWorldBoundsI GdipGetPathWorldBounds GdipTransformPath GdipWarpPath GdipWidenPath GdipWindingModeOutline GdipFlattenPath GdipAddPathPolygonI GdipAddPathPieI GdipAddPathEllipseI GdipAddPathRectanglesI GdipAddPathRectangleI GdipAddPathClosedCurve2I GdipAddPathClosedCurveI GdipAddPathCurve3I GdipAddPathCurve2I GdipAddPathCurveI GdipAddPathBeziersI GdipAddPathBezierI GdipAddPathArcI GdipAddPathLine2I GdipAddPathLineI GdipAddPathStringI GdipAddPathString GdipAddPathPath GdipAddPathPolygon GdipAddPathPie GdipAddPathEllipse GdipAddPathRectangles GdipAddPathRectangle GdipAddPathClosedCurve2 GdipAddPathClosedCurve GdipAddPathCurve3 GdipAddPathCurve2 GdipAddPathCurve GdipAddPathBeziers GdipAddPathBezier GdipAddPathArc GdipAddPathLine2 GdipAddPathLine GdipGetPathLastPoint GdipReversePath GdipClearPathMarkers GdipSetPathMarker GdipClosePathFigures GdipClosePathFigure GdipStartPathFigure GdipGetPathData GdipSetPathFillMode GdipGetPathFillMode GdipGetPathPointsI GdipGetPathPoints GdipGetPathTypes GdipGetPointCount GdipResetPath GdipDeletePath GdipClonePath GdipCreatePath GdipFree GdipAlloc GdiplusShutdown GdiplusStartup

fat16

f7 f6 f5 f4 f3 f2 f1

crypt32

CertSetCertificateContextProperty CertGetCertificateContextProperty CertOpenStore CertDuplicateCertificateContext CertEnumCertificatesInStore CertDeleteCertificateFromStore CertFreeCertificateContext CertAddEncodedCertificateToStore CertCloseStore CertOpenSystemStoreW

cbfs64

CbFsSetMaxWriteBlockSize CbFsSetMaxReadBlockSize CbFsInitialize CbFsDisableNonexistentFilesCache CbFsUnsetStorageDestroyedNotification CbFsSetStorageDestroyedNotification CbFsGetStorageDestroyedEvent CbFsCheckProcessRestriction CbFsEnableProcessRestriction CbFsSetICacheType CbFsDisableMetaDataCache CbFsIsCallbackRegistered CbFsDeregisterCallback CbFsRegisterCallback CbFsSetMaxFileSize CbFsSetDestroyStorageOnProcessTerminated CbFsDeleteSymLink CbFsGetSymLink CbFsGetSymLinksCount CbFsCreateSimpleSymLink CbFsDestroyStorage CbFsCreateStorage CbFsGetModuleStatus CbFsUninstall CbFsInstall

shlwapi

PathIsNetworkPathW

wtsapi32

WTSSendMessageW

Name

.text

Size

21.1MB

Virtual Size

21.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

937KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

720B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

49B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

921KB

Virtual Size

920KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vmp0

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

JCLDEBUG

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vmp1

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.vmp2

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

880B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

VMFS_Recovery.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

DiskInternals.Preview.dll

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

comctl32

msvcrt

shell32

wininet

comdlg32

winspool.drv

oleacc

winmm

gdiplus

wtsapi32

generic

License.txt

av/SDL2.dll

advapi32

gdi32

imm32

kernel32

msvcrt

ole32

oleaut32

setupapi

shell32

user32

version

winmm

generic

av/SoundTouch.dll

kernel32

msvcrt

user32

generic

av/avcodec-58.dll

kernel32

msvcrt

ole32

avutil-56

swresample-3

generic

av/avdevice-58.dll

gdi32

kernel32

msvcrt

ole32

oleaut32