039570b45da964f8cea84a5ddd0f0312_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

039570b45da964f8cea84a5ddd0f0312_JaffaCakes118
Size

1.4MB
MD5

039570b45da964f8cea84a5ddd0f0312
SHA1

739b26d745cfaa94ccdc35dde475669c735412b8
SHA256

8d815300864883bdb467688ddfd2481e155d5505cb124319420e81c9f83f58cd
SHA512

027225c6b3b424f170322eebe2419be13f6677d355b4be802adc313c5fdfdfaaf38277042e1d8f91eb99a66db7e95bbd41526307766217efb22cb89713127281
SSDEEP

24576:M4bzv9Wd88GhTCMh9reTclhrG/nIWiFy8SQ81KXbMZqhI3oQpIN5X0o3C:M0ZWdkhTC8yv/IWiUkgoyoQIx0oS

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/PortableApps.comInstaller/App/nsis/Plugins/md5dll.dll	acprotect

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/PortableApps.comInstaller/App/bin/MakeHeader.exe	upx
static1/unpack001/PortableApps.comInstaller/App/nsis/Plugins/md5dll.dll	upx

Unsigned PE 37 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PortableApps.comInstaller/App/7zip/7z.dll
unpack001/PortableApps.comInstaller/App/7zip/7z.exe
unpack001/PortableApps.comInstaller/App/bin/MakeHeader.exe
unpack002/out.upx
unpack001/PortableApps.comInstaller/App/nsis/Bin/LibraryLocal.exe
unpack001/PortableApps.comInstaller/App/nsis/Bin/MakeLangId.exe
unpack001/PortableApps.comInstaller/App/nsis/Bin/RegTool.bin
unpack001/PortableApps.comInstaller/App/nsis/Contrib/UIs/modern.exe
unpack001/PortableApps.comInstaller/App/nsis/Contrib/UIs/modern_headerbmp.exe
unpack001/PortableApps.comInstaller/App/nsis/Contrib/UIs/modern_headerbmpr.exe
unpack001/PortableApps.comInstaller/App/nsis/Contrib/UIs/modern_nodesc.exe
unpack001/PortableApps.comInstaller/App/nsis/Contrib/UIs/modern_smalldesc.exe
unpack001/PortableApps.comInstaller/App/nsis/Plugins/ExecDos.dll
unpack001/PortableApps.comInstaller/App/nsis/Plugins/FindProcDLL.dll
unpack001/PortableApps.comInstaller/App/nsis/Plugins/InstallOptions.dll
unpack001/PortableApps.comInstaller/App/nsis/Plugins/LangDLL.dll
unpack001/PortableApps.comInstaller/App/nsis/Plugins/MoreInfo.dll
unpack001/PortableApps.comInstaller/App/nsis/Plugins/System.dll
unpack001/PortableApps.comInstaller/App/nsis/Plugins/TypeLib.dll
unpack001/PortableApps.comInstaller/App/nsis/Plugins/inetc.dll
unpack001/PortableApps.comInstaller/App/nsis/Plugins/md5dll.dll
unpack003/out.upx
unpack001/PortableApps.comInstaller/App/nsis/Plugins/nsDialogs.dll
unpack001/PortableApps.comInstaller/App/nsis/Plugins/nsisunz.dll
unpack001/PortableApps.comInstaller/App/nsis/Plugins/registry.dll
unpack001/PortableApps.comInstaller/App/nsis/Plugins/w7tbp.dll
unpack001/PortableApps.comInstaller/App/nsis/Stubs/bzip2
unpack001/PortableApps.comInstaller/App/nsis/Stubs/bzip2_solid
unpack001/PortableApps.comInstaller/App/nsis/Stubs/lzma
unpack001/PortableApps.comInstaller/App/nsis/Stubs/lzma_solid
unpack001/PortableApps.comInstaller/App/nsis/Stubs/zlib
unpack001/PortableApps.comInstaller/App/nsis/Stubs/zlib_solid
unpack001/PortableApps.comInstaller/App/nsis/makensis.exe
unpack004/$PLUGINSDIR/InstallOptions.dll
unpack004/$PLUGINSDIR/RealProgress.dll
unpack004/$PLUGINSDIR/dialogsEx.dll
unpack004/$PLUGINSDIR/execDos.dll

Files

039570b45da964f8cea84a5ddd0f0312_JaffaCakes118
.rar
PortableApps.comInstaller/App/7zip/7z.dll
.dll windows:4 windows x86 arch:x86

6121a49841bf6f5b3700c1ebbb28be41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharPrevExA
CharPrevA
CharNextA
CharLowerW
CharLowerA
CharUpperW
CharUpperA

oleaut32

SysFreeString
SysAllocStringByteLen
VariantCopy
VariantClear
SysAllocString

msvcrt

_adjust_fdiv
_initterm
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
strcmp
memset
memcmp
_purecall
memmove
memcpy
__CxxFrameHandler
free
_CxxThrowException
malloc

kernel32

InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreA
ResetEvent
SetEvent
CreateEventA
WaitForSingleObject
VirtualFree
VirtualAlloc
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FileTimeToLocalFileTime
DeleteCriticalSection
LocalFileTimeToFileTime
GetVersionExA
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
FileTimeToDosDateTime
DosDateTimeToFileTime
GetModuleHandleA
GetProcAddress
GetSystemInfo
CompareFileTime
WriteFile
ReadFile
MultiByteToWideChar
WideCharToMultiByte
GetLastError
CloseHandle
SetFileAttributesA
DeleteFileA
GetTempPathA
GetTempFileNameA
CreateFileA

Exports

Exports

CreateObject
GetHandlerProperty
GetHandlerProperty2
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetLargePageMode

Sections

.text
Size: 520KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/7zip/7z.exe
.exe windows:4 windows x86 arch:x86

6ff17e15b4dd569b039973ccf414da18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharPrevA
CharUpperW
CharNextA
CharUpperA

oleaut32

SysStringByteLen
VariantCopy
VariantClear
SysFreeString
SysAllocString

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
fprintf
memset
memcpy
fputc
fputs
fflush
fgetc
fclose
_iob
free
malloc
memmove
strlen
memcmp
_purecall
__CxxFrameHandler
_CxxThrowException
_isatty
_fileno

kernel32

VirtualAlloc
GetTickCount
VirtualFree
WaitForSingleObject
SetEvent
InitializeCriticalSection
OpenFileMappingA
GetProcessTimes
LocalFree
MapViewOfFile
UnmapViewOfFile
OpenEventA
GetStdHandle
GetSystemTime
SystemTimeToFileTime
FileTimeToDosDateTime
GetModuleHandleA
GlobalMemoryStatus
GetSystemInfo
FileTimeToSystemTime
CompareFileTime
GetProcAddress
GetCurrentProcess
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
GetFileSize
CreateFileA
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
GetTempFileNameW
GetTempFileNameA
GetTempPathW
GetTempPathA
SearchPathW
SearchPathA
SetConsoleCtrlHandler
FileTimeToLocalFileTime
GetCommandLineW
SetFileApisToOEM
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
LoadLibraryExA
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
GetCurrentDirectoryW
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
GetWindowsDirectoryW
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
SetFileAttributesW
RemoveDirectoryW
MoveFileW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
lstrlenA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetCurrentDirectoryW

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/AppInfo/appicon.ico
PortableApps.comInstaller/App/AppInfo/appicon_128.png
.png
PortableApps.comInstaller/App/AppInfo/appicon_16.png
.png
PortableApps.comInstaller/App/AppInfo/appicon_32.png
.png
PortableApps.comInstaller/App/AppInfo/appinfo.ini
PortableApps.comInstaller/App/DefaultData/settings.ini
PortableApps.comInstaller/App/bin/MakeHeader.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/default_bits/PortableApps.comInstallerHeader.bmp
PortableApps.comInstaller/App/default_bits/PortableApps.comInstallerHeaderRTL.bmp
PortableApps.comInstaller/App/default_bits/appicon.ico
PortableApps.comInstaller/App/default_bits/appicon_16.png
.png
PortableApps.comInstaller/App/default_bits/appicon_32.png
.png
PortableApps.comInstaller/App/default_bits/appinfo.ini
PortableApps.comInstaller/App/installer/PortableApps.comInstaller.bmp
PortableApps.comInstaller/App/installer/PortableApps.comInstaller.ico
PortableApps.comInstaller/App/installer/PortableApps.comInstaller.nsi
PortableApps.comInstaller/App/installer/PortableApps.comInstallerConfig.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Afrikaans.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Albanian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Arabic.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Armenian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Basque.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Belarusian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Bosnian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Breton.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Bulgarian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Catalan.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Cibemba.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Croatian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Czech.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Danish.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Dutch.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Efik.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/English.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/EnglishGB.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Esperanto.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Estonian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Farsi.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Finnish.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/French.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Galician.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Georgian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/German.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Greek.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Hebrew.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Hungarian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Icelandic.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Igbo.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Indonesian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Irish.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Italian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Japanese.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Khmer.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Korean.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Kurdish.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Latvian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Lithuanian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Luxembourgish.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Macedonian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Malagasy.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Malay.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Mongolian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Norwegian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/NorwegianNynorsk.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Pashto.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Polish.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Portuguese.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/PortugueseBR.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Romanian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Russian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Serbian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/SerbianLatin.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/SimpChinese.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Slovak.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Slovenian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Spanish.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/SpanishInternational.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Swahili.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Swedish.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Thai.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/TradChinese.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Turkish.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Ukrainian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Uzbek.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Valencian.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Vietnamese.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Welsh.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerLanguages/Yoruba.nsh
PortableApps.comInstaller/App/installer/PortableApps.comInstallerMoveFiles.nsh
PortableApps.comInstaller/App/nsis/Bin/LibraryLocal.exe
.exe windows:5 windows x86 arch:x86

9a85af73d971a230a5055d0a7e405934

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

LoadTypeLi

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GetProcAddress
GetProcessHeap
SetEndOfFile
GetFullPathNameW
SetLastError
UnmapViewOfFile
MapViewOfFile
CloseHandle
GetLastError
CreateFileMappingW
CreateFileW
GlobalFree
GlobalAlloc
GetModuleFileNameW
Sleep
MultiByteToWideChar
ReadFile
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
HeapFree
RtlUnwind
HeapAlloc
WriteConsoleW
GetFileType
GetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeW
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
GetStringTypeA
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStartupInfoA
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
GetModuleHandleA
ExitProcess
GetModuleFileNameA
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
LoadLibraryA
CreateFileA

Sections

.text
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PortableApps.comInstaller/App/nsis/Bin/MakeLangId.exe
.exe windows:5 windows x86 arch:x86

1785160af8c96b7bf447f84fc5f04a62

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
ExitProcess
GetModuleHandleW
GlobalLock
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
LCMapStringW
GlobalUnlock
GetStartupInfoW
SetUnhandledExceptionFilter
Sleep
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte

user32

DialogBoxParamW
EndDialog
PostQuitMessage
SendDlgItemMessageW
wsprintfW
SetDlgItemTextW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SendMessageW

comctl32

ord17

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Bin/RegTool.bin
.exe windows:5 windows x86 arch:x86

cde62e7f485f127cc80c3ffdb9157507

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryW
GetModuleFileNameW
GlobalAlloc
FreeLibrary
LoadLibraryExW
lstrcmpiA
lstrlenA
CreateFileW
GetFileAttributesW
WriteFile
SetFilePointer
CreateProcessW
ReadFile
GetFileSize
lstrcatW
GetWindowsDirectoryW
WideCharToMultiByte
GetShortPathNameW
lstrcpyW
SetErrorMode
lstrlenW
ExitProcess
GetCommandLineW
CloseHandle
WaitForSingleObject
GlobalFree
GetModuleHandleW
lstrcpyA
GetProcAddress

oleaut32

LoadTypeLi
RegisterTypeLi

advapi32

RegQueryValueExW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyExW
RegCloseKey

user32

wsprintfW
CharNextA
wsprintfA
CharNextW

ole32

OleInitialize
OleUninitialize

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PortableApps.comInstaller/App/nsis/COPYING
PortableApps.comInstaller/App/nsis/Contrib/Graphics/Checks/modern.bmp
PortableApps.comInstaller/App/nsis/Contrib/Language files/Afrikaans.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Afrikaans.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Albanian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Albanian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Arabic.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Arabic.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Armenian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Armenian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Basque.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Basque.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Belarusian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Belarusian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Bosnian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Bosnian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Breton.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Breton.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Bulgarian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Bulgarian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Catalan.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Catalan.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Cibemba.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Cibemba.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Croatian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Croatian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Czech.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Czech.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Danish.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Danish.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Dutch.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Dutch.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Efik.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Efik.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/English.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/English.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/EnglishGB.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/EnglishGB.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Esperanto.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Esperanto.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Estonian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Estonian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Farsi.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Farsi.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Finnish.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Finnish.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/French.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/French.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Galician.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Galician.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Georgian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Georgian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/German.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/German.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Greek.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Greek.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Hebrew.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Hebrew.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Hungarian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Hungarian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Icelandic.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Icelandic.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Igbo.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Igbo.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Indonesian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Indonesian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Irish.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Irish.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Italian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Italian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Japanese.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Japanese.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Khmer.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Khmer.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Korean.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Korean.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Kurdish.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Kurdish.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Latvian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Latvian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Lithuanian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Lithuanian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Luxembourgish.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Luxembourgish.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Macedonian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Macedonian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Malagasy.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Malagasy.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Malay.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Malay.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Mongolian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Mongolian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Norwegian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Norwegian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/NorwegianNynorsk.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/NorwegianNynorsk.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Pashto.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Pashto.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Polish.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Polish.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Portuguese.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Portuguese.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/PortugueseBR.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/PortugueseBR.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Romanian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Romanian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Russian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Russian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Serbian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Serbian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/SerbianLatin.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/SerbianLatin.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/SimpChinese.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/SimpChinese.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Slovak.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Slovak.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Slovenian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Slovenian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Spanish.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Spanish.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/SpanishInternational.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/SpanishInternational.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Swahili.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Swahili.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Swedish.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Swedish.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Thai.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Thai.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/TradChinese.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/TradChinese.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Turkish.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Turkish.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Ukrainian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Ukrainian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Uzbek.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Uzbek.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Valencian.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Valencian.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Vietnamese.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Vietnamese.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Welsh.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Welsh.nsh
PortableApps.comInstaller/App/nsis/Contrib/Language files/Yoruba.nlf
PortableApps.comInstaller/App/nsis/Contrib/Language files/Yoruba.nsh
PortableApps.comInstaller/App/nsis/Contrib/Modern UI/System.nsh
PortableApps.comInstaller/App/nsis/Contrib/Modern UI/ioSpecial.ini
PortableApps.comInstaller/App/nsis/Contrib/UIs/modern.exe
.exe windows:5 windows x86 arch:x86

205aa579d6fd2fb6ef62ffe0143be398

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetModuleHandleW
ExitProcess

comctl32

ord17

user32

ShowWindow
SetWindowPos
SetWindowTextW
GetWindowRect
GetDlgItem
CreateDialogParamW
DestroyWindow
PostQuitMessage
EndDialog
DialogBoxParamW
SendMessageW
ScreenToClient

gdi32

CreateBrushIndirect

Sections

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Contrib/UIs/modern_headerbmp.exe
.exe windows:5 windows x86 arch:x86

205aa579d6fd2fb6ef62ffe0143be398

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetModuleHandleW
ExitProcess

comctl32

ord17

user32

ShowWindow
SetWindowPos
SetWindowTextW
GetWindowRect
GetDlgItem
CreateDialogParamW
DestroyWindow
PostQuitMessage
EndDialog
DialogBoxParamW
SendMessageW
ScreenToClient

gdi32

CreateBrushIndirect

Sections

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Contrib/UIs/modern_headerbmpr.exe
.exe windows:5 windows x86 arch:x86

205aa579d6fd2fb6ef62ffe0143be398

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetModuleHandleW
ExitProcess

comctl32

ord17

user32

ShowWindow
SetWindowPos
SetWindowTextW
GetWindowRect
GetDlgItem
CreateDialogParamW
DestroyWindow
PostQuitMessage
EndDialog
DialogBoxParamW
SendMessageW
ScreenToClient

gdi32

CreateBrushIndirect

Sections

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Contrib/UIs/modern_nodesc.exe
.exe windows:5 windows x86 arch:x86

205aa579d6fd2fb6ef62ffe0143be398

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetModuleHandleW
ExitProcess

comctl32

ord17

user32

ShowWindow
SetWindowPos
SetWindowTextW
GetWindowRect
GetDlgItem
CreateDialogParamW
DestroyWindow
PostQuitMessage
EndDialog
DialogBoxParamW
SendMessageW
ScreenToClient

gdi32

CreateBrushIndirect

Sections

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Contrib/UIs/modern_smalldesc.exe
.exe windows:5 windows x86 arch:x86

205aa579d6fd2fb6ef62ffe0143be398

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetModuleHandleW
ExitProcess

comctl32

ord17

user32

ShowWindow
SetWindowPos
SetWindowTextW
GetWindowRect
GetDlgItem
CreateDialogParamW
DestroyWindow
PostQuitMessage
EndDialog
DialogBoxParamW
SendMessageW
ScreenToClient

gdi32

CreateBrushIndirect

Sections

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Include/Colors.nsh
PortableApps.comInstaller/App/nsis/Include/FileFunc.nsh
PortableApps.comInstaller/App/nsis/Include/InstallOptions.nsh
PortableApps.comInstaller/App/nsis/Include/LangFile.nsh
PortableApps.comInstaller/App/nsis/Include/Library.nsh
PortableApps.comInstaller/App/nsis/Include/LogicLib.nsh
PortableApps.comInstaller/App/nsis/Include/MUI.nsh
PortableApps.comInstaller/App/nsis/Include/MUI2.nsh
PortableApps.comInstaller/App/nsis/Include/Memento.nsh
.ps1
PortableApps.comInstaller/App/nsis/Include/MultiUser.nsh
.ps1
PortableApps.comInstaller/App/nsis/Include/Registry.nsh
PortableApps.comInstaller/App/nsis/Include/Sections.nsh
PortableApps.comInstaller/App/nsis/Include/StrFunc.nsh
.ps1
PortableApps.comInstaller/App/nsis/Include/TextFunc.nsh
PortableApps.comInstaller/App/nsis/Include/TextReplace.nsh
PortableApps.comInstaller/App/nsis/Include/UpgradeDLL.nsh
PortableApps.comInstaller/App/nsis/Include/Util.nsh
PortableApps.comInstaller/App/nsis/Include/VB6RunTime.nsh
PortableApps.comInstaller/App/nsis/Include/VPatchLib.nsh
PortableApps.comInstaller/App/nsis/Include/Win/WinDef.nsh
PortableApps.comInstaller/App/nsis/Include/Win/WinError.nsh
PortableApps.comInstaller/App/nsis/Include/Win/WinNT.nsh
PortableApps.comInstaller/App/nsis/Include/Win/WinUser.nsh
PortableApps.comInstaller/App/nsis/Include/WinCore.nsh
PortableApps.comInstaller/App/nsis/Include/WinMessages.nsh
PortableApps.comInstaller/App/nsis/Include/WinVer.nsh
PortableApps.comInstaller/App/nsis/Include/WordFunc.nsh
PortableApps.comInstaller/App/nsis/Include/nsDialogs.nsh
.ps1
PortableApps.comInstaller/App/nsis/Include/x64.nsh
PortableApps.comInstaller/App/nsis/Plugins/ExecDos.dll
.dll windows:4 windows x86 arch:x86

b7d63cf7c246ad7d64d63276fee3c6df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
TerminateProcess
Sleep
lstrcatW
lstrcmpiW
ReadFile
GetExitCodeProcess
PeekNamedPipe
CreateFileW
FlushFileBuffers
WriteFile
lstrlenW
CloseHandle
CreateProcessW
DuplicateHandle
GetCurrentProcess
CreatePipe
GlobalAlloc
lstrcpynW
GetExitCodeThread
WaitForSingleObject
lstrcpyW
CreateThread

user32

wsprintfW
GetClassNameW
GetDlgItem
FindWindowExW
SendMessageW

Exports

Exports

exec
isdone
wait

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Plugins/FindProcDLL.dll
.dll windows:4 windows x86 arch:x86

e26d7460d0c04056b9226a899477ba4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
CloseHandle
OpenProcess
LoadLibraryW
GetProcAddress
GetVersionExW
GlobalFree
lstrcpyW
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
VirtualAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
FlushFileBuffers

Exports

Exports

FindProc

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Plugins/InstallOptions.dll
.dll windows:5 windows x86 arch:x86

cd90e33ffbc335413a25300c682c83df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GetModuleHandleW
GlobalLock
GlobalUnlock
GetCurrentDirectoryW
SetCurrentDirectoryW
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrcatW
WritePrivateProfileStringW
lstrcpynW
lstrlenW
lstrcpyW
GlobalFree
GlobalAlloc

user32

OpenClipboard
DestroyIcon
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
SetWindowLongW
GetClientRect
SetWindowRgn
LoadIconW
LoadImageW
CreateWindowExW
MapDialogRect
GetClipboardData
GetWindowRect
CreateDialogParamW
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
SetCursor
DrawTextW
GetWindowLongW
DrawFocusRect
CallWindowProcW
PostMessageW
wsprintfW
CharNextW
MessageBoxW
CloseClipboard
GetDlgCtrlID
MapWindowPoints
SetWindowPos
PtInRect
GetWindowTextW
SetWindowTextW
SendMessageW
DestroyWindow

gdi32

SelectObject
CreateRectRgn
GetObjectW
CombineRgn
DeleteObject
CreateCompatibleDC
GetDIBits
SetTextColor

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
SHGetDesktopFolder

comdlg32

GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Plugins/LangDLL.dll
.dll windows:5 windows x86 arch:x86

e981c0ab92cb1f191bb5e23392e14796

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrlenW
GlobalAlloc
lstrcmpW
GetModuleHandleW
MulDiv
lstrcpyW
lstrcpynW

user32

SetWindowTextW
SetDlgItemTextW
EndDialog
SendDlgItemMessageW
DialogBoxParamW
LoadIconW
SendMessageW
ShowWindow
GetDC

gdi32

CreateFontIndirectW
GetDeviceCaps
DeleteObject

Exports

Exports

LangDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 729B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Plugins/MoreInfo.dll
.dll windows:4 windows x86 arch:x86

149adf074d317fbf0d2f17314bd18969

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

t:\untgz\MoreInfo\SRC\Release\MoreInfo.pdb

Imports

user32

wsprintfW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

lstrlenW
lstrcpyW
lstrcpynW
lstrcatW
GlobalAlloc
GetSystemDirectoryW
GlobalFree

Exports

Exports

GetComments
GetCompanyName
GetFileDescription
GetFileVersion
GetInternalName
GetLegalCopyright
GetLegalTrademarks
GetOSUserinterfaceLanguage
GetOriginalFilename
GetPrivateBuild
GetProductName
GetProductVersion
GetSpecialBuild
GetUserDefined

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Plugins/System.dll
.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Plugins/TypeLib.dll
.dll windows:5 windows x86 arch:x86

a0d597336f873f6e7c5eef75af720ebf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
lstrcpynW
GlobalAlloc
GlobalFree

user32

wsprintfW

oleaut32

LoadTypeLibEx
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi

Exports

Exports

GetLibVersion
Register
UnRegister

Sections

.text
Size: 1024B - Virtual size: 577B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Plugins/inetc.dll
.dll windows:4 windows x86 arch:x86

1fc878f5ced14d8755289a62f36504dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcstol
_adjust_fdiv
malloc
_initterm
free
wcsrchr
wcstoul
memset
wcsstr
wcschr
strlen

kernel32

CloseHandle
WideCharToMultiByte
CreateThread
WaitForSingleObject
TerminateThread
GetModuleHandleW
MulDiv
lstrcpyW
GlobalAlloc
LoadLibraryW
GetProcAddress
lstrlenW
WriteFile
ReadFile
lstrcmpW
lstrcpynW
GetLastError
GlobalFree
lstrcmpiW
DeleteFileW
SleepEx
SetFilePointer
GetTickCount
lstrcatW
GetFileSize
CreateFileW

user32

MessageBoxW
GetParent
ShowWindow
SetWindowLongW
GetWindowLongW
IsWindow
SendDlgItemMessageW
GetDlgItem
PostMessageW
GetWindowTextW
SendMessageW
SetDlgItemTextW
SetWindowPos
SystemParametersInfoW
GetClientRect
GetWindowRect
SetTimer
LoadIconW
UpdateWindow
DestroyWindow
KillTimer
RedrawWindow
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
IsWindowVisible
EnableWindow
CreateDialogParamW
FindWindowExW
wsprintfW
SetWindowTextW

wininet

HttpSendRequestW
HttpSendRequestExW
HttpQueryInfoW
FtpCreateDirectoryW
FtpOpenFileW
InternetGetLastResponseInfoW
InternetSetFilePointer
InternetSetOptionW
InternetQueryOptionW
InternetCloseHandle
InternetErrorDlg
HttpOpenRequestW
HttpAddRequestHeadersW
HttpEndRequestW
InternetConnectW
InternetCrackUrlW
InternetOpenW
InternetReadFile
InternetWriteFile

comctl32

ord17

Exports

Exports

get
head
post
put

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Plugins/md5dll.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

GetFileMD5
GetMD5
GetMD5File
GetMD5Random
GetMD5String

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Plugins/nsDialogs.dll
.dll windows:5 windows x86 arch:x86

9ea5bdc8c90dfcffe309465c26c89758

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
MulDiv
lstrlenW
HeapFree
GetProcessHeap
lstrcmpiW
HeapReAlloc
lstrcpynW
GetFileAttributesW
lstrcpyW
GetCurrentDirectoryW
SetCurrentDirectoryW
HeapAlloc
GlobalFree

user32

LoadCursorW
RemovePropW
DrawFocusRect
GetPropW
DrawTextW
GetWindowTextW
GetDlgItem
SetWindowLongW
SetWindowPos
CreateDialogParamW
MapWindowPoints
GetWindowRect
SetCursor
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
GetClientRect
CharPrevW
CallWindowProcW
SetPropW
DestroyWindow
MapDialogRect
CharNextW
SendMessageW
GetWindowLongW

gdi32

SetTextColor

shell32

SHGetPathFromIDListW
SHBrowseForFolderW

comdlg32

GetSaveFileNameW
CommDlgExtendedError
GetOpenFileNameW

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 590B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Plugins/nsisunz.dll
.dll windows:5 windows x86 arch:x86

1b37562e8104552588ae892e11fcdff2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryW
lstrcpyW
GetVersion
lstrlenW
lstrcatW
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
lstrcpynW
lstrcmpiW
lstrcmpW
GlobalFree
GlobalAlloc
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
CloseHandle
WriteFile
GetConsoleCP
GetConsoleMode
RtlUnwind
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileW
InitializeCriticalSectionAndSpinCount
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
SetEndOfFile
GetProcessHeap
GetLocaleInfoA

user32

MessageBoxW
CharPrevW
PeekMessageW
TranslateMessage
DispatchMessageW
FindWindowExW
GetDlgItem
SendMessageW
wsprintfW

Exports

Exports

Unzip
UnzipToLog
UnzipToStack
extract_RunDLL

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Plugins/registry.dll
.dll windows:4 windows x86 arch:x86

f450890bf454de37198f435d5832e67d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
lstrcpyW
FindClose
FindFirstFileW
lstrcmpW
GetFileSize
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
WriteFile
CloseHandle
lstrlenW
lstrcpynW
lstrcmpiW
lstrcatW
GlobalAlloc
ReadFile
GlobalFree

user32

wsprintfW
CharUpperW
SendMessageW
FindWindowExW
GetDlgItem

advapi32

RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegCloseKey

Exports

Exports

_Close
_CopyKey
_CopyValue
_CreateKey
_DeleteKey
_DeleteKeyEmpty
_DeleteValue
_Find
_HexToStr
_HexToStrUTF16LE
_KeyExists
_MoveKey
_MoveValue
_Open
_Read
_ReadExtra
_RestoreKey
_SaveKey
_StrToHex
_StrToHexUTF16LE
_Unload
_Write
_WriteExtra

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Plugins/w7tbp.dll
.dll windows:4 windows x86 arch:x86

fdb9d529772752ac356e92b3e3221b71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetWindowLongA
SendMessageA
FindWindowExA
CallWindowProcA

ole32

CoCreateInstance

Exports

Exports

Start

Sections

.text
Size: 1024B - Virtual size: 738B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Stubs/bzip2
.exe windows:5 windows x86 arch:x86

bf95d1fc1d10de18b32654b123ad5e1f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Stubs/bzip2_solid
.exe windows:5 windows x86 arch:x86

b729b61eb1515fcf7b3e511e4e66258b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Stubs/lzma
.exe windows:5 windows x86 arch:x86

bf95d1fc1d10de18b32654b123ad5e1f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Stubs/lzma_solid
.exe windows:5 windows x86 arch:x86

b729b61eb1515fcf7b3e511e4e66258b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Stubs/uninst
PortableApps.comInstaller/App/nsis/Stubs/zlib
.exe windows:5 windows x86 arch:x86

bf95d1fc1d10de18b32654b123ad5e1f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/Stubs/zlib_solid
.exe windows:5 windows x86 arch:x86

b729b61eb1515fcf7b3e511e4e66258b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PortableApps.comInstaller/App/nsis/makensis.exe
.exe windows:5 windows x86 arch:x86

c9567090e81c8dfed6e0d3e495003366

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
GetTextExtentPoint32W
SelectObject
CreateFontIndirectW
CreateCompatibleDC
GetObjectW
DeleteDC

user32

SendMessageW
CharNextW
wsprintfW
CharPrevW
IsWindow
GetDC
MapDialogRect
DestroyWindow
CreateDialogIndirectParamW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

kernel32

CompareStringA
GetProcessHeap
SetEndOfFile
CreateFileA
SetEnvironmentVariableA
CompareStringW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GlobalAlloc
MultiByteToWideChar
GlobalFree
ResetEvent
CloseHandle
WaitForSingleObject
SetEvent
WaitForMultipleObjects
CreateThread
CreateEventW
GetModuleHandleW
FindClose
FindNextFileW
FindFirstFileW
IsValidCodePage
OpenEventW
SetPriorityClass
GetCurrentProcess
WideCharToMultiByte
CreateFileMappingW
CreateFileW
GetTempFileNameW
GetTempPathW
MapViewOfFile
UnmapViewOfFile
FlushViewOfFile
GetSystemInfo
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
GetFileSize
CreateProcessW
SetLastError
GetLastError
GetFullPathNameW
GetModuleFileNameW
GetExitCodeProcess
Sleep
ReadFile
PeekNamedPipe
LocalFree
FormatMessageW
GetStartupInfoW
CreatePipe
lstrcatW
lstrcpyW
lstrlenW
GetVersionExW
VirtualAlloc
VirtualFree
GetProcAddress
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
WriteConsoleW
GetFileType
GetStdHandle
DeleteFileW
HeapAlloc
HeapReAlloc
ExitProcess
SetConsoleCtrlHandler
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetCPInfo
WriteFile
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapCreate
GetACP
GetOEMCP
LoadLibraryW
SetHandleCount
GetStartupInfoA
SetFilePointer
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleHandleA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapSize
SetStdHandle
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetLocaleInfoA

Sections

.text
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PortableApps.comInstaller/App/nsis/nsisconf.nsh
PortableApps.comInstaller/Other/Help/images/donation_button.png
.png
PortableApps.comInstaller/Other/Help/images/favicon.ico
PortableApps.comInstaller/Other/Help/images/help_background_footer.png
.png
PortableApps.comInstaller/Other/Help/images/help_background_header.png
.png
PortableApps.comInstaller/Other/Help/images/help_logo_top.png
.png
PortableApps.comInstaller/Other/Source/InstallerWizard.nsi
PortableApps.comInstaller/Other/Source/InstallerWizardForm.ini
PortableApps.comInstaller/Other/Source/License.txt
PortableApps.comInstaller/Other/Source/MoveFiles.nsh
PortableApps.comInstaller/Other/Source/ReadINIStrWithDefault.nsh
PortableApps.comInstaller/Other/Source/Readme.txt
PortableApps.comInstaller/Other/Source/header.bmp
PortableApps.comInstaller/Other/Source/welcomefinish.bmp
PortableApps.comInstaller/PortableApps.comInstaller.exe
.exe windows:5 windows x86 arch:x86

b729b61eb1515fcf7b3e511e4e66258b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:35:26:a1:ca:b8:a8:d6:92:6e:ff:44:e1:33:23:8b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

16/02/2010, 00:00

Not After

16/02/2011, 23:59

Subject

CN=Rare Ideas\, LLC,O=Rare Ideas\, LLC,POSTALCODE=10009,STREET=PO Box 227,L=New York,ST=NY,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:54:78:b1:7a:04:bd:1e:77:70:c9:42:be:29:36:fd:4c:21:02:22
Signer

Actual PE Digest

62:54:78:b1:7a:04:bd:1e:77:70:c9:42:be:29:36:fd:4c:21:02:22

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 948KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:5 windows x86 arch:x86

cd90e33ffbc335413a25300c682c83df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GetModuleHandleW
GlobalLock
GlobalUnlock
GetCurrentDirectoryW
SetCurrentDirectoryW
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrcatW
WritePrivateProfileStringW
lstrcpynW
lstrlenW
lstrcpyW
GlobalFree
GlobalAlloc

user32

OpenClipboard
DestroyIcon
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
SetWindowLongW
GetClientRect
SetWindowRgn
LoadIconW
LoadImageW
CreateWindowExW
MapDialogRect
GetClipboardData
GetWindowRect
CreateDialogParamW
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
SetCursor
DrawTextW
GetWindowLongW
DrawFocusRect
CallWindowProcW
PostMessageW
wsprintfW
CharNextW
MessageBoxW
CloseClipboard
GetDlgCtrlID
MapWindowPoints
SetWindowPos
PtInRect
GetWindowTextW
SetWindowTextW
SendMessageW
DestroyWindow

gdi32

SelectObject
CreateRectRgn
GetObjectW
CombineRgn
DeleteObject
CreateCompatibleDC
GetDIBits
SetTextColor

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
SHGetDesktopFolder

comdlg32

GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallerWizardForm.ini
$PLUGINSDIR/RealProgress.dll
.dll windows:4 windows x86 arch:x86

40ef229a0699916fd25edf8a5773ba29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CloseHandle
CreateThread
FindAtomA
GetAtomNameA
GlobalAlloc
GlobalFree
MultiByteToWideChar
Sleep
WideCharToMultiByte
lstrcmpiW
lstrcpyW
lstrcpynW

msvcrt

__dllonexit
_assert
_errno
abort
fflush
free
malloc
memset

user32

CallWindowProcW
CreateWindowExW
FindWindowExW
GetDlgItem
GetWindowLongW
GetWindowRect
GetWindowTextW
MapWindowPoints
RegisterWindowMessageW
SendMessageW
SetWindowLongW
ShowWindow
wsprintfW

Exports

Exports

AddProgress
DetailProgress
FileProgress
GetProgress
GradualProgress
SetProgress
Unload
UseProgressBar

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 239B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/dialogsEx.dll
.dll windows:4 windows x86 arch:x86

557640b8e9154ea0d56b33592889a90f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

t:\untgz\Joel_plugins_src\dialogsEx\dialogs\Release\dialogsEx.pdb

Imports

user32

IsWindowEnabled
LoadCursorW
GetParent
UnregisterClassW
RegisterClassExW
GetMessageW
GetWindowTextLengthW
DestroyWindow
SetFocus
GetWindowTextW
SetWindowLongW
GetDesktopWindow
ShowWindow
GetSysColorBrush
IsWindow
FindWindowExW
CreateWindowExW
GetSystemMetrics
wsprintfW
LoadIconW
TranslateMessage
SendMessageW
UpdateWindow
EnableWindow
SetWindowTextW
CallWindowProcW
DefWindowProcW
PostQuitMessage
DispatchMessageW

ole32

CoTaskMemFree
CoInitialize
CoUninitialize
CoTaskMemAlloc

gdi32

GetStockObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW

kernel32

HeapAlloc
GetProcessHeap
lstrcmpW
lstrlenW
HeapFree
GetModuleHandleW
GlobalAlloc
WideCharToMultiByte
lstrcpynW
MultiByteToWideChar
GlobalFree
lstrcpyW

Exports

Exports

FileBox
FolderBox
InputBox
InputRegBox

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/execDos.dll
.dll windows:4 windows x86 arch:x86

b7d63cf7c246ad7d64d63276fee3c6df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
TerminateProcess
Sleep
lstrcatW
lstrcmpiW
ReadFile
GetExitCodeProcess
PeekNamedPipe
CreateFileW
FlushFileBuffers
WriteFile
lstrlenW
CloseHandle
CreateProcessW
DuplicateHandle
GetCurrentProcess
CreatePipe
GlobalAlloc
lstrcpynW
GetExitCodeThread
WaitForSingleObject
lstrcpyW
CreateThread

user32

wsprintfW
GetClassNameW
GetDlgItem
FindWindowExW
SendMessageW

Exports

Exports

exec
isdone
wait

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
PortableApps.comInstaller/help.html
.html

Sharing

General

Malware Config

Signatures

Files

6121a49841bf6f5b3700c1ebbb28be41

Headers

File Characteristics

Imports

user32

oleaut32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 520KB - Virtual size: 520KB

.rdata Size: 66KB - Virtual size: 65KB

.data Size: 18KB - Virtual size: 38KB

.rsrc Size: 76KB - Virtual size: 76KB

.reloc Size: 26KB - Virtual size: 26KB

6ff17e15b4dd569b039973ccf414da18

Headers

File Characteristics

Imports

user32

oleaut32

advapi32

msvcrt

kernel32

Sections

.text Size: 113KB - Virtual size: 112KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 9KB - Virtual size: 17KB

.rsrc Size: 1024B - Virtual size: 784B

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 156KB

UPX1 Size: 90KB - Virtual size: 92KB

.rsrc Size: 3KB - Virtual size: 4KB

Headers

File Characteristics

Sections

.text Size: 159KB - Virtual size: 159KB

.itext Size: 2KB - Virtual size: 1KB

.data Size: 18KB - Virtual size: 18KB

.bss Size: - Virtual size: 13KB

.idata Size: 4KB - Virtual size: 4KB

.tls Size: - Virtual size: 12B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 10KB - Virtual size: 9KB

.rsrc Size: 10KB - Virtual size: 10KB

9a85af73d971a230a5055d0a7e405934

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

version

kernel32

Sections

.text Size: 111KB - Virtual size: 111KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 6KB - Virtual size: 14KB

1785160af8c96b7bf447f84fc5f04a62

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comctl32

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 1KB - Virtual size: 1KB

cde62e7f485f127cc80c3ffdb9157507

Headers

.text
Size: 520KB - Virtual size: 520KB

.rdata
Size: 66KB - Virtual size: 65KB

.data
Size: 18KB - Virtual size: 38KB

.rsrc
Size: 76KB - Virtual size: 76KB

.reloc
Size: 26KB - Virtual size: 26KB

.text
Size: 113KB - Virtual size: 112KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 9KB - Virtual size: 17KB

.rsrc
Size: 1024B - Virtual size: 784B

UPX0
Size: - Virtual size: 156KB

UPX1
Size: 90KB - Virtual size: 92KB

.rsrc
Size: 3KB - Virtual size: 4KB

.text
Size: 159KB - Virtual size: 159KB

.itext
Size: 2KB - Virtual size: 1KB

.data
Size: 18KB - Virtual size: 18KB

.bss
Size: - Virtual size: 13KB

.idata
Size: 4KB - Virtual size: 4KB

.tls
Size: - Virtual size: 12B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 10KB - Virtual size: 10KB

.text
Size: 111KB - Virtual size: 111KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 6KB - Virtual size: 14KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 1KB - Virtual size: 1KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: - Virtual size: 7KB

.text
Size: 512B - Virtual size: 511B

.rdata
Size: 1024B - Virtual size: 752B

.data
Size: 512B - Virtual size: 48B

.rsrc
Size: 3KB - Virtual size: 2KB

.text
Size: 512B - Virtual size: 511B

.rdata
Size: 1024B - Virtual size: 752B

.data
Size: 512B - Virtual size: 48B

.rsrc
Size: 1024B - Virtual size: 608B

.text
Size: 512B - Virtual size: 511B

.rdata
Size: 1024B - Virtual size: 752B

.data
Size: 512B - Virtual size: 48B

.rsrc
Size: 1024B - Virtual size: 608B

.text
Size: 512B - Virtual size: 511B

.rdata
Size: 1024B - Virtual size: 752B

.data
Size: 512B - Virtual size: 48B

.rsrc
Size: 512B - Virtual size: 376B