Pressor[.]3[.]0[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Pressor.3.0.zip
Size

60.2MB
MD5

82ea762f1a06ca9dd255064525371665
SHA1

0f9168574db5336a2a1841fb41b81dda7a39e262
SHA256

250a28d8715d91748c63136ffad2276bbeedac1044dca83b0ed7aaf4e8bae492
SHA512

9470d570b70138940a5d834fadf6c979c526d83b6adc1c697483b717f6d7360be5ff6c8a63933d3dc473e932d4e464be994d1a69381ccf89a1531627e9862352
SSDEEP

1572864:7sdTGrOCrFFqTzYNuS1lh3ExcLhLVF4On+0/1+dI6u:7sdn0vqTLShUuDF4a1N+KD

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Pressor 3,0/Adobe AIR/Versions/1.0/Resources/CaptiveAppEntry.exe
unpack001/Pressor 3,0/Pressor 3.exe
unpack001/Pressor 3,0/ffdec.exe

Files

Pressor.3.0.zip
.zip
Pressor 3,0/Adobe AIR/Versions/1.0/Adobe AIR.dll
.dll windows:5 windows x86 arch:x86

e94f9e66aa1a5b0c1abbbc90afd5c1ad

Code Sign

06:f0:47:88:03:10:55:d3:1d:ef:fe:fc:d0:26:d6:c5
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-03-2017 00:00

Not After

20-03-2019 12:00

Subject

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Flash Player,O=Adobe Systems Incorporated,POSTALCODE=95110,STREET=345 Park Avenue,L=San Jose,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ea:c6:1c:25:c1:11:92:34:0e:aa:57:a7:ab:90:08:30:0f:a5:58:48:bd:ca:fc:bd:45:8c:b5:4f:04:1c:b9:e6
Signer

Actual PE Digest

ea:c6:1c:25:c1:11:92:34:0e:aa:57:a7:ab:90:08:30:0f:a5:58:48:bd:ca:fc:bd:45:8c:b5:4f:04:1c:b9:e6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\r\ws\St_Make\code\build\win\results\Release\info\runtime_sdk_withdrm\Adobe AIR.pdb

Imports

kernel32

GetCommandLineW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
RaiseException
InitializeCriticalSectionAndSpinCount
FreeLibrary
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
GetLocaleInfoW
IsValidCodePage
IsDBCSLeadByte
GlobalUnlock
GlobalLock
SystemTimeToFileTime
GetLocalTime
GlobalAlloc
GlobalSize
DebugBreak
GetDriveTypeW
GetVolumeInformationW
GetLogicalDriveStringsW
CloseHandle
CreateEventW
ExitThread
TerminateThread
SetEvent
ResetEvent
WaitForSingleObject
WaitForMultipleObjects
CreateWaitableTimerW
SetThreadPriority
CreateThread
GetSystemTime
GetSystemDirectoryA
GetVersionExW
QueryPerformanceFrequency
QueueUserAPC
OpenThread
SetCurrentDirectoryW
GetCurrentDirectoryW
GetSystemDirectoryW
SleepEx
GetProcessTimes
LoadLibraryW
ExpandEnvironmentStringsW
MoveFileExW
DeleteFileW
GetFileAttributesW
VirtualQuery
GetUserDefaultLangID
GetUserDefaultUILanguage
GlobalFree
SetFilePointer
CreateFileW
ReadFile
GetFileSize
CreateFileA
VerifyVersionInfoW
VerSetConditionMask
CreateProcessA
LockResource
LoadResource
FindResourceExA
FindResourceExW
GetModuleFileNameW
GetTempPathW
FindClose
FindNextFileW
FindFirstFileW
GetFileAttributesA
CreateDirectoryA
DeleteFileA
DeviceIoControl
GetTempPathA
CreateMutexA
GetFileAttributesExW
GetFileInformationByHandle
GetLongPathNameW
GetTempFileNameW
GetFullPathNameW
GetSystemWow64DirectoryW
ExpandEnvironmentStringsA
CreateProcessW
OutputDebugStringA
GetTempFileNameA
lstrlenW
SetFilePointerEx
GetFileSizeEx
SetEndOfFile
CreateDirectoryW
RemoveDirectoryW
FlushInstructionCache
ReleaseSemaphore
CreateSemaphoreW
SetNamedPipeHandleState
EndUpdateResourceW
BeginUpdateResourceW
UpdateResourceW
lstrlenA
GetExitCodeThread
DuplicateHandle
OpenProcess
GetExitCodeProcess
GetOverlappedResult
ConnectNamedPipe
CreateNamedPipeA
LocalFree
GetModuleHandleA
GetVersionExA
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
CreateFileMappingA
GetComputerNameExW
CreateNamedPipeW
CancelIo
GetProcessHeap
GenerateConsoleCtrlEvent
FormatMessageW
SetHandleInformation
lstrcmpiW
SizeofResource
FindResourceW
LoadLibraryExW
SetThreadAffinityMask
CompareFileTime
VirtualProtect
AreFileApisANSI
FlushFileBuffers
UnlockFile
LockFile
LockFileEx
UnlockFileEx
FormatMessageA
GetFullPathNameA
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileMappingW
CreateEventA
CreateWaitableTimerA
SetWaitableTimer
CancelWaitableTimer
InterlockedExchangeAdd
GetVersion
FileTimeToSystemTime
GetNumberFormatW
GetCurrencyFormatW
GetDateFormatW
GetTimeFormatW
EnumSystemLocalesW
GetProcessAffinityMask
GetNativeSystemInfo
LocalAlloc
lstrcpynW
GlobalMemoryStatus
FlushConsoleInputBuffer
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
PeekNamedPipe
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetConsoleCP
GetCurrentDirectoryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
IsProcessorFeaturePresent
GetOEMCP
GetACP
GetCPInfo
LoadLibraryA
SetConsoleCtrlHandler
HeapAlloc
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
ExitProcess
HeapFree
GetCurrentThread
GetLastError
SetLastError
TlsFree
TlsAlloc
GetProcAddress
GetModuleHandleW
GetModuleFileNameA
GetStdHandle
WriteFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
GetSystemInfo
SwitchToThread
TlsGetValue
TlsSetValue
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
InterlockedCompareExchange
Sleep

ole32

CoFreeUnusedLibraries
DoDragDrop
CoCreateInstance
CoInitialize
OleInitialize
OleUninitialize
RegisterDragDrop
RevokeDragDrop
OleGetClipboard
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
ReleaseStgMedium
CoUninitialize
CoTaskMemFree
CreateStreamOnHGlobal
CoSetProxyBlanket
CoMarshalInterThreadInterfaceInStream
CoInitializeEx
CoGetInterfaceAndReleaseStream
PropVariantClear
CoTaskMemAlloc
CoTaskMemRealloc
MkParseDisplayName
CreateBindCtx

oleaut32

VariantClear
SysStringByteLen
SysAllocStringByteLen
SysAllocString
LoadTypeLi
SysAllocStringLen
SysStringLen
LoadRegTypeLi
VarUI4FromStr
SysFreeString
VariantInit

ws2_32

getservbyname
htonl
inet_ntoa
gethostbyname
WSAGetLastError
inet_addr
closesocket
accept
listen
gethostname
__WSAFDIsSet
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
WSACloseEvent
recv
ntohs
sendto
send
recvfrom
connect
bind
getpeername
getsockname
WSAAddressToStringA
ioctlsocket
select
WSAStartup
WSASocketW
socket
ntohl
WSAIoctl
WSAAsyncSelect
WSASetLastError
gethostbyaddr
getsockopt
shutdown
setsockopt
htons
WSACleanup
getservbyport

version

VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoW
GetFileVersionInfoSizeA
GetFileVersionInfoA

crypt32

CryptUnprotectData
CryptFindLocalizedName
CertGetEnhancedKeyUsage
CertAddEncodedCertificateToStore
CertDuplicateCertificateContext
CryptImportPublicKeyInfo
CertGetCertificateChain
CertFreeCertificateChain
CertOpenStore
CertEnumCertificatesInStore
CryptVerifyMessageSignature
CryptGetMessageCertificates
CertCreateCertificateContext
CertVerifySubjectCertificateContext
CertFindCertificateInStore
CertFreeCertificateContext
CertCloseStore
CryptProtectData

winmm

timeEndPeriod
timeGetTime
waveOutReset
timeBeginPeriod
timeGetDevCaps
mixerSetControlDetails
waveInGetPosition
waveOutPause
waveOutRestart
mixerGetControlDetailsA
mixerOpen
mixerGetDevCapsA
mixerGetLineInfoA
mixerGetLineControlsA
mixerClose
waveInMessage
waveOutMessage
waveOutGetDevCapsA
waveInGetDevCapsA
mixerGetID
waveInOpen
waveInPrepareHeader
waveInAddBuffer
waveInStart
waveInStop
waveInReset
waveInUnprepareHeader
waveInClose
waveInGetNumDevs
waveInGetDevCapsW
waveOutGetPosition
waveOutOpen
waveOutClose
timeKillEvent
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutGetNumDevs
waveOutGetDevCapsW
timeSetEvent

oleacc

AccessibleObjectFromWindow

user32

DrawMenuBar
EnumWindows
DeleteMenu
GetWindowDC
GetSysColor
OffsetRect
MonitorFromPoint
EnumDisplayMonitors
PostQuitMessage
GetMessageW
ShowCaret
CreateCaret
DestroyCaret
SetCaretPos
InsertMenuItemW
SetMenuInfo
CreateMenu
GetMenuItemInfoW
SetMenuItemInfoW
RemoveMenu
EnumDisplayDevicesA
UpdateLayeredWindow
GetKeyboardLayout
ActivateKeyboardLayout
GetLastInputInfo
GetAsyncKeyState
UnregisterClassA
DdeUninitialize
DdeFreeStringHandle
DdeDisconnect
DdeClientTransaction
DdeConnect
DdeCreateStringHandleA
DdeInitializeW
GetMenuInfo
DestroyMenu
TrackPopupMenu
CreatePopupMenu
CharLowerW
CharUpperW
ToAscii
GetKeyboardState
MapVirtualKeyW
CharNextW
EnumDisplayDevicesW
PostMessageA
RegisterWindowMessageA
MonitorFromRect
GetMonitorInfoA
wsprintfW
GetUserObjectInformationW
GetProcessWindowStation
GetClassLongW
BeginPaint
EndPaint
EnumDisplaySettingsW
IsWindow
MapWindowPoints
GetClassInfoExW
ShowWindowAsync
SetWindowRgn
GetWindow
IsWindowVisible
ShowWindow
GetMenuBarInfo
GetWindowPlacement
IsZoomed
GetSystemMenu
SetMenu
FlashWindowEx
GetActiveWindow
IsIconic
ReleaseCapture
GetMessageTime
SetCapture
SetCursorPos
TrackMouseEvent
GetCapture
GetWindowThreadProcessId
AttachThreadInput
LoadStringW
LoadCursorW
GetQueueStatus
SetTimer
GetWindowInfo
CopyRect
InvalidateRect
KillTimer
GetForegroundWindow
WaitForInputIdle
RegisterClassExW
DefWindowProcW
CloseWindow
CreateWindowExW
RemovePropW
SetForegroundWindow
CallWindowProcW
FindWindowExW
EnumChildWindows
GetFocus
GetAncestor
EnableWindow
GetWindowTextLengthW
GetDlgItemTextA
IsWindowEnabled
SetDlgItemTextA
SetRectEmpty
CreateIconIndirect
DialogBoxParamW
GetDlgItemTextW
SetDlgItemTextW
GetClientRect
MoveWindow
MessageBoxA
SendMessageTimeoutW
ClientToScreen
MonitorFromWindow
GetMonitorInfoW
DialogBoxIndirectParamW
EndDialog
GetParent
GetWindowRect
GetDesktopWindow
SetWindowPos
LoadIconW
GetDlgItem
SetWindowTextW
SetFocus
PostMessageW
DestroyWindow
SetCursor
DestroyIcon
GetPropW
SetPropW
SendInput
MessageBoxW
UpdateWindow
SetWindowPlacement
GetWindowTextW
GetDoubleClickTime
RegisterClipboardFormatA
RegisterClipboardFormatW
GetClipboardFormatNameA
ReleaseDC
GetDC
ScreenToClient
GetKeyState
GetCursorPos
DispatchMessageW
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageW
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
SetClipboardData
EmptyClipboard
InflateRect
GetSystemMetrics
SetRect
PostThreadMessageW
SendMessageW
SystemParametersInfoW
GetWindowLongW
SetWindowLongW
PtInRect
GetCursor

gdi32

SelectClipRgn
OffsetRgn
CombineRgn
GetDeviceCaps
GdiFlush
RealizePalette
StretchBlt
ExtTextOutW
SetBkColor
SetStretchBltMode
GetStretchBltMode
GetTextExtentPoint32A
ExtTextOutA
GetTextExtentPoint32W
GetTextMetricsW
CreatePen
GetClipBox
CreateCompatibleBitmap
GetDIBits
CreateBitmap
SetPixel
CreateFontIndirectW
GetStockObject
CreateDCA
Rectangle
GetObjectW
BitBlt
CreateDIBSection
CreateSolidBrush
StrokePath
ExtCreatePen
MoveToEx
EnumFontFamiliesW
LineTo
FillPath
AbortDoc
CreateRectRgnIndirect
EnumFontFamiliesA
SelectPalette
StartPage
CreateCompatibleDC
SelectObject
SetDIBitsToDevice
EndPage
DeleteDC
BeginPath
EndPath
SetPolyFillMode
PolyBezierTo
SelectClipPath
SaveDC
RestoreDC
LPtoDP
StartDocW
StretchDIBits
CreateDCW
GetSystemPaletteEntries
CreatePalette
GetFontData
EnumFontFamiliesExW
GetTextCharacterExtra
GetWorldTransform
DeleteObject
SetWorldTransform
GdiAlphaBlend
SetGraphicsMode
SetTextColor
CreateFontIndirectA
IntersectClipRect
GetClipRgn
CreateRectRgn
SetTextAlign
SetBkMode
SetTextCharacterExtra
GetTextAlign
GetBkMode
GetTextColor
DPtoLP
GetCurrentObject
GetBkColor
EndDoc
CreateICW
GetICMProfileA
ResetDCW

msimg32

AlphaBlend

advapi32

SetSecurityDescriptorDacl
SetSecurityDescriptorControl
MakeSelfRelativeSD
SetEntriesInAclW
RegEnumKeyExW
CryptGenRandom
OpenProcessToken
GetTokenInformation
RegQueryInfoKeyW
RegisterEventSourceA
ReportEventA
DeregisterEventSource
IsValidSid
GetSidSubAuthorityCount
GetSidSubAuthority
CryptExportKey
CryptEncrypt
CryptImportKey
CryptGenKey
CryptDestroyKey
RegOpenKeyA
SetSecurityInfo
InitializeAcl
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExA
RegDeleteValueW
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExW
RegDeleteKeyW
CryptReleaseContext
CryptDestroyHash
CryptCreateHash
CryptAcquireContextW
CryptGetHashParam
CryptHashData
InitializeSecurityDescriptor

comdlg32

GetSaveFileNameW
PageSetupDlgW
PrintDlgW
CommDlgExtendedError
GetOpenFileNameW

shell32

SHCreateDirectoryExW
SHGetSpecialFolderPathW
ShellExecuteExW
CommandLineToArgvW
SHGetFileInfoW
SHGetSpecialFolderLocation
SHChangeNotify
Shell_NotifyIconW
SHGetDiskFreeSpaceExW
SHFileOperationW
SHGetFolderPathW
SHGetSettings
SHGetFolderPathA
SHBrowseForFolderW
SHAppBarMessage
SHGetFolderLocation
SHGetPathFromIDListW
ord2
ord4
ShellExecuteW

shlwapi

PathAppendA
PathAppendW
StrDupW
AssocQueryStringW
StrStrIW
StrRStrIW
PathRemoveFileSpecW
PathFileExistsW
ord219
StrCmpW

wininet

InternetErrorDlg
InternetSetCookieW
InternetGetCookieW

msi

ord8
ord92
ord205
ord72
ord96
ord37
ord17
ord125
ord121
ord84
ord159
ord20
ord78
ord151
ord153
ord141
ord88
ord16
ord137
ord70
ord90
ord173
ord113
ord32

urlmon

CoInternetParseUrl
CoInternetCompareUrl
CopyStgMedium

comctl32

ImageList_Draw
ImageList_GetIconSize

mscms

OpenColorProfileW
CreateColorTransformW
CloseColorProfile
TranslateBitmapBits
DeleteColorTransform

secur32

LsaFreeReturnBuffer
LsaGetLogonSessionData

dsound

ord1
ord8

iphlpapi

GetAdaptersAddresses

dnsapi

DnsFree
DnsQuery_UTF8

winspool.drv

OpenPrinterW
GetPrinterW
ClosePrinter
EnumPrintersW

Exports

Exports

ADLWMain
AdobeCPGetAPI
AppEntryWinMain
AppInstallWinMain
CaptiveAppEntryWinMain
ExtendedAppEntryWinMain
FREAcquireBitmapData
FREAcquireBitmapData2
FREAcquireByteArray
FRECallObjectMethod
FREDispatchStatusEventAsync
FREGetArrayElementAt
FREGetArrayLength
FREGetContextActionScriptData
FREGetContextNativeData
FREGetObjectAsBool
FREGetObjectAsDouble
FREGetObjectAsInt32
FREGetObjectAsUTF8
FREGetObjectAsUint32
FREGetObjectProperty
FREGetObjectType
FREInvalidateBitmapDataRect
FRENewObject
FRENewObjectFromBool
FRENewObjectFromDouble
FRENewObjectFromInt32
FRENewObjectFromUTF8
FRENewObjectFromUint32
FREReleaseBitmapData
FREReleaseByteArray
FRESetArrayElementAt
FRESetArrayLength
FRESetContextActionScriptData
FRESetContextNativeData
FRESetObjectProperty
NAIPWMain
RuntimeInstallerWinMain

Sections

.text
Size: 12.5MB - Virtual size: 12.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 427KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 869KB - Virtual size: 868KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pressor 3,0/Adobe AIR/Versions/1.0/Resources/Adobe AIR.vch
Pressor 3,0/Adobe AIR/Versions/1.0/Resources/CaptiveAppEntry.exe
.exe windows:5 windows x86 arch:x86

0149ed03f5810d92496c2f5e11b99ce2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\r\ws\St_Make\code\build\win\results\Release\info\CaptiveAppEntry.pdb

Imports

kernel32

SetStdHandle
GetVersionExW
ExitProcess
GetUserDefaultUILanguage
GetModuleHandleW
WriteConsoleW
GetStdHandle
GetCommandLineW
HeapAlloc
GetProcessHeap
GetFullPathNameW
HeapFree
GetFileAttributesW
LoadLibraryW
GetProcAddress
CreateFileW
InitializeCriticalSection
GetLastError
DuplicateHandle
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetFileType
GetCommandLineA
GetStartupInfoA
CloseHandle
SetHandleCount
DeleteCriticalSection
Sleep
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetLastError
InitializeCriticalSectionAndSpinCount
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
CreateFileA
GetModuleFileNameW

shell32

CommandLineToArgvW

user32

FindWindowA
ShowWindow
MessageBoxExW

shlwapi

PathAppendW
StrCmpW
PathRemoveFileSpecW

msi

ord90

Exports

Exports

AmdPowerXpressRequestBetterBatteryLife
NvOptimusDisablement

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pressor 3,0/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING
Pressor 3,0/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-LGPL-2.1
Pressor 3,0/Adobe AIR/Versions/1.0/Resources/Licenses/cairo/COPYING-MPL-1.1
Pressor 3,0/Adobe AIR/Versions/1.0/Resources/Licenses/pcre2/COPYING
Pressor 3,0/Adobe AIR/Versions/1.0/Resources/Licenses/pixman/COPYING
Pressor 3,0/Adobe AIR/Versions/1.0/Resources/NPSWF32.dll
.dll windows:5 windows x86 arch:x86

b8ee5247fe5026a539c47b8fccacd597

Code Sign

06:f0:47:88:03:10:55:d3:1d:ef:fe:fc:d0:26:d6:c5
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-03-2017 00:00

Not After

20-03-2019 12:00

Subject

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Flash Player,O=Adobe Systems Incorporated,POSTALCODE=95110,STREET=345 Park Avenue,L=San Jose,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ee:f1:c7:7a:e9:4b:3c:30:70:10:48:cc:6e:c1:49:a3:ca:e5:a1:fb:ac:10:b6:9f:de:ec:10:8d:48:55:f4:46
Signer

Actual PE Digest

ee:f1:c7:7a:e9:4b:3c:30:70:10:48:cc:6e:c1:49:a3:ca:e5:a1:fb:ac:10:b6:9f:de:ec:10:8d:48:55:f4:46

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\depot\main\FlashRuntime\Main\code\products\AIR\AIRCaptivePlugin\Release\NPSWF32.pdb

Imports

user32

EndPaint
DestroyWindow
FillRect
LoadImageW
UnregisterClassW
GetClientRect
BeginPaint
LoadIconW
GetWindowLongW
SetWindowLongW
SetWindowPos
FrameRect
CreateWindowExW
RegisterClassW
DefWindowProcW

gdi32

BitBlt
SelectObject
CreateCompatibleDC
GetObjectW
GetStockObject
DeleteObject

shell32

ShellExecuteW

msvcr90

_encoded_null
memcpy
_except_handler4_common
_onexit
??3@YAXPAX@Z
??2@YAPAXI@Z
_encode_pointer
_malloc_crt
free
memset
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock

kernel32

QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetTickCount
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pressor 3,0/Adobe AIR/Versions/1.0/Resources/NPSWF64.dll
.dll windows:5 windows x64 arch:x64

ad9a10c28b07039cee460ff13509e776

Code Sign

06:f0:47:88:03:10:55:d3:1d:ef:fe:fc:d0:26:d6:c5
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-03-2017 00:00

Not After

20-03-2019 12:00

Subject

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Flash Player,O=Adobe Systems Incorporated,POSTALCODE=95110,STREET=345 Park Avenue,L=San Jose,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

3a:fb:8c:d0:97:d3:7e:c0:2e:01:8b:a0:b4:db:33:ab:58:48:1f:61:41:8f:4e:74:0b:a8:fb:29:d9:1d:7a:39
Signer

Actual PE Digest

3a:fb:8c:d0:97:d3:7e:c0:2e:01:8b:a0:b4:db:33:ab:58:48:1f:61:41:8f:4e:74:0b:a8:fb:29:d9:1d:7a:39

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\sage21920\Main\code\products\AIR\AIRCaptivePlugin\x64\Release\NPSWF64.pdb

Imports

user32

EndPaint
DestroyWindow
FillRect
LoadImageW
UnregisterClassW
GetClientRect
BeginPaint
LoadIconW
GetWindowLongW
SetWindowLongW
SetWindowPos
FrameRect
CreateWindowExW
RegisterClassW
DefWindowProcW

gdi32

BitBlt
SelectObject
CreateCompatibleDC
GetObjectW
GetStockObject
DeleteObject

shell32

ShellExecuteW

msvcr90

_initterm_e
memset
_onexit
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
_encode_pointer
_malloc_crt
_initterm
memcpy
free
_encoded_null
_decode_pointer
_amsg_exit
__C_specific_handler
__CppXcptFilter
__crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock

kernel32

QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
GetTickCount
IsDebuggerPresent
Sleep
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlVirtualUnwind
SetUnhandledExceptionFilter

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pressor 3,0/Adobe AIR/Versions/1.0/Resources/WebKit.dll
.dll windows:5 windows x86 arch:x86

6299045c5703cf0723d4895c87bd214a

Code Sign

06:f0:47:88:03:10:55:d3:1d:ef:fe:fc:d0:26:d6:c5
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-03-2017 00:00

Not After

20-03-2019 12:00

Subject

SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Flash Player,O=Adobe Systems Incorporated,POSTALCODE=95110,STREET=345 Park Avenue,L=San Jose,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

27:a2:81:b6:31:86:df:4c:cf:27:b3:e0:25:34:6f:d0:86:66:b9:e4:30:e3:a8:06:40:55:b0:55:79:d0:aa:0f
Signer

Actual PE Digest

27:a2:81:b6:31:86:df:4c:cf:27:b3:e0:25:34:6f:d0:86:66:b9:e4:30:e3:a8:06:40:55:b0:55:79:d0:aa:0f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\r\ws\St_Make\code\build\win\results\Release\info\WebKit.pdb

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetDriveTypeW
FindFirstFileW
GetModuleHandleW
Sleep
CreateDirectoryA
SetStdHandle
GetFileType
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetModuleHandleA
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetCurrentProcess
HeapDestroy
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryA
GetFullPathNameW
LCMapStringA
LCMapStringW
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
CompareStringA
SetEnvironmentVariableA
TerminateProcess
RaiseException
GetDateFormatA
GetTimeFormatA
LeaveCriticalSection
EnterCriticalSection
GetTimeZoneInformation
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetCommandLineA
GetCurrentThreadId
GetSystemTimeAsFileTime
LoadLibraryW
FormatMessageW
LocalFree
GetFileAttributesA
ExitProcess
GetVersionExW
GetLocaleInfoW
MultiByteToWideChar
GetLastError
GetCurrentDirectoryW
SetCurrentDirectoryW
LoadLibraryExW
FreeLibrary
GetProcAddress
GetFileAttributesExW
CreateFileW
GetFileSize
ReadFile
FoldStringW
GetCurrentThread
GetThreadTimes
GetSystemInfo
VirtualFree
VirtualAlloc
QueryPerformanceFrequency
QueryPerformanceCounter
DeleteFileA
CreateFileA
SetFilePointer
WriteFile
CloseHandle
InterlockedDecrement
InterlockedIncrement
GetTickCount
HeapCreate
CompareStringW

user32

FillRect
SystemParametersInfoW
GetDC
ReleaseDC
GetLastInputInfo
SendMessageW
GetPropW
ReleaseCapture
SetCapture
CallWindowProcW
SetParent
CreateWindowExW
DefWindowProcA
SetWindowLongA
SetPropW
SetWindowRgn
MoveWindow
DestroyWindow
UpdateWindow
InvalidateRect
GetFocus
IsChild
GetUpdateRect
IntersectRect
EqualRect
GetWindowRgn
DefWindowProcW
LoadCursorW
RegisterClassExW
GetKeyboardState
SetKeyboardState
ShowWindow
SetFocus
GetWindowRect
ClientToScreen
SetWindowLongW
GetWindowLongW

gdi32

ModifyWorldTransform
RestoreDC
SaveDC
CreateCompatibleDC
CreateDIBSection
SelectObject
SetGraphicsMode
GetWorldTransform
SetWorldTransform
GetClipBox
CreateRectRgn
GetRgnBox
DeleteObject
RemoveFontMemResourceEx
CreateFontIndirectW
GetTextFaceW
EnumFontFamiliesExW
GetFontUnicodeRanges
GetStockObject
DeleteEnhMetaFile
EnumEnhMetaFile
CloseEnhMetaFile
CreateEnhMetaFileW
IntersectClipRect
GetOutlineTextMetricsW
GetGlyphOutlineW
GetTextMetricsW
GetCharWidthI
GetGlyphIndicesW
GetFontData
DeleteDC
GdiFlush
BitBlt
GetClipRgn
GetGraphicsMode
ExtSelectClipRgn
ExtCreateRegion
SelectClipRgn
CreateCompatibleBitmap
ExtTextOutW
SetBkMode
SetTextAlign
SetTextColor
SetMapMode
GetCharWidth32W
GetDeviceCaps
StretchDIBits
CreateSolidBrush
AddFontMemResourceEx
GetObjectW

usp10

ScriptStringAnalyse
ScriptShape
ScriptXtoCP
ScriptPlace
ScriptItemize
ScriptFreeCache
ScriptStringFree
ScriptStringOut

urlmon

FindMimeFromData

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

winmm

timeBeginPeriod
timeEndPeriod

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

ole32

CoCreateGuid
CoTaskMemFree
CoCreateInstance

Exports

Exports

WebKitGetAPI
cairo_append_path
cairo_arc
cairo_arc_negative
cairo_clip
cairo_clip_extents
cairo_clip_preserve
cairo_close_path
cairo_copy_clip_rectangle_list
cairo_copy_page
cairo_copy_path
cairo_copy_path_flat
cairo_create
cairo_curve_to
cairo_debug_reset_static_data
cairo_destroy
cairo_device_acquire
cairo_device_destroy
cairo_device_finish
cairo_device_flush
cairo_device_get_reference_count
cairo_device_get_type
cairo_device_get_user_data
cairo_device_reference
cairo_device_release
cairo_device_set_user_data
cairo_device_status
cairo_device_to_user
cairo_device_to_user_distance
cairo_fill
cairo_fill_extents
cairo_fill_preserve
cairo_font_extents
cairo_font_face_destroy
cairo_font_face_get_reference_count
cairo_font_face_get_type
cairo_font_face_get_user_data
cairo_font_face_reference
cairo_font_face_set_user_data
cairo_font_face_status
cairo_font_options_copy
cairo_font_options_create
cairo_font_options_destroy
cairo_font_options_equal
cairo_font_options_get_antialias
cairo_font_options_get_hint_metrics
cairo_font_options_get_hint_style
cairo_font_options_get_subpixel_order
cairo_font_options_hash
cairo_font_options_merge
cairo_font_options_set_antialias
cairo_font_options_set_hint_metrics
cairo_font_options_set_hint_style
cairo_font_options_set_subpixel_order
cairo_font_options_status
cairo_format_stride_for_width
cairo_get_antialias
cairo_get_current_point
cairo_get_dash
cairo_get_dash_count
cairo_get_fill_rule
cairo_get_font_face
cairo_get_font_matrix
cairo_get_font_options
cairo_get_group_target
cairo_get_line_cap
cairo_get_line_join
cairo_get_line_width
cairo_get_matrix
cairo_get_miter_limit
cairo_get_operator
cairo_get_reference_count
cairo_get_scaled_font
cairo_get_source
cairo_get_target
cairo_get_tolerance
cairo_get_user_data
cairo_glyph_allocate
cairo_glyph_extents
cairo_glyph_free
cairo_glyph_path
cairo_has_current_point
cairo_identity_matrix
cairo_image_surface_create
cairo_image_surface_create_for_data
cairo_image_surface_create_from_png
cairo_image_surface_create_from_png_stream
cairo_image_surface_get_data
cairo_image_surface_get_format
cairo_image_surface_get_height
cairo_image_surface_get_stride
cairo_image_surface_get_width
cairo_in_clip
cairo_in_fill
cairo_in_stroke
cairo_line_to
cairo_mask
cairo_mask_surface
cairo_matrix_init
cairo_matrix_init_identity
cairo_matrix_init_rotate
cairo_matrix_init_scale
cairo_matrix_init_translate
cairo_matrix_invert
cairo_matrix_multiply
cairo_matrix_rotate
cairo_matrix_scale
cairo_matrix_transform_distance
cairo_matrix_transform_point
cairo_matrix_translate
cairo_mesh_pattern_begin_patch
cairo_mesh_pattern_curve_to
cairo_mesh_pattern_end_patch
cairo_mesh_pattern_get_control_point
cairo_mesh_pattern_get_corner_color_rgba
cairo_mesh_pattern_get_patch_count
cairo_mesh_pattern_get_path
cairo_mesh_pattern_line_to
cairo_mesh_pattern_move_to
cairo_mesh_pattern_set_control_point
cairo_mesh_pattern_set_corner_color_rgb
cairo_mesh_pattern_set_corner_color_rgba
cairo_move_to
cairo_new_path
cairo_new_sub_path
cairo_paint
cairo_paint_with_alpha
cairo_path_destroy
cairo_path_extents
cairo_pattern_add_color_stop_rgb
cairo_pattern_add_color_stop_rgba
cairo_pattern_create_for_surface
cairo_pattern_create_linear
cairo_pattern_create_mesh
cairo_pattern_create_radial
cairo_pattern_create_raster_source
cairo_pattern_create_rgb
cairo_pattern_create_rgba
cairo_pattern_destroy
cairo_pattern_get_color_stop_count
cairo_pattern_get_color_stop_rgba
cairo_pattern_get_extend
cairo_pattern_get_filter
cairo_pattern_get_linear_points
cairo_pattern_get_matrix
cairo_pattern_get_radial_circles
cairo_pattern_get_reference_count
cairo_pattern_get_rgba
cairo_pattern_get_surface
cairo_pattern_get_type
cairo_pattern_get_user_data
cairo_pattern_reference
cairo_pattern_set_extend
cairo_pattern_set_filter
cairo_pattern_set_matrix
cairo_pattern_set_user_data
cairo_pattern_status
cairo_pop_group
cairo_pop_group_to_source
cairo_push_group
cairo_push_group_with_content
cairo_raster_source_pattern_get_acquire
cairo_raster_source_pattern_get_callback_data
cairo_raster_source_pattern_get_copy
cairo_raster_source_pattern_get_finish
cairo_raster_source_pattern_get_snapshot
cairo_raster_source_pattern_set_acquire
cairo_raster_source_pattern_set_callback_data
cairo_raster_source_pattern_set_copy
cairo_raster_source_pattern_set_finish
cairo_raster_source_pattern_set_snapshot
cairo_recording_surface_create
cairo_recording_surface_get_extents
cairo_recording_surface_ink_extents
cairo_rectangle
cairo_rectangle_list_destroy
cairo_reference
cairo_region_contains_point
cairo_region_contains_rectangle
cairo_region_copy
cairo_region_create
cairo_region_create_rectangle
cairo_region_create_rectangles
cairo_region_destroy
cairo_region_equal
cairo_region_get_extents
cairo_region_get_rectangle
cairo_region_intersect
cairo_region_intersect_rectangle
cairo_region_is_empty
cairo_region_num_rectangles
cairo_region_reference
cairo_region_status
cairo_region_subtract
cairo_region_subtract_rectangle
cairo_region_translate
cairo_region_union
cairo_region_union_rectangle
cairo_region_xor
cairo_region_xor_rectangle
cairo_rel_curve_to
cairo_rel_line_to
cairo_rel_move_to
cairo_reset_clip
cairo_restore
cairo_rotate
cairo_save
cairo_scale
cairo_scaled_font_create
cairo_scaled_font_destroy
cairo_scaled_font_extents
cairo_scaled_font_get_ctm
cairo_scaled_font_get_font_face
cairo_scaled_font_get_font_matrix
cairo_scaled_font_get_font_options
cairo_scaled_font_get_reference_count
cairo_scaled_font_get_scale_matrix
cairo_scaled_font_get_type
cairo_scaled_font_get_user_data
cairo_scaled_font_glyph_extents
cairo_scaled_font_reference
cairo_scaled_font_set_user_data
cairo_scaled_font_status
cairo_scaled_font_text_extents
cairo_scaled_font_text_to_glyphs
cairo_select_font_face
cairo_set_antialias
cairo_set_dash
cairo_set_fill_rule
cairo_set_font_face
cairo_set_font_matrix
cairo_set_font_options
cairo_set_font_size
cairo_set_line_cap
cairo_set_line_join
cairo_set_line_width
cairo_set_matrix
cairo_set_miter_limit
cairo_set_operator
cairo_set_scaled_font
cairo_set_source
cairo_set_source_rgb
cairo_set_source_rgba
cairo_set_source_surface
cairo_set_tolerance
cairo_set_user_data
cairo_show_glyphs
cairo_show_page
cairo_show_text
cairo_show_text_glyphs
cairo_status
cairo_status_to_string
cairo_stroke
cairo_stroke_extents
cairo_stroke_preserve
cairo_surface_copy_page
cairo_surface_create_similar
cairo_surface_create_similar_image
cairo_surface_destroy
cairo_surface_finish
cairo_surface_flush
cairo_surface_get_content
cairo_surface_get_device
cairo_surface_get_device_offset
cairo_surface_get_device_scale
cairo_surface_get_fallback_resolution
cairo_surface_get_font_options
cairo_surface_get_mime_data
cairo_surface_get_reference_count
cairo_surface_get_type
cairo_surface_get_user_data
cairo_surface_has_show_text_glyphs
cairo_surface_map_to_image
cairo_surface_mark_dirty
cairo_surface_mark_dirty_rectangle
cairo_surface_reference
cairo_surface_set_device_offset
cairo_surface_set_device_scale
cairo_surface_set_fallback_resolution
cairo_surface_set_mime_data
cairo_surface_set_user_data
cairo_surface_show_page
cairo_surface_status
cairo_surface_supports_mime_type
cairo_surface_unmap_image
cairo_surface_write_to_png
cairo_surface_write_to_png_stream
cairo_text_cluster_allocate
cairo_text_cluster_free
cairo_text_extents
cairo_text_path
cairo_toy_font_face_create
cairo_toy_font_face_get_family
cairo_toy_font_face_get_slant
cairo_toy_font_face_get_weight
cairo_transform
cairo_translate
cairo_user_font_face_create
cairo_user_font_face_get_init_func
cairo_user_font_face_get_render_glyph_func
cairo_user_font_face_get_text_to_glyphs_func
cairo_user_font_face_get_unicode_to_glyph_func
cairo_user_font_face_set_init_func
cairo_user_font_face_set_render_glyph_func
cairo_user_font_face_set_text_to_glyphs_func
cairo_user_font_face_set_unicode_to_glyph_func
cairo_user_to_device
cairo_user_to_device_distance
cairo_win32_font_face_create_for_hfont
cairo_win32_font_face_create_for_logfontw
cairo_win32_font_face_create_for_logfontw_hfont
cairo_win32_scaled_font_done_font
cairo_win32_scaled_font_get_device_to_logical
cairo_win32_scaled_font_get_logical_to_device
cairo_win32_scaled_font_get_metrics_factor
cairo_win32_scaled_font_select_font
cairo_win32_surface_create
cairo_win32_surface_create_with_ddb
cairo_win32_surface_create_with_dib
cairo_win32_surface_get_dc
cairo_win32_surface_get_image

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 860KB - Virtual size: 859KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unwante
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pressor 3,0/Adobe AIR/Versions/1.0/Resources/WebKit/LGPL License.txt
Pressor 3,0/Adobe AIR/Versions/1.0/Resources/WebKit/Notice WebKit.txt
Pressor 3,0/Color Vault/misc.ssf
Pressor 3,0/META-INF/AIR/application.xml
.xml
Pressor 3,0/META-INF/AIR/hash
Pressor 3,0/META-INF/signatures.xml
Pressor 3,0/Pressor 3.exe
.exe windows:5 windows x86 arch:x86

0149ed03f5810d92496c2f5e11b99ce2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\r\ws\St_Make\code\build\win\results\Release\info\CaptiveAppEntry.pdb

Imports

kernel32

SetStdHandle
GetVersionExW
ExitProcess
GetUserDefaultUILanguage
GetModuleHandleW
WriteConsoleW
GetStdHandle
GetCommandLineW
HeapAlloc
GetProcessHeap
GetFullPathNameW
HeapFree
GetFileAttributesW
LoadLibraryW
GetProcAddress
CreateFileW
InitializeCriticalSection
GetLastError
DuplicateHandle
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetFileType
GetCommandLineA
GetStartupInfoA
CloseHandle
SetHandleCount
DeleteCriticalSection
Sleep
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetLastError
InitializeCriticalSectionAndSpinCount
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
CreateFileA
GetModuleFileNameW

shell32

CommandLineToArgvW

user32

FindWindowA
ShowWindow
MessageBoxExW

shlwapi

PathAppendW
StrCmpW
PathRemoveFileSpecW

msi

ord90

Exports

Exports

AmdPowerXpressRequestBetterBatteryLife
NvOptimusDisablement

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pressor 3,0/Pressor.swf
Pressor 3,0/README.txt
Pressor 3,0/ffdec.exe
.exe windows:4 windows x86 arch:x86

6011984d7c1f1b97a34d7517a498bff8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA

kernel32

CloseHandle
CreateMutexA
CreateProcessA
ExitProcess
FindResourceExA
FormatMessageA
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetEnvironmentVariableA
GetExitCodeProcess
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GlobalMemoryStatusEx
LoadResource
LocalFree
LockResource
SetEnvironmentVariableA
SetLastError
SetUnhandledExceptionFilter
WaitForSingleObject

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_chdir
_close
_findclose
_findfirst
_findnext
_iob
_itoa
_onexit
_open
_read
_setmode
_stat
atexit
atoi
fclose
fopen
fprintf
fwrite
memset
printf
puts
signal
strcat
strchr
strcmp
strcpy
strlen
strncat
strncpy
strpbrk
strrchr
strstr
strtok

shell32

ShellExecuteA

user32

CreateWindowExA
DispatchMessageA
EnumWindows
FindWindowExA
GetMessageA
GetSystemMetrics
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
KillTimer
LoadImageA
MessageBoxA
PostQuitMessage
SendMessageA
SetForegroundWindow
SetTimer
SetWindowPos
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 358KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Pressor 3,0/ffdec.jar
.jar
Pressor 3,0/howtocustom.txt
Pressor 3,0/lib/JavactiveX.jar
.jar
Pressor 3,0/lib/LZMA.jar
.jar
Pressor 3,0/lib/avi.jar
.jar
Pressor 3,0/lib/avi.montemedia.license.txt
Pressor 3,0/lib/cmykjpeg.jar
.jar
Pressor 3,0/lib/ffdec_lib.jar
.jar
Pressor 3,0/lib/ffdec_lib.license.txt
Pressor 3,0/lib/flamingo-6.2.jar
.jar
Pressor 3,0/lib/flamingo.license.txt
Pressor 3,0/lib/flashdebugger.jar
.jar
Pressor 3,0/lib/gif.jar
.jar
Pressor 3,0/lib/gif.license.txt
Pressor 3,0/lib/gnujpdf.jar
.jar
Pressor 3,0/lib/graphs.jar
.jar
Pressor 3,0/lib/jargs.jar
.jar
Pressor 3,0/lib/jl.license.txt
Pressor 3,0/lib/jl1.0.1.jar
.jar
Pressor 3,0/lib/jna-3.5.1.jar
.jar
Pressor 3,0/lib/jna.license.txt
Pressor 3,0/lib/jpacker.jar
.jar .js polyglot
Pressor 3,0/lib/jpacker.license.txt
Pressor 3,0/lib/jpproxy.jar
.jar
Pressor 3,0/lib/jpproxy.muffin.license.txt
Pressor 3,0/lib/jsyntaxpane-0.9.5.jar
.jar
Pressor 3,0/lib/jsyntaxpane.license.txt
Pressor 3,0/lib/minimal-json-0.9.5.jar
.jar
Pressor 3,0/lib/minimal-json.license.txt
Pressor 3,0/lib/nellymoser.jar
.jar
Pressor 3,0/lib/nellymoser.license.txt
Pressor 3,0/lib/sfntly.jar
.jar
Pressor 3,0/lib/sfntly.license.txt
Pressor 3,0/lib/substance-6.2.jar
.jar
Pressor 3,0/lib/substance-flamingo-6.2.jar
.jar
Pressor 3,0/lib/substance-flamingo.license.txt
Pressor 3,0/lib/substance.license.txt
Pressor 3,0/lib/tablelayout.jar
.jar
Pressor 3,0/lib/treetable.jar
.jar
Pressor 3,0/lib/trident-6.2.jar
.jar
Pressor 3,0/lib/trident.license.txt
Pressor 3,0/lib/ttf.doubletype.license.txt
Pressor 3,0/lib/ttf.fontastic.license.txt
Pressor 3,0/lib/ttf.jar
.jar
Pressor 3,0/themes/Color Vault/Color Vault.png
.png
Pressor 3,0/themes/Color Vault/Color Vault23500.mp3
Pressor 3,0/themes/Color Vault/back.mp3
Pressor 3,0/themes/Color Vault/click.mp3
Pressor 3,0/themes/Color Vault/colors.json
Pressor 3,0/themes/Color Vault/hover.mp3
Pressor 3,0/themes/Color Vault/settings.mp3
Pressor 3,0/themes/Soldier/Soldier.png
.png
Pressor 3,0/themes/Soldier/Soldier598.mp3
Pressor 3,0/themes/Soldier/back.mp3
Pressor 3,0/themes/Soldier/click.mp3
Pressor 3,0/themes/Soldier/colors.json
Pressor 3,0/themes/Soldier/hover.mp3
Pressor 3,0/themes/Soldier/settings.mp3
Pressor 3,0/themes/Street Fighter/Street Fighter.mp3
Pressor 3,0/themes/Street Fighter/Street Fighter.png
.jpg
Pressor 3,0/themes/Street Fighter/back.mp3
Pressor 3,0/themes/Street Fighter/click.mp3
Pressor 3,0/themes/Street Fighter/colors.json
Pressor 3,0/themes/Street Fighter/hover.mp3
Pressor 3,0/themes/Street Fighter/settings.mp3
Pressor 3,0/themes/Supreme/Supreme.mp3
Pressor 3,0/themes/Supreme/Supreme.png
.jpg
Pressor 3,0/themes/Supreme/back.mp3
Pressor 3,0/themes/Supreme/click.mp3
Pressor 3,0/themes/Supreme/colors.json
Pressor 3,0/themes/Supreme/hover.mp3
Pressor 3,0/themes/Supreme/settings.mp3
Pressor 3,0/themes/colors.json
Pressor 3,0/themes/ff7 remake/colors.json

Sharing

General

Malware Config

Signatures

Files

e94f9e66aa1a5b0c1abbbc90afd5c1ad

Code Sign

06:f0:47:88:03:10:55:d3:1d:ef:fe:fc:d0:26:d6:c5Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

ea:c6:1c:25:c1:11:92:34:0e:aa:57:a7:ab:90:08:30:0f:a5:58:48:bd:ca:fc:bd:45:8c:b5:4f:04:1c:b9:e6Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ole32

oleaut32

ws2_32

version

crypt32

winmm

oleacc

user32

gdi32

msimg32

advapi32

comdlg32

shell32

shlwapi

wininet

msi

urlmon

comctl32

mscms

secur32

dsound

iphlpapi

dnsapi

winspool.drv

Exports

Exports

Sections

.text Size: 12.5MB - Virtual size: 12.5MB

.rodata Size: 4KB - Virtual size: 4KB

.rdata Size: 6.6MB - Virtual size: 6.6MB

.data Size: 427KB - Virtual size: 1.4MB

.rsrc Size: 209KB - Virtual size: 208KB

.reloc Size: 869KB - Virtual size: 868KB

0149ed03f5810d92496c2f5e11b99ce2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

shell32

user32

shlwapi

msi

Exports

Exports

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 984B

.reloc Size: 4KB - Virtual size: 4KB

b8ee5247fe5026a539c47b8fccacd597

Code Sign

06:f0:47:88:03:10:55:d3:1d:ef:fe:fc:d0:26:d6:c5
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

ea:c6:1c:25:c1:11:92:34:0e:aa:57:a7:ab:90:08:30:0f:a5:58:48:bd:ca:fc:bd:45:8c:b5:4f:04:1c:b9:e6
Signer

.text
Size: 12.5MB - Virtual size: 12.5MB

.rodata
Size: 4KB - Virtual size: 4KB

.rdata
Size: 6.6MB - Virtual size: 6.6MB

.data
Size: 427KB - Virtual size: 1.4MB

.rsrc
Size: 209KB - Virtual size: 208KB

.reloc
Size: 869KB - Virtual size: 868KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 4KB - Virtual size: 4KB

06:f0:47:88:03:10:55:d3:1d:ef:fe:fc:d0:26:d6:c5
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

ee:f1:c7:7a:e9:4b:3c:30:70:10:48:cc:6e:c1:49:a3:ca:e5:a1:fb:ac:10:b6:9f:de:ec:10:8d:48:55:f4:46
Signer

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 29KB - Virtual size: 28KB

.reloc
Size: 1024B - Virtual size: 592B

06:f0:47:88:03:10:55:d3:1d:ef:fe:fc:d0:26:d6:c5
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

3a:fb:8c:d0:97:d3:7e:c0:2e:01:8b:a0:b4:db:33:ab:58:48:1f:61:41:8f:4e:74:0b:a8:fb:29:d9:1d:7a:39
Signer

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 512B - Virtual size: 372B

.rsrc
Size: 29KB - Virtual size: 28KB

.reloc
Size: 512B - Virtual size: 36B

06:f0:47:88:03:10:55:d3:1d:ef:fe:fc:d0:26:d6:c5
Certificate